@rebon/cli-linux-x64 1.1.5 → 1.3.0

package/bin/compose-runtime/payload/vendor/cordis/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2021-present Shigma
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bin/compose-runtime/payload/vendor/dsh/LICENSE-turndown

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2017 Dom Christie
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bin/compose-runtime/payload/vendor/dsh/LICENSE-turndown-plugin-gfm

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2017 Dom Christie
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bin/compose-runtime/payload/vendor/schemastery/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2021-present Shigma
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bin/plugin-host/src/json.mjs

@@ -89,8 +89,20 @@ class JsonParser {
         } else result += String.fromCharCode(first);
         continue;
       }
-      if (c.charCodeAt(0) < 0x20) this.#error('malformed_json', 'unescaped control character in JSON string');
-      if (c.charCodeAt(0) >= 0xd800 && c.charCodeAt(0) <= 0xdfff) this.#error('invalid_surrogate', 'lone surrogate in JSON string');
+      const unit = c.charCodeAt(0);
+      if (unit < 0x20) this.#error('malformed_json', 'unescaped control character in JSON string');
+      // The text is UTF-16, so a raw character outside the BMP (an emoji, as
+      // serde_json writes it unescaped) is two units here: a high surrogate
+      // followed by a low one. Only a half without its partner is invalid.
+      if (unit >= 0xd800 && unit <= 0xdbff) {
+        const next = this.text.charCodeAt(this.index);
+        if (next >= 0xdc00 && next <= 0xdfff) {
+          result += c + this.text[this.index++];
+          continue;
+        }
+        this.#error('invalid_surrogate', 'lone surrogate in JSON string');
+      }
+      if (unit >= 0xdc00 && unit <= 0xdfff) this.#error('invalid_surrogate', 'lone surrogate in JSON string');
       result += c;
     }
   }

package/bin/rebon

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/bin/rebon
-size: 57108928 bytes
-sha256: 2961c4a413b530c52ff8d78f5b795faa9e72bdfc944c37f0e87a6cedf13eb17d
+size: 59364832 bytes
+sha256: c910a60b56c2e114c9ad936905e06f1d3202a25cc26d319c1ffbbbac3c2f040d

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rebon/cli-linux-x64",
-  "version": "1.1.5",
+  "version": "1.3.0",
   "description": "Agent cli for coding and more.",
   "license": "UNLICENSED",
   "engines": {

package/bin/compose-runtime/payload/compose/credentials-runtime.js

@@ -1,38 +0,0 @@
-// dsh-compatible `ctx.credentials` seat for the composition host.
-//
-// dsh configuration carries credential *references* (environment-variable
-// names); the provider owns the values. This provider resolves a reference
-// through the kernel's fail-closed `credentials` JSON service (`resolveEnv`
-// runs the `credentials/authorize` waterfall before touching the
-// environment), so an unauthorized or unset reference is simply "absent" —
-// the consumer's own missing-credential diagnosis then fires (dsh-llm's
-// `MISSING_CREDENTIAL`), instead of this seat inventing one.
-import { Service } from 'cordis';
-import { callService } from 'rebon';
-
-export default class RebonCredentials extends Service {
-  constructor(ctx) {
-    super(ctx, 'credentials');
-  }
-
-  /** dsh CredentialProvider.resolve: `{value, source}` or undefined. */
-  async resolve(ref) {
-    try {
-      const out = callService('credentials', 'resolveEnv', { ref: String(ref) });
-      const value = out?.value;
-      if (typeof value === 'string' && value.length > 0) {
-        return { value, source: 'env' };
-      }
-    } catch {
-      // Fail-closed kernel refusal (no authorizer, unset variable, bad ref)
-      // all read as "not configured here".
-    }
-    return undefined;
-  }
-
-  /** dsh CredentialProvider.describe: facts only, never the value. */
-  async describe(ref) {
-    const hit = await this.resolve(ref);
-    return { configured: hit !== undefined, ...(hit ? { source: hit.source } : {}), writable: false };
-  }
-}

