@vibesdotdev/external 0.0.0-stage → 1.0.0-rc.0

package/dist/harness/live-tools.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Live tool catalog for foreign hosts.
+ *
+ * The runtime's `tools/tool` registry is the only catalog. This module is the
+ * single shared projection hosts use to enumerate it: normalize one registry
+ * descriptor (warm-socket query or `vibes tools list --format json` row) into
+ * host-neutral tool data, and fetch that data over the CLI transport. Host
+ * adapters (Pi, OpenCode) add only their own registration mechanics on top;
+ * they never keep a tool list of their own.
+ */
+import * as z from 'zod/v4';
+import type { RunVibesFn, RunVibesSyncFn, RunVibesOptions } from '@vibesdotdev/cli-contracts';
+import type { RuntimeHardware, RuntimePurpose, RuntimeScope } from '@vibesdotdev/kernel/schemas/scope';
+import type { RuntimeInvokeCaller } from '@vibesdotdev/kernel/schemas/invoke-caller';
+/** A JSON value as a registry descriptor carries it. */
+declare const LiveJsonSchema: z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>;
+export type LiveJson = z.output<typeof LiveJsonSchema>;
+/**
+ * Structural descriptor subset a host projection consumes. Satisfied by
+ * warm-socket `tools/tool` descriptors and by CLI `tools list` JSON rows;
+ * both are just views over the same registry.
+ */
+export declare const LiveToolDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    mcpDescription: z.ZodOptional<z.ZodString>;
+    inputSchema: z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+    schemas: z.ZodOptional<z.ZodObject<{
+        input: z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+        output: z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+        actionSafety: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$loose>>;
+    safety: z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+    requiresApproval: z.ZodOptional<z.ZodBoolean>;
+    purpose: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    source: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+export type LiveToolDescriptor = z.output<typeof LiveToolDescriptorSchema>;
+export type LiveToolSchemaSource = 'runtime-schema' | 'open-object';
+/** A published object JSON Schema: `type: "object"` and whatever else it declares. */
+declare const ObjectJsonSchemaSchema: z.ZodObject<{
+    type: z.ZodLiteral<"object">;
+}, z.core.$catchall<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>;
+export type LiveToolInputSchema = z.output<typeof ObjectJsonSchemaSchema>;
+export type NormalizedLiveTool = {
+    id: string;
+    label: string;
+    description: string;
+    inputSchema: LiveToolInputSchema;
+    /** The runtime's published output schema, when the tool has one; a host that supports structured output projects it. */
+    outputSchema?: LiveJson;
+    schemaSource: LiveToolSchemaSource;
+    safety?: LiveJson;
+    requiresApproval?: boolean;
+    schemas?: {
+        actionSafety?: Record<string, string>;
+    };
+};
+/**
+ * One registry descriptor becomes one host-neutral tool. Prefers the
+ * registry-published input schema (the same projection the native agent loop
+ * uses); degrades to an open object and says so in the description rather
+ * than silently accepting anything.
+ */
+export declare function normalizeLiveTool(descriptor: LiveToolDescriptor): NormalizedLiveTool;
+export type LiveToolCatalogOptions = Pick<RunVibesOptions, 'cwd' | 'signal' | 'env' | 'hostEnv'> & {
+    purpose?: RuntimePurpose;
+    hardware?: RuntimeHardware;
+    caller?: RuntimeInvokeCaller;
+};
+/**
+ * The hardware a runtime's host declared. Hardware is read from the declared
+ * scope, never guessed from the environment; a host with no runtime passes no
+ * hardware and the child CLI answers from its own declaration.
+ */
+export declare function resolveExternalRuntimeHardware(runtime: {
+    readonly declaredScope: Pick<RuntimeScope, 'hardware'>;
+}): RuntimeHardware;
+/** Project caller and hardware identity into child CLI processes. */
+export declare function withExternalHostEnvironment(environment?: Readonly<Record<string, string | undefined>>, context?: {
+    hardware?: RuntimeHardware;
+    caller?: RuntimeInvokeCaller;
+    env?: Record<string, string | undefined>;
+}): {
+    [x: string]: string | undefined;
+};
+/** A host tool call's input as the projection reads it: a JSON object. */
+export declare const HostToolInputSchema: z.ZodReadonly<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>>;
+export type HostToolInput = z.infer<typeof HostToolInputSchema>;
+/**
+ * One approval decision for every native host projection. Only a declared
+ * `read` safety (the selected action's, else the tool's) runs unapproved; a
+ * missing or unrecognised declaration requires approval.
+ */
+export declare function requiresExternalHostApproval(descriptor: Pick<LiveToolDescriptor, 'id' | 'safety' | 'requiresApproval' | 'schemas'>, input?: HostToolInput): boolean;
+/** Apply the host's scope and identity to the canonical CLI fallback path. */
+export declare function withExternalHostToolContext(argv: string[], context: {
+    purpose?: RuntimePurpose;
+    hardware?: RuntimeHardware;
+    caller?: RuntimeInvokeCaller;
+    env?: Record<string, string | undefined>;
+}): string[];
+export type LiveCatalogSkipped = {
+    id: string;
+    reason: string;
+};
+export type LiveCatalogResult = {
+    tools: LiveToolDescriptor[];
+    skipped: LiveCatalogSkipped[];
+};
+/**
+ * Parse `vibes tools list --format json` stdout. `--format json` promises one
+ * parseable document: a row array on success. Anything else is a loud, typed
+ * failure, never an empty catalog masquerading as truth.
+ */
+export declare function parseLiveToolsOutput(stdout: string): LiveCatalogResult;
+/** Synchronous variant for hosts that register before they can await. */
+export declare function fetchLiveToolsViaCliSync(run: RunVibesSyncFn, options: LiveToolCatalogOptions): LiveCatalogResult;
+/**
+ * Ask the local CLI for the live registry. Fails closed with an actionable
+ * typed error; hosts register nothing on failure rather than a stale subset.
+ */
+export declare function fetchLiveToolsViaCli(run: RunVibesFn, options: LiveToolCatalogOptions): Promise<LiveCatalogResult>;
+/** Read a catalog row through the descriptor schema; `undefined` when it is not one. */
+export declare function parseLiveToolDescriptor(row: LiveJson): LiveToolDescriptor | undefined;
+export {};
+//# sourceMappingURL=live-tools.d.ts.map

