@vibesdotdev/external 0.0.0-stage → 1.0.0-rc.0

package/dist/hooks/bridge.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Optional bridge from external host hooks → `tools/tool` hook bus.
+ *
+ * When the collaboration config's `toolTiers.enabled` is set, PreToolUse /
+ * PostToolUse run tier-enforcement subscribers against resolved universal tool
+ * IDs (e.g. vibes MCP tool names). Config, not the environment: the hook runs in
+ * the workspace daemon, whose environment is not the user's shell.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { HookEvent } from '../plugins/schemas/manifest.ts';
+import type { CollaborationSettings } from '../ambient/collaboration-settings.ts';
+/** The tier-enforcement settings a bridge run applies (the collaboration config's `toolTiers`). */
+export type HookToolTierSettings = CollaborationSettings['toolTiers'];
+/**
+ * Resolve a host-reported tool name to a `tools/tool` descriptor id, if any.
+ */
+export declare function resolveVibesToolId(runtime: VibesRuntime, hostToolName: string): string | null;
+export interface HookBridgeInput {
+    event: HookEvent;
+    hostToolName?: string;
+    toolInput?: unknown;
+    toolResult?: unknown;
+}
+export interface HookBridgeResult {
+    bridged: boolean;
+    toolId?: string;
+    denied?: boolean;
+    message?: string;
+}
+/**
+ * Emit `tools/tool` bus events for host hook events (tier enforcement only; no impl.execute).
+ */
+export declare function runHookToolBridge(runtime: VibesRuntime, input: HookBridgeInput, tiers: HookToolTierSettings): Promise<HookBridgeResult>;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/hooks/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/hooks/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAQ3E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAElF,mGAAmG;AACnG,MAAM,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;AAMtE;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiB7F;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,SAAS,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACtC,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,oBAAoB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAoD3B"}

package/dist/hooks/bridge.js

@@ -0,0 +1,86 @@
+/**
+ * Optional bridge from external host hooks → `tools/tool` hook bus.
+ *
+ * When the collaboration config's `toolTiers.enabled` is set, PreToolUse /
+ * PostToolUse run tier-enforcement subscribers against resolved universal tool
+ * IDs (e.g. vibes MCP tool names). Config, not the environment: the hook runs in
+ * the workspace daemon, whose environment is not the user's shell.
+ */
+import { isCapabilityError } from '@vibesdotdev/kernel';
+import { DEFAULT_AGENT_CAPABILITY_CEILING, TOOL_AGENT_CONTEXT_METADATA_KEY } from '@vibesdotdev/tools/schemas/runtime/capability-tier';
+import { BEFORE_EXECUTE_REJECT_KEY } from '@vibesdotdev/tools/execution/core';
+function hasToolDescriptor(runtime, toolId) {
+    return runtime.query('tools/tool').withId(toolId).descriptors().length > 0;
+}
+/**
+ * Resolve a host-reported tool name to a `tools/tool` descriptor id, if any.
+ */
+export function resolveVibesToolId(runtime, hostToolName) {
+    if (!hostToolName || !runtime.hasKind('tools/tool'))
+        return null;
+    const normalized = hostToolName.trim();
+    if (!normalized)
+        return null;
+    if (hasToolDescriptor(runtime, normalized))
+        return normalized;
+    // MCP-style names: mcp__vibes__<tool-id> or mcp__<server>__<tool-id>
+    const mcpMatch = normalized.match(/^mcp__(?:vibes__)?(.+)$/i);
+    if (mcpMatch?.[1]) {
+        const candidate = mcpMatch[1].replace(/-/g, '/');
+        if (hasToolDescriptor(runtime, candidate))
+            return candidate;
+        if (hasToolDescriptor(runtime, mcpMatch[1]))
+            return mcpMatch[1];
+    }
+    return null;
+}
+/**
+ * Emit `tools/tool` bus events for host hook events (tier enforcement only; no impl.execute).