package/bin/compose-runtime/payload/compose/llm-runtime.js

@@ -1,330 +0,0 @@
-// Minimal dsh-compatible `ctx.llm` seat for the composition host.
-//
-// API shape follows dsh packages/llm: adapters extend `LlmAdapter` (only
-// `stream(options)` is required) and register with
-// `ctx.llm.registerAdapter(providers, adapter)`. Each registered route is
-// mirrored into the kernel's model-router table (catalog fetched via the
-// adapter's advisory `listModels`), and `llm/adapter-registered` /
-// `llm/adapter-unregistered` kernel events let the Rust side bind this
-// composition as the route's stream host. Model requests arrive over the
-// host's llm ops (`op_llm_next`) and are dispatched to the owning adapter;
-// cancellation aborts the per-request AbortController.
-import { Service } from 'cordis';
-import { callService, emit } from 'rebon';
-import {
-  LlmError,
-  deepFreeze,
-  callConfigEquals,
-  errorChain,
-  resolveRetryPolicy,
-} from './shims/dsh-llm.js';
-// The base class every provider plugin extends. Re-exported here because
-// that is where dsh consumers have always imported it from; it is defined
-// apart from this module so importing it does not drag a host's transport in.
-export { LlmAdapter } from './shims/llm-adapter.js';
-
-const core = globalThis.Deno.core;
-
-/**
- * Normalize an adapter throw into dsh's terminal finish chunk
- * (`adapterFailureChunk`, transcribed lean: LlmError keeps its facts,
- * anything else flattens under UNKNOWN — the same rule the loop itself
- * applies at its turn boundary).
- */
-function failureChunk(error, signal) {
-  const failure = error instanceof LlmError
-    ? error.failure
-    : { message: errorChain(error), code: 'UNKNOWN' };
-  return {
-    type: 'finish',
-    reason: signal?.aborted || failure.code === 'ABORTED'
-      ? { kind: 'aborted', failure }
-      : { kind: 'error', failure },
-  };
-}
-
-
-export default class RebonLlmRuntime extends Service {
-  constructor(ctx, config) {
-    super(ctx, 'llm');
-    this.routes = new Map(); // provider -> adapter
-    this.aborts = new Map(); // stream id -> AbortController
-    // Per-loop hosts serve only in-composition consumers: no process-plane
-    // mirror, no adapter events (a process binding acting on them would
-    // tear down routes the shared composition still serves).
-    this.announce = config?.announce !== false;
-    void this._pump();
-  }
-
-  registerAdapter(providers, adapter) {
-    if (!providers?.length) {
-      throw new Error('an adapter must register at least one provider');
-    }
-    for (const provider of providers) {
-      if (this.routes.has(provider)) {
-        throw new Error(`an adapter for provider "${provider}" is already registered`);
-      }
-    }
-    const runtime = this;
-    // Owner captured in the synchronous half: _announce runs async, and
-    // by then the registering context must already be pinned down.
-    const owner = this.ctx[Symbol.for('rebon.composeOwner')] ?? '';
-    this.ctx.effect(() => {
-      for (const provider of providers) {
-        runtime.routes.set(provider, adapter);
-        if (runtime.announce) void runtime._announce(provider, adapter, owner);
-      }
-      return () => {
-        for (const provider of providers) {
-          runtime.routes.delete(provider);
-          if (!runtime.announce) continue;
-          try {
-            callService('model-router', 'unregister', { provider });
-          } catch {}
-          emit('llm/adapter-unregistered', { provider });
-        }
-      };
-    });
-    // dsh handle shape: route replacement exists on it, but a static
-    // composition never re-reads registration facts, so a call here is a
-    // consumer bug — refuse loudly instead of silently diverging from dsh.
-    return {
-      providers: [...providers],
-      replace() {
-        throw new Error('adapter route replacement is not supported in a static composition');
-      },
-    };
-  }
-
-  /**
-   * dsh surfaces these entries to its settings UI. The embedded runtime has
-   * no such surface; record them so diagnostics can list what a composition
-   * declared, and accept the call so unmodified dsh plugins load.
-   */
-  registerConfigurableProviders(entries) {
-    this.configurableProviders ??= [];
-    for (const entry of entries ?? []) {