package/dist/harness/live-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-tools.d.ts","sourceRoot":"","sources":["../../src/harness/live-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAkB,MAAM,4BAA4B,CAAC;AAC9G,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACvG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF,wDAAwD;AACxD,QAAA,MAAM,cAAc,iPAAkB,CAAC;AACvC,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAKvD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;iBAsB5B,CAAC;AACV,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE3E,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEpE,sFAAsF;AACtF,QAAA,MAAM,sBAAsB;;qQAAmE,CAAC;AAChG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE1E,MAAM,MAAM,kBAAkB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,mBAAmB,CAAC;IACjC,wHAAwH;IACxH,YAAY,CAAC,EAAE,QAAQ,CAAC;IACxB,YAAY,EAAE,oBAAoB,CAAC;IACnC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;CACpD,CAAC;AASF;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,GAAG,kBAAkB,CAsBpF;AAED,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,eAAe,EAAE,KAAK,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC,GAAG;IAClG,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE;IAAE,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;CAAE,GACjE,eAAe,CAEjB;AAED,qEAAqE;AACrE,wBAAgB,2BAA2B,CAC1C,WAAW,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAM,EAC9D,OAAO,GAAE;IACR,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACpC;;EAgBN;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,ySAA6D,CAAC;AAC9F,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAgBhE;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC3C,UAAU,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,QAAQ,GAAG,kBAAkB,GAAG,SAAS,CAAC,EACtF,KAAK,GAAE,aAAkB,GACvB,OAAO,CAQT;AAED,8EAA8E;AAC9E,wBAAgB,2BAA2B,CAC1C,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IACR,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACzC,GACC,MAAM,EAAE,CAmBV;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,iBAAiB,GAAG;IAC/B,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC9B,CAAC;AAgBF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAiCtE;AAyBD,yEAAyE;AACzE,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,GAAG,iBAAiB,CAMhH;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACzC,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAK5B;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,QAAQ,GAAG,kBAAkB,GAAG,SAAS,CAErF"}