+ */
+export async function runHookToolBridge(runtime, input, tiers) {
+    if (!tiers.enabled) {
+        return { bridged: false };
+    }
+    if (input.event !== 'tool.before' && input.event !== 'tool.after') {
+        return { bridged: false };
+    }
+    const hostToolName = input.hostToolName;
+    if (!hostToolName)
+        return { bridged: false };
+    const toolId = resolveVibesToolId(runtime, hostToolName);
+    if (!toolId)
+        return { bridged: false };
+    const bus = runtime.hooks('tools/tool');
+    const metadata = new Map();
+    const agentContext = {
+        agentId: 'external-hook-bridge',
+        ceiling: tiers.ceiling ?? DEFAULT_AGENT_CAPABILITY_CEILING,
+        callChain: []
+    };
+    metadata.set(TOOL_AGENT_CONTEXT_METADATA_KEY, agentContext);
+    const callId = crypto.randomUUID();
+    const toolInput = input.toolInput ?? {};
+    if (input.event === 'tool.before') {
+        await bus.emit('contextBuild', { toolId, callId, input: toolInput, runtime, metadata });
+        await bus.emit('beforeExecute', { toolId, callId, input: toolInput, runtime, metadata });
+        const rejection = metadata.get(BEFORE_EXECUTE_REJECT_KEY);
+        if (rejection !== undefined) {
+            // A tier refusal is a typed CapabilityError whose message is written for the
+            // harness; any other rejection value is never echoed.
+            const message = rejection instanceof Error && isCapabilityError(rejection) ? rejection.message : 'tool denied by tier enforcement';
+            return { bridged: true, toolId, denied: true, message };
+        }
+        return { bridged: true, toolId };
+    }
+    await bus.emit('afterExecute', {
+        toolId,
+        callId,
+        input: toolInput,
+        result: input.toolResult ?? null,
+        durationMs: 0,
+        runtime,
+        metadata
+    });
+    return { bridged: true, toolId };
+}
+//# sourceMappingURL=bridge.js.map

package/dist/hooks/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/hooks/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,iBAAiB,EAAqB,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EACN,gCAAgC,EAChC,+BAA+B,EAE/B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAO9E,SAAS,iBAAiB,CAAC,OAAqB,EAAE,MAAc;IAC/D,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAqB,EAAE,YAAoB;IAC7E,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,IAAI,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAE9D,qEAAqE;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9D,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5D,IAAI,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAgBD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAqB,EACrB,KAAsB,EACtB,KAA2B;IAE3B,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEvC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAiB,YAAY,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,YAAY,GAAyB;QAC1C,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,gCAAgC;QAC1D,SAAS,EAAE,EAAE;KACb,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,+BAA+B,EAAE,YAAY,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IAExC,IAAI,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACnC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxF,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEzF,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC1D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7B,6EAA6E;YAC7E,sDAAsD;YACtD,MAAM,OAAO,GACZ,SAAS,YAAY,KAAK,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC;YACpH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE;QAC9B,MAAM;QACN,MAAM;QACN,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QAChC,UAAU,EAAE,CAAC;QACb,OAAO;QACP,QAAQ;KACR,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC"}

package/dist/hooks/call.d.ts

@@ -0,0 +1,298 @@
+/**
+ * Unified Hook Call Handler
+ *
+ * Single entry point for external tool hook events.
+ * Delegates to event-specific handlers and assembles prompt-based guidance.