-      if (entry?.provider) {
-        this.configurableProviders.push({
-          provider: String(entry.provider),
-          displayName: entry.displayName === undefined ? undefined : String(entry.displayName),
-        });
-      }
-    }
-  }
-
-  // ---- JS consumer face (loop round) ----
-  //
-  // The pump below serves REQUESTS FROM RUST; the two methods here serve
-  // consumers INSIDE the composition (the agent loop). Routing is the same
-  // in-JS adapter table. v1 honesty boundary: no `llm/stream` middleware
-  // waterfall — dispatch goes straight to the owning adapter.
-
-  /** Resolve the owning adapter or refuse with dsh's NO_ADAPTER code. */
-  _registration(provider) {
-    const adapter = this.routes.get(provider);
-    if (!adapter) {
-      throw new LlmError(`no adapter registered for provider "${provider}"`, 'NO_ADAPTER');
-    }
-    return adapter;
-  }
-
-  /**
-   * dsh `LlmRuntime.prepareCall`, transcribed: resolve the route's exact
-   * model, materialize adapter defaults (recorded in `adapterDefaults` so
-   * the loop's request header can re-resolve them later), and hand back a
-   * one-shot stream bound to this registration.
-   */
-  async prepareCall(config, signal) {
-    const adapter = this._registration(config.provider);
-    const info = (await adapter.resolveModel(config.provider, config.model)) ?? {};
-    signal?.throwIfAborted?.();
-    const defaulted = config.maxTokens === undefined && info.defaultMaxTokens !== undefined
-      ? { ...config, maxTokens: info.defaultMaxTokens }
-      : config;
-    const reasoning = info.reasoning;
-    const requested = defaulted.reasoningEffort;
-    let resolvedConfig = defaulted;
-    if (reasoning === undefined) {
-      if (requested !== undefined) {
-        throw new LlmError(
-          `provider "${config.provider}" model "${config.model}" does not support reasoning effort "${requested}"`,
-          'UNSUPPORTED_REASONING_EFFORT',
-        );
-      }
-    } else {
-      const effective = requested ?? reasoning.defaultEffort;
-      if (effective !== undefined) {
-        if (!(reasoning.efforts ?? []).some((effort) => effort.id === effective)) {
-          throw new LlmError(
-            `provider "${config.provider}" model "${config.model}" does not support reasoning effort "${effective}"`,
-            'UNSUPPORTED_REASONING_EFFORT',
-          );
-        }
-        if (requested !== effective) resolvedConfig = { ...defaulted, reasoningEffort: effective };
-      }
-    }
-    const frozen = deepFreeze(structuredClone(resolvedConfig));
-    const context = info.context === undefined
-      ? undefined
-      : deepFreeze(structuredClone(info.context));
-    const adapterDefaults = deepFreeze({
-      ...(config.reasoningEffort === undefined && frozen.reasoningEffort !== undefined
-        ? { reasoningEffort: true }
-        : {}),
-      ...(config.maxTokens === undefined && frozen.maxTokens !== undefined
-        ? { maxTokens: true }
-        : {}),
-    });
-    const runtime = this;
-    let dispatched = false;
-    return Object.freeze({
-      config: frozen,
-      // dsh contract: providerRetryPolicy returns an ALREADY-RESOLVED
-      // policy (or undefined for the normal defaults) — never re-resolve.
-      retryPolicy: adapter.providerRetryPolicy(config.provider)
-        ?? resolveRetryPolicy(undefined, `llm: provider "${config.provider}" retryPolicy`),
-      adapterDefaults,
-      ...(context === undefined ? {} : { context }),
-      stream(options) {
-        if (dispatched) {
-          throw new LlmError('a prepared LLM call can only be dispatched once', 'INVALID_PREPARED_CALL');
-        }
-        if (!callConfigEquals(options, frozen)) {
-          throw new LlmError('prepared LLM call config changed before adapter dispatch', 'INVALID_PREPARED_CALL');
-        }
-        dispatched = true;
-        return runtime._consumerStream(options);
-      },
-    });
-  }
-
-  /** Consumer fallback entry (the loop's NO_ADAPTER path): direct dispatch. */
-  stream(options) {
-    return this._consumerStream(options);
-  }
-
-  /**
-   * Adapter boundary for in-composition consumers: selection, dispatch, and
-   * iteration failures become one terminal failure chunk (dsh
-   * `adapterStream` semantics) so the loop's assembler/request-error path