package/dist/harness/live-tools.js

@@ -0,0 +1,257 @@
+/**
+ * Live tool catalog for foreign hosts.
+ *
+ * The runtime's `tools/tool` registry is the only catalog. This module is the
+ * single shared projection hosts use to enumerate it: normalize one registry
+ * descriptor (warm-socket query or `vibes tools list --format json` row) into
+ * host-neutral tool data, and fetch that data over the CLI transport. Host
+ * adapters (Pi, OpenCode) add only their own registration mechanics on top;
+ * they never keep a tool list of their own.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+/** A JSON value as a registry descriptor carries it. */
+const LiveJsonSchema = JsonValueSchema;
+/** Per-action safety classes a descriptor publishes. */
+const ActionSafetySchema = z.record(z.string(), z.string());
+/**
+ * Structural descriptor subset a host projection consumes. Satisfied by
+ * warm-socket `tools/tool` descriptors and by CLI `tools list` JSON rows;
+ * both are just views over the same registry.
+ */
+export const LiveToolDescriptorSchema = z
+    .object({
+    id: z.string(),
+    name: z.string().optional(),
+    description: z.string().optional(),
+    /** MCP-specific one-liner; external native hosts use the canonical description. */
+    mcpDescription: z.string().optional(),
+    /** Published input JSON Schema (CLI rows project it via `tools list`). */
+    inputSchema: LiveJsonSchema.optional(),
+    /** Registry-published schemas (socket descriptors). */
+    schemas: z
+        .object({ input: LiveJsonSchema.optional(), output: LiveJsonSchema.optional(), actionSafety: ActionSafetySchema.optional() })
+        .loose()
+        .optional(),
+    safety: LiveJsonSchema.optional(),
+    requiresApproval: z.boolean().optional(),
+    purpose: z.array(z.string()).optional(),
+    hardware: z.array(z.string()).optional(),
+    enabled: z.boolean().optional(),
+    /** CLI list rows tag their origin; `ai/tool` rows are not invokable. */
+    source: z.string().optional()
+})
+    .loose();
+/** A published object JSON Schema: `type: "object"` and whatever else it declares. */
+const ObjectJsonSchemaSchema = z.object({ type: z.literal('object') }).catchall(LiveJsonSchema);
+/** A string with something other than whitespace, trimmed. */
+const NonBlankSchema = z.string().trim().min(1);
+function nonBlank(value) {
+    return NonBlankSchema.safeParse(value).data;
+}
+/**
+ * One registry descriptor becomes one host-neutral tool. Prefers the
+ * registry-published input schema (the same projection the native agent loop
+ * uses); degrades to an open object and says so in the description rather
+ * than silently accepting anything.
+ */
+export function normalizeLiveTool(descriptor) {
+    const id = descriptor.id.trim();
+    const label = nonBlank(descriptor.name) ?? id;
+    const published = [descriptor.inputSchema, descriptor.schemas?.input]
+        .map((candidate) => ObjectJsonSchemaSchema.safeParse(candidate).data)
+        .find((schema) => schema !== undefined);
+    const description = nonBlank(descriptor.mcpDescription) ?? nonBlank(descriptor.description) ?? id;
+    const tool = published
+        ? { id, label, description, inputSchema: published, schemaSource: 'runtime-schema' }
+        : {
+            id,
+            label,
+            description: description + ' (untyped input: pass a JSON object)',
+            inputSchema: { type: 'object' },
+            schemaSource: 'open-object'
+        };
+    if (descriptor.schemas?.output !== undefined)
+        tool.outputSchema = descriptor.schemas.output;
+    if (descriptor.safety !== undefined)
+        tool.safety = descriptor.safety;
+    if (descriptor.requiresApproval !== undefined)
+        tool.requiresApproval = descriptor.requiresApproval;
+    const actionSafety = descriptor.schemas?.actionSafety;
+    if (actionSafety)
+        tool.schemas = { actionSafety };
+    return tool;
+}
+/**
+ * The hardware a runtime's host declared. Hardware is read from the declared
+ * scope, never guessed from the environment; a host with no runtime passes no
+ * hardware and the child CLI answers from its own declaration.
+ */
+export function resolveExternalRuntimeHardware(runtime) {
+    return runtime.declaredScope.hardware;
+}
+/** Project caller and hardware identity into child CLI processes. */
+export function withExternalHostEnvironment(environment = {}, context = {}) {
+    const result = { ...environment };
+    // Only an explicit hardware is projected; otherwise the child CLI's own
+    // declaration answers.
+    if (context.hardware)
+        result.VIBES_RUNTIME_HARDWARE = context.hardware;
+    const variables = {
+        VIBES_AGENT_ID: context.caller?.agentId,
+        VIBES_HARNESS: context.caller?.harness,
+        VIBES_SESSION_ID: context.caller?.sessionId,
+        VIBES_PARTICIPANT_ID: context.caller?.participantId
+    };
+    for (const [key, value] of Object.entries(variables)) {
+        if (value)
+            result[key] = value;
+    }
+    return result;
+}
+/** A host tool call's input as the projection reads it: a JSON object. */
+export const HostToolInputSchema = z.record(z.string(), LiveJsonSchema.optional()).readonly();
+/** A safety declaration: a bare category, or an object naming one. */
+const SafetyCategorySchema = z.union([
+    z.string(),
+    z.object({ category: z.string() }).loose().transform((safety) => safety.category)
+]);
+/** The first non-blank action name the input carries (`action`, `operation`, `op`), lowercased. */
+function inputAction(input) {
+    return [input.action, input.operation, input.op]
+        .map((value) => NonBlankSchema.safeParse(value).data)
+        .find((value) => value !== undefined)
+        ?.toLowerCase();
+}
+/**
+ * One approval decision for every native host projection. Only a declared
+ * `read` safety (the selected action's, else the tool's) runs unapproved; a