+ *
+ * Usage: vibes dev external hooks call <event> [options]
+ *
+ * ## Hook Event Reference
+ *
+ * | Event             | When                              | Input Available        | Can Inject Context |
+ * |-------------------|-----------------------------------|------------------------|--------------------|
+ * | SessionStart      | Session begins (inc. post-compact)| -                      | Yes                |
+ * | SessionEnd        | Session ends                      | -                      | No                 |
+ * | UserPromptSubmit  | Before processing user message    | PROMPT env var         | Yes                |
+ * | PreToolUse        | Before tool execution             | tool info (stdin)      | Yes (can block)    |
+ * | PostToolUse       | After tool execution              | tool result (stdin)    | Yes                |
+ * | PermissionRequest | User prompted for permission      | permission info        | Yes                |
+ * | PreCompact        | Before context compaction         | -                      | Yes                |
+ * | Stop              | Tool stops (success/error)        | stop reason            | No                 |
+ * | SubagentStop      | Task/subagent completes           | subagent result        | Yes                |
+ * | Notification      | Tool sends notification           | notification content   | No                 |
+ */
+import { type RuntimeRef, type ValueFreeFailure, type VibesRuntime } from '@vibesdotdev/kernel';
+import { type BoundedPayload } from './bounded-payload.ts';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+import * as z from 'zod/v4';
+import { type HookBridgeResult } from './bridge.ts';
+import { type ExternalContinuityAssembly } from './continuity.ts';
+import { type ExternalHookEnvelope } from './runtime.ts';
+import type { NativeEditLock } from './native-edit-locks.ts';
+import type { RuntimeInvocationOverlay } from '@vibesdotdev/kernel/schemas/scope';
+import { type HookEvent } from '../schemas/hooks.ts';
+export declare const HookCallInputSchema: z.ZodObject<{
+    event: z.ZodEnum<{
+        "session.start": "session.start";
+        "session.end": "session.end";
+        "prompt.submit": "prompt.submit";
+        "tool.before": "tool.before";
+        "tool.after": "tool.after";
+        "context.beforeCompact": "context.beforeCompact";
+        "context.afterCompact": "context.afterCompact";
+        "permission.request": "permission.request";
+        "agent.stop": "agent.stop";
+        "subagent.stop": "subagent.stop";
+        notification: "notification";
+    }>;
+    target: z.ZodOptional<z.ZodString>;
+    disableBrain: z.ZodDefault<z.ZodBoolean>;
+    disablePrompts: z.ZodDefault<z.ZodBoolean>;
+    output: z.ZodDefault<z.ZodEnum<{
+        text: "text";
+        json: "json";
+    }>>;
+    prompt: z.ZodOptional<z.ZodString>;
+    envelope: z.ZodOptional<z.ZodObject<{
+        event: z.ZodEnum<{
+            "session.start": "session.start";
+            "session.end": "session.end";
+            "prompt.submit": "prompt.submit";
+            "tool.before": "tool.before";
+            "tool.after": "tool.after";
+            "context.beforeCompact": "context.beforeCompact";
+            "context.afterCompact": "context.afterCompact";
+            "permission.request": "permission.request";
+            "agent.stop": "agent.stop";
+            "subagent.stop": "subagent.stop";
+            notification: "notification";
+        }>;
+        clientId: z.ZodString;
+        nativeSessionId: z.ZodString;
+        workspacePath: z.ZodString;
+        model: z.ZodOptional<z.ZodString>;
+        turnId: z.ZodOptional<z.ZodString>;
+        trigger: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+        permissionMode: z.ZodOptional<z.ZodString>;
+        prompt: z.ZodOptional<z.ZodString>;
+        tool: z.ZodOptional<z.ZodObject<{
+            name: z.ZodString;
+            input: z.ZodOptional<z.ZodUnknown>;
+            result: z.ZodOptional<z.ZodUnknown>;
+            callId: z.ZodOptional<z.ZodString>;
+            filePath: z.ZodOptional<z.ZodString>;
+            error: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        transcriptPath: z.ZodOptional<z.ZodString>;
+        subagent: z.ZodOptional<z.ZodObject<{
+            agentId: z.ZodString;
+            agentType: z.ZodOptional<z.ZodString>;
+            transcriptPath: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        provenance: z.ZodObject<{
+            adapterId: z.ZodString;
+            nativeEvent: z.ZodString;
+            normalizedAt: z.ZodString;
+        }, z.core.$strict>;
+        continuity: z.ZodDefault<z.ZodObject<{
+            processInstanceId: z.ZodOptional<z.ZodString>;
+            resumedFromSessionId: z.ZodOptional<z.ZodString>;
+            respawned: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        privacy: z.ZodDefault<z.ZodObject<{
+            rawRetained: z.ZodLiteral<false>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export type HookCallInput = z.infer<typeof HookCallInputSchema>;
+export interface HookCallOutput {
+    success: boolean;
+    event: HookEvent;
+    /** Context to inject (for text output) */
+    context?: string;
+    /** Structured data (for json output) */
+    data?: HookData;
+    /** Error message if failed: a typed refusal's own message, else value-free facts */
+    error?: string;
+    /** The value-free facts of the failure behind `success: false`. */
+    failure?: ValueFreeFailure;
+}
+/** A file access a tool.after hook recorded, or why it recorded none. */
+export type HookFileAccessReceipt = {
+    readonly filePath: string;
+    readonly operation: string;
+} | {
+    readonly skipped: 'no-session';
+} | {
+    readonly failed: ValueFreeFailure;
+};
+/**
+ * What a hook handler records, by field. Tool answers are JSON (decoded and
+ * schema-checked at the transport); host payloads are bounded summaries.