-   * sees them instead of a raw throw.
-   */
-  async *_consumerStream(options) {
-    let iterator;
-    try {
-      const adapter = this._registration(options.provider);
-      iterator = adapter.stream(options)[Symbol.asyncIterator]();
-    } catch (error) {
-      yield failureChunk(error, options.signal);
-      return;
-    }
-    while (true) {
-      let item;
-      try {
-        item = await iterator.next();
-      } catch (error) {
-        yield failureChunk(error, options.signal);
-        return;
-      }
-      if (item.done) return;
-      yield item.value;
-    }
-  }
-
-  /**
-   * Mirror one route into the kernel table, catalog included (advisory).
-   *
-   * `listModels` is an adapter call that can take as long as a network
-   * round-trip, and an unload may complete inside that await — the effect's
-   * disposer having already issued the compensating `unregister`. Announcing
-   * afterwards would resurrect the route of a plugin that is gone, with
-   * nothing left to tear it down. The route table is the liveness witness:
-   * the disposer deletes this provider's entry, so anything but our own
-   * adapter still sitting there means the registration we are announcing is
-   * no longer the live one.
-   */
-  async _announce(provider, adapter, owner = '') {
-    let models = [];
-    try {
-      models = (await adapter.listModels(provider)) ?? [];
-    } catch {}
-    if (this.routes.get(provider) !== adapter) return;
-    const entries = models
-      .filter((m) => m?.id)
-      .map((m) => ({ id: m.id, contextWindow: m.context?.window ?? m.contextWindow }));
-    try {
-      callService('model-router', 'register', {
-        provider,
-        models: entries,
-        // The catalog is advisory (dsh semantics): with an empty one the
-        // route still exists and callers name models explicitly; "default"
-        // is only the resolve fallback for bare `{provider}` lookups.
-        defaultModel: entries[0]?.id ?? 'default',
-      }, owner);
-    } catch (e) {
-      emit('llm/adapter-error', { provider, error: String(e?.message ?? e) });
-      return;
-    }
-    emit('llm/adapter-registered', { provider });
-  }
-
-  /** Host instruction loop: dispatch requests, abort on cancel. */
-  async _pump() {
-    while (true) {
-      const instr = JSON.parse(await core.ops.op_llm_next());
-      if (instr.closed) break;
-      if (instr.kind === 'cancel') {
-        this.aborts.get(instr.id)?.abort();
-        continue;
-      }
-      void this._dispatch(instr.id, instr.request);
-    }
-  }
-
-  async _dispatch(id, request) {
-    const send = (obj) => core.ops.op_llm_emit(id, JSON.stringify(obj));
-    const adapter = this.routes.get(request.provider);
-    if (!adapter) {
-      send({ err: `no adapter registered for provider route "${request.provider}"` });
-      return;
-    }
-    const controller = new AbortController();
-    this.aborts.set(id, controller);
-    try {
-      const options = {
-        provider: request.provider,
-        model: request.model,
-        messages: request.messages ?? [],
-        system: request.system ?? undefined,
-        tools: request.tools ?? undefined,
-        maxTokens: request.maxTokens ?? undefined,
-        temperature: request.temperature ?? undefined,
-        stop: request.stop ?? undefined,
-        reasoningEffort: request.reasoningEffort ?? undefined,
-        sessionId: request.sessionId ?? undefined,
-        purpose: request.purpose ?? undefined,
-        signal: controller.signal,
-      };
-      for await (const chunk of adapter.stream(options)) {
-        send({ chunk });
-      }
-      send({ done: true });
-    } catch (e) {
-      // dsh contract: an adapter may throw on abort; normalize either way.
-      if (controller.signal.aborted) {
-        send({ chunk: { type: 'finish', reason: 'aborted' } });
-        send({ done: true });
-      } else {
-        // LlmError carries a stable machine code beside the message —
-        // surface it so the Rust side can route/report on it.
-        send({
-          err: String(e?.message ?? e),
-          ...(typeof e?.code === 'string' && e.code.length > 0 ? { code: e.code } : {}),
-        });
-      }
-    } finally {
-      this.aborts.delete(id);
-    }
-  }
-}