+ * missing or unrecognised declaration requires approval.
+ */
+export function requiresExternalHostApproval(descriptor, input = {}) {
+    if (descriptor.requiresApproval === true)
+        return true;
+    const action = inputAction(input);
+    const actionSafety = descriptor.schemas?.actionSafety;
+    const selectedSafety = action ? actionSafety?.[action] : undefined;
+    if (selectedSafety !== undefined)
+        return selectedSafety !== 'read';
+    if (!action && actionSafety && Object.values(actionSafety).some((safety) => safety !== 'read'))
+        return true;
+    return SafetyCategorySchema.safeParse(descriptor.safety).data !== 'read';
+}
+/** Apply the host's scope and identity to the canonical CLI fallback path. */
+export function withExternalHostToolContext(argv, context) {
+    if (argv[0] !== 'tools' || (argv[1] !== 'list' && argv[1] !== 'run'))
+        return argv;
+    const result = [...argv];
+    const has = (...flags) => flags.some((flag) => result.some((arg) => arg === flag || arg.startsWith(flag + '=')));
+    const add = (flag, value, aliases = []) => {
+        if (value && !has(flag, ...aliases))
+            result.push(flag, value);
+    };
+    add('--purpose', context.purpose ?? 'agent');
+    if (argv[1] === 'list') {
+        add('--scope', context.hardware);
+    }
+    if (argv[1] === 'run') {
+        add('--session', context.caller?.sessionId, ['-s']);
+        add('--participant', context.caller?.participantId, ['-p']);
+        add('--agent', context.caller?.agentId, ['-a']);
+        add('--harness', context.caller?.harness);
+    }
+    return result;
+}
+/** A catalog that could not be read: `INVALID_INPUT` / `UNAVAILABLE` with `live-catalog-*` reasons. */
+function catalogRefusal(reason, message, details) {
+    const options = { reason, retryable: reason !== 'live-catalog-not-json' };
+    if (details)
+        options.details = details;
+    return new CapabilityError(message, reason.endsWith('json') || reason.endsWith('array') ? 'INVALID_INPUT' : 'UNAVAILABLE', options);
+}
+/** One catalog row's id, whether or not the row is otherwise readable. */
+const RowIdSchema = z.object({ id: z.union([z.string(), z.number()]) }).loose();
+/**
+ * Parse `vibes tools list --format json` stdout. `--format json` promises one
+ * parseable document: a row array on success. Anything else is a loud, typed
+ * failure, never an empty catalog masquerading as truth.
+ */
+export function parseLiveToolsOutput(stdout) {
+    let decoded;
+    try {
+        decoded = LiveJsonSchema.parse(JSON.parse(stdout));
+    }
+    catch (error) {
+        throw new CapabilityError('Could not parse the live tool catalog: CLI output was not JSON.', 'INVALID_INPUT', {
+            reason: 'live-catalog-not-json',
+            retryable: false,
+            cause: error
+        });
+    }
+    const rows = z.array(LiveJsonSchema).safeParse(decoded);
+    if (!rows.success) {
+        throw catalogRefusal('live-catalog-not-array', 'Could not read the live tool catalog: expected a JSON array of tool rows.');
+    }
+    const tools = [];
+    const skipped = [];
+    for (const row of rows.data) {
+        const id = String(RowIdSchema.safeParse(row).data?.id ?? '').trim();
+        const descriptor = LiveToolDescriptorSchema.safeParse(row);
+        if (id.length === 0 || !descriptor.success) {
+            skipped.push({ id: id || '<missing>', reason: 'missing-id' });
+            continue;
+        }
+        // `vibes tools run` only invokes `tools/tool` rows; `ai/tool` rows are
+        // inspect-visible but would fail on every call, so they are not projected.
+        if (descriptor.data.source === 'ai/tool') {
+            skipped.push({ id, reason: 'not-invokable-source' });
+            continue;
+        }
+        tools.push(descriptor.data);
+    }
+    return { tools, skipped };
+}
+function throwUnlessOk(result, argv) {
+    if (result.cancelled) {
+        throw catalogRefusal('live-catalog-cancelled', 'Could not read the live tool catalog: the CLI call was cancelled.');
+    }
+    if (result.exitCode !== 0) {
+        const detail = [result.stdout, result.stderr].filter(Boolean).join('\n');
+        throw catalogRefusal('live-catalog-cli-failed', 'Could not read the live tool catalog (`' + argv.join(' ') + '` exited ' + result.exitCode + ')' + (detail ? ': ' + detail : '.'), { exitCode: result.exitCode });
+    }
+}
+/** The CLI run options a catalog fetch hands on: only what the caller set. */
+function catalogRunOptions(options) {
+    const run = { hostEnv: options.hostEnv };
+    if (options.cwd !== undefined)
+        run.cwd = options.cwd;
+    if (options.signal !== undefined)
+        run.signal = options.signal;
+    if (options.env !== undefined)
+        run.env = options.env;
+    return run;
+}
+/** Synchronous variant for hosts that register before they can await. */
+export function fetchLiveToolsViaCliSync(run, options) {
+    const argv = withExternalHostToolContext(['tools', 'list', '--format', 'json'], options);
+    const { signal: _signal, ...syncOptions } = catalogRunOptions(options);
+    const result = run(argv, syncOptions);
+    throwUnlessOk(result, argv);
+    return parseLiveToolsOutput(result.stdout);
+}
+/**
+ * Ask the local CLI for the live registry. Fails closed with an actionable
+ * typed error; hosts register nothing on failure rather than a stale subset.
+ */
+export async function fetchLiveToolsViaCli(run, options) {
+    const argv = withExternalHostToolContext(['tools', 'list', '--format', 'json'], options);
+    const result = await run(argv, catalogRunOptions(options));
+    throwUnlessOk(result, argv);
+    return parseLiveToolsOutput(result.stdout);
+}
+/** Read a catalog row through the descriptor schema; `undefined` when it is not one. */
+export function parseLiveToolDescriptor(row) {
+    return LiveToolDescriptorSchema.safeParse(row).data;
+}
+//# sourceMappingURL=live-tools.js.map