+ */
+export interface HookData {
+    skipped?: string;
+    archived?: readonly string[];
+    continuity?: ExternalContinuityAssembly;
+    metabolized?: MetabolizeReceipt;
+    bodyProbe?: WakeBodyProbe;
+    brain?: HookJson;
+    pulse?: HookJson;
+    session?: HookJson;
+    relatedSessions?: readonly HookJson[];
+    roster?: string;
+    rosterUnavailable?: string;
+    fileStats?: HookJson;
+    tool?: string;
+    input?: BoundedPayload;
+    bridge?: HookBridgeResult;
+    blocked?: string;
+    /** Per-path outcomes of the native-edit locks a tool.before hook took. */
+    locks?: readonly NativeEditLock[];
+    /** Messages, notices and the self-review nudge this response injects. */
+    delivery?: string;
+    tracked?: HookFileAccessReceipt;
+    brainTrack?: HookJson;
+    permission?: {
+        readonly mode?: string;
+        readonly tool?: string;
+        readonly input?: BoundedPayload;
+    };
+    consolidated?: HookJson;
+    summary?: HookJson;
+    sessionSnapshot?: HookJson;
+    subagent?: NonNullable<ExternalHookEnvelope['subagent']>;
+    result?: BoundedPayload;
+    notification?: {
+        readonly reason?: string;
+        readonly trigger?: string;
+    };
+    config?: {
+        readonly brain: boolean;
+        readonly prompts: boolean;
+    };
+}
+export type McpCallStatus = 'ok' | 'tool-error' | 'unreachable';
+/** A JSON value: what a tool result decodes to and what a hook records. */
+declare const HookJsonSchema: z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>;
+export type HookJson = z.output<typeof HookJsonSchema>;
+/** Arguments a hook passes to a tool: JSON fields, bounded summaries included. */
+export interface HookToolArgs {
+    readonly [key: string]: HookJson | BoundedPayload | undefined;
+}
+export interface McpCallResult {
+    status: McpCallStatus;
+    /** Parsed tool payload — only present when status === 'ok'. */
+    value?: HookJson;
+    /** Honest, short reason when status !== 'ok'. Never inner-world content. */
+    reason?: string;
+    /** The value-free facts of the failure behind a non-ok status, when one was caught. */
+    failure?: ValueFreeFailure;
+}
+export interface McpClient {
+    /** The HTTP endpoint actually contacted. Never a stdio body. */
+    readonly endpoint: string;
+    call(tool: string, args: HookToolArgs): Promise<McpCallResult>;
+    /**
+     * Terminate the MCP session. Every hook invocation is a fresh, short-lived PROCESS,
+     * so a session left open can never be reused — and the server holds a bounded pool
+     * (mcp `createMcpHttpSessionHandler`: maxSessions, evict-oldest). Never
+     * throws; a failed cleanup must not fail the hook.
+     */
+    dispose(): Promise<void>;
+}
+export interface ExecuteHookCallOptions {
+    /** The runtime this hook runs in: the CLI command's or the serving host's. */
+    runtime: VibesRuntime;
+    mcpFactory?: (timeoutMs: number) => McpClient;
+}
+/**
+ * Server-supplied text as a reason: whitespace flattened, control characters
+ * and credential shapes removed (Shared's redactedExcerpt), cut to
+ * {@link MAX_REASON_CHARS}. Nothing longer or unredacted reaches injected context.
+ */
+export declare function briefReason(text: string): string;
+/**
+ * Build a hook-scoped MCP client.