package/bin/compose-runtime/payload/compose/loop-assembly.js

@@ -1,149 +0,0 @@
-// rebon-loop-assembly: the composition-side glue that lets the REAL
-// dsh-agent-loop drive a turn inside this isolate (assembly doc:
-// docs/dsh-agent-loop-assembly.md §4).
-//
-// Three duties, all rebon-owned (the dsh packages stay unmodified):
-//  1. Tool-schema supply: registers a dsh systemPrompt tool provider that
-//     merges the composition's own registered definitions with the R5 core
-//     seat catalog (describeTools) — the same two sources the tools seat's
-//     scheduler dispatches into, so model-visible and dispatchable stay in
-//     step (local definition shadows a seat name in BOTH places).
-//  2. Observability: relays every dsh `session/event` (chunks included —
-//     the embedder's session face streams from them) and `agent/error`
-//     onto the kernel event plane (`loop:event` / `loop:agent-error`),
-//     stamped with the embedder's `tag` so co-resident loop hosts stay
-//     distinguishable.
-//  3. Drive: `loop:control` serve target (followup/steer/cancel/status)
-//     is the embedder's inbound face; config `{kickoff: "..."}` remains as
-//     an e2e self-drive convenience.
-import { emit, describeTools, logger } from 'rebon';
-import { createUserMessage, errorChain } from '@deepseek-ai/dsh-llm';
-import { registerServeTarget } from './serve-dispatch.js';
-
-/** Best-effort warn: the kernel logger seat is optional (tools-runtime rule). */
-function warn(message) {
-  try {
-    logger.warn(message);
-  } catch {
-    console.warn(message);
-  }
-}
-
-export const name = 'rebon-loop-assembly';
-export const inject = ['systemPrompt', 'tools'];
-
-export async function apply(ctx, config = {}) {
-  // Embedder-chosen discriminator: with several loop hosts in one process,
-  // every relayed event carries the owning host's tag so kernel-plane
-  // subscribers can tell their loop apart.
-  const tag = typeof config.tag === 'string' && config.tag.length > 0 ? config.tag : undefined;
-  const stamp = (payload) => (tag === undefined ? payload : { tag, ...payload });
-  // Optional prompt contribution into the loop realm's REAL dsh
-  // systemPrompt (this is the loop's own prompt plane, not rebon's P2.8
-  // seat — the isolate keeps them apart).
-  if (config.section !== undefined && config.section !== null && typeof config.section === 'object') {
-    ctx.systemPrompt.section(config.section);
-  }
-
-  let seatSchemas = [];
-  try {
-    const catalog = await describeTools();
-    seatSchemas = (Array.isArray(catalog) ? catalog : []).map((tool) => ({
-      name: tool.name,
-      description: String(tool.description ?? ''),
-      parameters: tool.inputSchema ?? { type: 'object' },
-    }));
-  } catch (error) {
-    // An unbound tool plane is a legal composition (prompt-only loop); the
-    // schemas face is then just the composition's own registrations.
-    warn(`loop-assembly: R5 seat catalog unavailable: ${String(error?.message ?? error)}`);
-  }
-
-  ctx.systemPrompt.tools(() => {
-    const merged = new Map();
-    for (const schema of seatSchemas) merged.set(schema.name, schema);