package/dist/harness/live-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-tools.js","sourceRoot":"","sources":["../../src/harness/live-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAKnE,wDAAwD;AACxD,MAAM,cAAc,GAAG,eAAe,CAAC;AAGvC,wDAAwD;AACxD,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACvC,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,0EAA0E;IAC1E,WAAW,EAAE,cAAc,CAAC,QAAQ,EAAE;IACtC,uDAAuD;IACvD,OAAO,EAAE,CAAC;SACR,MAAM,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC5H,KAAK,EAAE;SACP,QAAQ,EAAE;IACZ,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;IACjC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,wEAAwE;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC;KACD,KAAK,EAAE,CAAC;AAKV,sFAAsF;AACtF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AAgBhG,8DAA8D;AAC9D,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEhD,SAAS,QAAQ,CAAC,KAAyB;IAC1C,OAAO,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAA8B;IAC/D,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC;SACnE,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;SACpE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAClG,MAAM,IAAI,GAAuB,SAAS;QACzC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,EAAE;QACpF,CAAC,CAAC;YACA,EAAE;YACF,KAAK;YACL,WAAW,EAAE,WAAW,GAAG,sCAAsC;YACjE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,YAAY,EAAE,aAAa;SAC3B,CAAC;IACJ,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5F,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACrE,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS;QAAE,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;IACnG,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC;IACtD,IAAI,YAAY;QAAE,IAAI,CAAC,OAAO,GAAG,EAAE,YAAY,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC;AACb,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC7C,OAAmE;IAEnE,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC;AACvC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,2BAA2B,CAC1C,cAA4D,EAAE,EAC9D,UAII,EAAE;IAEN,MAAM,MAAM,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IAClC,wEAAwE;IACxE,uBAAuB;IACvB,IAAI,OAAO,CAAC,QAAQ;QAAE,MAAM,CAAC,sBAAsB,GAAG,OAAO,CAAC,QAAQ,CAAC;IACvE,MAAM,SAAS,GAAG;QACjB,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO;QACvC,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO;QACtC,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS;QAC3C,oBAAoB,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa;KACnD,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAG9F,sEAAsE;AACtE,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC;IACpC,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;CACjF,CAAC,CAAC;AAEH,mGAAmG;AACnG,SAAS,WAAW,CAAC,KAAoB;IACxC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;SAC9C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;SACpD,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;QACrC,EAAE,WAAW,EAAE,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC3C,UAAsF,EACtF,QAAuB,EAAE;IAEzB,IAAI,UAAU,CAAC,gBAAgB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,cAAc,KAAK,MAAM,CAAC;IACnE,IAAI,CAAC,MAAM,IAAI,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5G,OAAO,oBAAoB,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;AAC1E,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,2BAA2B,CAC1C,IAAc,EACd,OAKC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC,GAAG,KAAe,EAAE,EAAE,CAClC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,KAAyB,EAAE,UAAoB,EAAE,EAAE,EAAE;QAC/E,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACxB,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACvB,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AASD,uGAAuG;AACvG,SAAS,cAAc,CACtB,MAAiH,EACjH,OAAe,EACf,OAA8B;IAE9B,MAAM,OAAO,GAAqD,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,uBAAuB,EAAE,CAAC;IAC5H,IAAI,OAAO;QAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;IACvC,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AACrI,CAAC;AAED,0EAA0E;AAC1E,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAEhF;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IAClD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,iEAAiE,EAAE,eAAe,EAAE;YAC7G,MAAM,EAAE,uBAAuB;YAC/B,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,KAAK;SACZ,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,cAAc,CAAC,wBAAwB,EAAE,2EAA2E,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9D,SAAS;QACV,CAAC;QACD,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACrD,SAAS;QACV,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,MAAsB,EAAE,IAAc;IAC5D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,cAAc,CAAC,wBAAwB,EAAE,mEAAmE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,cAAc,CACnB,yBAAyB,EACzB,yCAAyC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,WAAW,GAAG,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EACjI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAC7B,CAAC;IACH,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,OAA+B;IACzD,MAAM,GAAG,GAAoB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1D,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9D,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACrD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,wBAAwB,CAAC,GAAmB,EAAE,OAA+B;IAC5F,MAAM,IAAI,GAAG,2BAA2B,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACzF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,GAAe,EACf,OAA+B;IAE/B,MAAM,IAAI,GAAG,2BAA2B,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB,CAAC,GAAa;IACpD,OAAO,wBAAwB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC"}

package/dist/harness/managed-block.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Managed-block ownership primitives.
+ *
+ * A managed block is a delimited region we wrote inside a file we do not own.
+ * The version marker makes an existing install recognizable, so install can
+ * migrate it, status can age it, and uninstall can remove exactly our bytes
+ * without touching the owner's content.
+ */
+export type ManagedBlock = {
+    present: false;
+    version: null;
+    body: null;
+} | {
+    present: true;
+    version: number;
+    body: string;
+};
+export declare function wrapManagedBlock(kind: string, body: string, version?: number): string;
+export declare function readManagedBlock(text: string, kind: string): ManagedBlock;
+export declare function hasManagedBlock(text: string, kind: string): boolean;
+export declare function managedBlockVersion(text: string, kind: string): number | null;
+/**
+ * Put the block in the text. An existing block keeps its position so a file
+ * with several managed regions is not shuffled; a new block goes first,
+ * because hosts read the harness briefing before the project notes.
+ */
+export declare function replaceManagedBlock(text: string, kind: string, body: string, version?: number): string;
+/** Remove only our block, preserving the owner's surrounding content. */
+export declare function removeManagedBlock(text: string, kind: string): string;
+/** Ownership marker for files we generate outright (the extension module). */
+export declare function managedFileVersion(text: string, kind: string): number | null;
+export declare function isManagedFile(text: string, kind: string): boolean;
+export declare function withManagedFileHeader(kind: string, body: string, version?: number): string;
+//# sourceMappingURL=managed-block.d.ts.map

package/dist/harness/managed-block.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-block.d.ts","sourceRoot":"","sources":["../../src/harness/managed-block.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,MAAM,MAAM,YAAY,GACrB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAWpD,wBAAgB,gBAAgB,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAqC,GAC5C,MAAM,CAER;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,CAIzE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAqC,GAC5C,MAAM,CAOR;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMrE;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED,wBAAgB,qBAAqB,CACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAqC,GAC5C,MAAM,CAER"}