-    for (const [toolName, def] of ctx.tools.defs) {
-      merged.set(toolName, {
-        name: toolName,
-        description: String(def.description ?? ''),
-        parameters: def.parameters ?? { type: 'object' },
-      });
-    }
-    return { schemas: [...merged.values()] };
-  });
-
-  // Full-fidelity relay: the dsh session log IS the loop's truth, and the
-  // embedder's session face (streaming UI, transcript projection) needs
-  // every event — chunks included.
-  ctx.on('session/event', (session, event) => {
-    emit('loop:event', stamp({
-      sessionId: String(session.id),
-      seq: event.seq,
-      type: event.type,
-      data: event.data ?? null,
-    }));
-  });
-
-  ctx.on('agent/error', (payload) => {
-    emit('loop:agent-error', stamp({
-      agentId: String(payload.agent?.id ?? ''),
-      turn: payload.turn,
-      step: payload.step,
-      error: errorChain(payload.error),
-    }));
-  });
-
-  const live = new Map();
-  const kicked = new Set();
-  ctx.on('agent/created', ({ agent }) => {
-    live.set(String(agent.id), agent);
-    emit('loop:agent-created', stamp({ agentId: String(agent.id) }));
-    const kickoff = config.kickoff;
-    if (typeof kickoff !== 'string' || kickoff.length === 0) return;
-    if (kicked.has(agent.id)) return;
-    kicked.add(agent.id);
-    agent.followup(createUserMessage({
-      content: [{ type: 'text', text: kickoff }],
-      source: { kind: 'user' },
-    }));
-  });
-  ctx.on('agent/disposed', ({ agent }) => {
-    live.delete(String(agent.id));
-  });
-
-  // Inbound control face: the embedder drives the loop over the serve
-  // plane (request/response — the same plane rebon uses to call
-  // composition tools). Commands address the single configured agent by
-  // default, or a specific one via `agentId`.
-  const resolveAgent = (input) => {
-    if (typeof input?.agentId === 'string') return live.get(input.agentId);
-    if (live.size === 1) return live.values().next().value;
-    return undefined;
-  };
-  const userMessage = (text) => createUserMessage({
-    content: [{ type: 'text', text: String(text) }],
-    source: { kind: 'user' },
-  });
-  registerServeTarget('loop:control', (input) => {
-    const agent = resolveAgent(input);
-    if (agent === undefined) {
-      const known = [...live.keys()];
-      throw new Error(`loop:control: no live agent${input?.agentId ? ` "${input.agentId}"` : ''} (live: ${known.join(', ') || '(none)'})`);
-    }
-    switch (input?.kind) {
-      case 'followup':
-        agent.followup(userMessage(input.text ?? ''));
-        return { accepted: true, agentId: String(agent.id) };
-      case 'steer':
-        agent.steer(userMessage(input.text ?? ''));
-        return { accepted: true, agentId: String(agent.id) };
-      case 'cancel':
-        agent.cancel({ kind: 'user' });
-        return { accepted: true, agentId: String(agent.id) };
-      case 'status':
-        return { agentId: String(agent.id), status: agent.status };
-      default:
-        throw new Error(`loop:control: unknown command kind ${JSON.stringify(input?.kind)}`);
-    }
-  });
-}