package/dist/harness/managed-block.js

@@ -0,0 +1,66 @@
+/**
+ * Managed-block ownership primitives.
+ *
+ * A managed block is a delimited region we wrote inside a file we do not own.
+ * The version marker makes an existing install recognizable, so install can
+ * migrate it, status can age it, and uninstall can remove exactly our bytes
+ * without touching the owner's content.
+ */
+import { VIBES_HARNESS_MARKER_VERSION, managedBlockBegin, managedBlockEnd, managedLineMarker } from "./markers.js";
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+const ABSENT = { present: false, version: null, body: null };
+function blockRegExp(kind) {
+    return new RegExp(`<!-- vibes:managed:${escapeRegExp(kind)} v=(\\d+) -->\\n([\\s\\S]*?)\\n<!-- /vibes:managed:${escapeRegExp(kind)} -->`, 'g');
+}
+export function wrapManagedBlock(kind, body, version = VIBES_HARNESS_MARKER_VERSION) {
+    return `${managedBlockBegin(kind, version)}\n${body.replace(/\n+$/, '')}\n${managedBlockEnd(kind)}`;
+}
+export function readManagedBlock(text, kind) {
+    const match = blockRegExp(kind).exec(text);
+    if (!match)
+        return ABSENT;
+    return { present: true, version: Number(match[1]), body: match[2] };
+}
+export function hasManagedBlock(text, kind) {
+    return readManagedBlock(text, kind).present;
+}
+export function managedBlockVersion(text, kind) {
+    return readManagedBlock(text, kind).version;
+}
+/**
+ * Put the block in the text. An existing block keeps its position so a file
+ * with several managed regions is not shuffled; a new block goes first,
+ * because hosts read the harness briefing before the project notes.
+ */
+export function replaceManagedBlock(text, kind, body, version = VIBES_HARNESS_MARKER_VERSION) {
+    const block = wrapManagedBlock(kind, body, version);
+    const pattern = blockRegExp(kind);
+    if (pattern.test(text))
+        return text.replace(pattern, () => block);
+    const base = text.replace(/\n+$/, '');
+    if (base.length === 0)
+        return block + '\n';
+    return block + '\n\n' + base + '\n';
+}
+/** Remove only our block, preserving the owner's surrounding content. */
+export function removeManagedBlock(text, kind) {
+    const removed = text
+        .replace(blockRegExp(kind), '')
+        .replace(/\n{3,}/g, '\n\n')
+        .replace(/^\n+/, '');
+    return removed.length === 0 ? '' : `${removed.replace(/\n+$/, '')}\n`;
+}
+/** Ownership marker for files we generate outright (the extension module). */
+export function managedFileVersion(text, kind) {
+    const match = new RegExp(`^// vibes:managed:${escapeRegExp(kind)} v=(\\d+)$`, 'm').exec(text);
+    return match ? Number(match[1]) : null;
+}
+export function isManagedFile(text, kind) {
+    return managedFileVersion(text, kind) !== null;
+}
+export function withManagedFileHeader(kind, body, version = VIBES_HARNESS_MARKER_VERSION) {
+    return `${managedLineMarker(kind, version)}\n${body}`;
+}
+//# sourceMappingURL=managed-block.js.map

package/dist/harness/managed-block.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-block.js","sourceRoot":"","sources":["../../src/harness/managed-block.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACN,4BAA4B,EAC5B,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,MAAM,cAAc,CAAC;AAEtB,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAMD,MAAM,MAAM,GAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAE3E,SAAS,WAAW,CAAC,IAAY;IAChC,OAAO,IAAI,MAAM,CAChB,sBAAsB,YAAY,CAAC,IAAI,CAAC,sDAAsD,YAAY,CAAC,IAAI,CAAC,MAAM,EACtH,GAAG,CACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,IAAY,EACZ,IAAY,EACZ,UAAkB,4BAA4B;IAE9C,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;AACrG,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACzD,OAAO,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC7D,OAAO,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,IAAY,EACZ,IAAY,EACZ,IAAY,EACZ,UAAkB,4BAA4B;IAE9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,GAAG,IAAI,CAAC;IAC3C,OAAO,KAAK,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,OAAO,GAAG,IAAI;SAClB,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtB,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC;AACvE,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,qBAAqB,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IACvD,OAAO,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,IAAY,EACZ,IAAY,EACZ,UAAkB,4BAA4B;IAE9C,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;AACvD,CAAC"}

package/dist/harness/markers.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Host-neutral ownership markers.
+ *
+ * Every host projection (Pi, OpenCode, and any later one) writes the same
+ * managed-block markers and settings key, so an install is recognizable,
+ * migratable, and removable byte-for-byte regardless of which host wrote it.
+ * Host file layouts, package specifiers, and tool-policy profiles are
+ * provider-native and live in the matching `@vibesdotdev/integrations-*` owner.
+ */
+/**
+ * Bump when a managed file's shape changes. Written into every managed block so
+ * an existing install can be recognized, migrated, and removed exactly.
+ */
+export declare const VIBES_HARNESS_MARKER_VERSION = 1;
+/** settings.json key holding vibes ownership state for that host. */
+export declare const VIBES_MANAGED_SETTINGS_KEY = "vibesManaged";
+/** HTML comment marker pair for managed blocks in Markdown. */
+export declare function managedBlockBegin(kind: string, version?: number): string;
+export declare function managedBlockEnd(kind: string): string;
+/** Line-comment marker for managed TypeScript modules. */
+export declare function managedLineMarker(kind: string, version?: number): string;
+//# sourceMappingURL=markers.d.ts.map

package/dist/harness/markers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markers.d.ts","sourceRoot":"","sources":["../../src/harness/markers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;GAGG;AACH,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AAEzD,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAA+B,GAAG,MAAM,CAE9F;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,SAA+B,GAAG,MAAM,CAE9F"}

package/dist/harness/markers.js

@@ -0,0 +1,28 @@
+/**
+ * Host-neutral ownership markers.
+ *
+ * Every host projection (Pi, OpenCode, and any later one) writes the same
+ * managed-block markers and settings key, so an install is recognizable,
+ * migratable, and removable byte-for-byte regardless of which host wrote it.
+ * Host file layouts, package specifiers, and tool-policy profiles are
+ * provider-native and live in the matching `@vibesdotdev/integrations-*` owner.
+ */
+/**
+ * Bump when a managed file's shape changes. Written into every managed block so
+ * an existing install can be recognized, migrated, and removed exactly.
+ */
+export const VIBES_HARNESS_MARKER_VERSION = 1;
+/** settings.json key holding vibes ownership state for that host. */
+export const VIBES_MANAGED_SETTINGS_KEY = 'vibesManaged';
+/** HTML comment marker pair for managed blocks in Markdown. */
+export function managedBlockBegin(kind, version = VIBES_HARNESS_MARKER_VERSION) {
+    return `<!-- vibes:managed:${kind} v=${version} -->`;
+}
+export function managedBlockEnd(kind) {
+    return `<!-- /vibes:managed:${kind} -->`;
+}
+/** Line-comment marker for managed TypeScript modules. */
+export function managedLineMarker(kind, version = VIBES_HARNESS_MARKER_VERSION) {
+    return `// vibes:managed:${kind} v=${version}`;
+}
+//# sourceMappingURL=markers.js.map

package/dist/harness/markers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markers.js","sourceRoot":"","sources":["../../src/harness/markers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAE9C,qEAAqE;AACrE,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC;AAEzD,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAO,GAAG,4BAA4B;IACrF,OAAO,sBAAsB,IAAI,MAAM,OAAO,MAAM,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,OAAO,uBAAuB,IAAI,MAAM,CAAC;AAC1C,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAO,GAAG,4BAA4B;IACrF,OAAO,oBAAoB,IAAI,MAAM,OAAO,EAAE,CAAC;AAChD,CAAC"}

package/dist/harness/node.d.ts

@@ -0,0 +1,6 @@
+export * from './index.ts';
+export { AGENT_HOST_KINDS, VibesAgentHost, agentHostSettingsPlugin } from './agent-host.ts';
+export * from './live-tools.ts';
+export * from './runtime-transport.ts';
+export * from './tool-projection.ts';
+//# sourceMappingURL=node.d.ts.map

package/dist/harness/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../src/harness/node.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC5F,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/harness/node.js

@@ -0,0 +1,6 @@
+export * from "./index.js";
+export { AGENT_HOST_KINDS, VibesAgentHost, agentHostSettingsPlugin } from "./agent-host.js";
+export * from "./live-tools.js";
+export * from "./runtime-transport.js";
+export * from "./tool-projection.js";
+//# sourceMappingURL=node.js.map

package/dist/harness/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../../src/harness/node.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC5F,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}