+ *
+ * `timeoutMs` is a budget for the WHOLE hook call, not per request — that is the point
+ * of defect (F): a wedged body must never hang session start, and N unbounded requests
+ * are just as unbounded as one. The handshake is performed once and reused. `runtime`
+ * is the hook's runtime: a failed session release is logged on its logger.
+ */
+export declare function createMcpClient(options: {
+    endpoint: string;
+    timeoutMs: number;
+    runtime: RuntimeRef;
+}): McpClient;
+/**
+ * Adapt direct runtime tool invocation to the hook handler's existing client
+ * contract. This is the daemon-side path: it preserves the caller/workspace
+ * context and avoids a recursive HTTP MCP session back into the same body.
+ */
+export declare function createRuntimeMcpClient(options: {
+    runtime: VibesRuntime;
+    ctx: ToolCallContext;
+    timeoutMs: number;
+}): McpClient;
+export declare function capWakeLetter(content: string, max?: number): string;
+/** What metabolizing reported when it could not run: zero work, the value-free reason and failure. */
+type DegradedMetabolism = {
+    readonly trigger: 'pre-compaction' | 'close';
+    readonly local: {
+        readonly consolidated: 0;
+        readonly remembered: 0;
+        readonly reflected: 0;
+    };
+    readonly degraded: readonly string[];
+    readonly sync: {
+        readonly attempted: false;
+        readonly published: false;
+        readonly pushed: 0;
+        readonly skipped: 'consent-off';
+    };
+    readonly failure: ValueFreeFailure;
+};
+/** Presence's metabolize receipt (JSON), or the degraded receipt when it could not run. */
+export type MetabolizeReceipt = HookJson | DegradedMetabolism;
+/**
+ * What the SessionStart hook actually measured, and where.
+ *
+ * This exists because the scan used to report the HTTP daemon's freshness/session
+ * binding and label it the agent's own body — two different processes. Recording the
+ * probe explicitly is what lets the render state its scope and admit UNKNOWN.
+ */
+export interface WakeBodyProbe {
+    /** MCP HTTP endpoint contacted. Always the managed daemon; never a stdio body. */
+    endpoint: string;
+    /**
+     * ok = pulse answered; tool-error = the daemon answered but brain is unusable
+     * (its preset does not serve it, or it threw); unreachable = nothing answered at
+     * all; not-probed = we never asked. `tool-error` and `unreachable` are NOT the
+     * same event and do not share a remedy — see probeVerdictLine.
+     */
+    status: 'ok' | 'tool-error' | 'unreachable' | 'not-probed';
+    /** Short, non-content reason when status !== 'ok'. */
+    reason?: string;
+}
+/**
+ * The body-truth wake scan — a METADATA-ONLY summary injected at SessionStart so an
+ * agent SEES the measured body state on waking (build freshness, session binding, focus
+ * load, coherence) instead of only a static guidance essay. It reads brain.pulse /
+ * brain.wake / session.status metadata; it must NEVER surface inner-world content (no
+ * recall), which is why the render only reads the fields its schemas name and ignores
+ * everything else in `data`. Pure and side-effect-free so it is directly testable.
+ */
+export declare function renderWakeScan(data: HookData): string | undefined;
+/** The invocation actor a normalized harness envelope declares. */
+export declare function hookInvocationOverlay(input: HookCallInput): RuntimeInvocationOverlay | undefined;
+/**
+ * Execute hook for given event
+ *
+ * Loads configuration, checks if event is enabled, runs handler,
+ * and assembles output with optional prompt injection.
+ */
+export declare function executeHookCall(input: HookCallInput, options: ExecuteHookCallOptions): Promise<HookCallOutput>;
+export {};
+//# sourceMappingURL=call.d.ts.map

package/dist/hooks/call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.d.ts","sourceRoot":"","sources":["../../src/hooks/call.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,OAAO,EAMN,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAI7E,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAKvE,OAAO,EAIN,KAAK,0BAA0B,EAE/B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAIrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAGlF,OAAO,EAGN,KAAK,SAAS,EAMd,MAAM,qBAAqB,CAAC;AAwI7B,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAc9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAID,yEAAyE;AACzE,MAAM,MAAM,qBAAqB,GAC9B;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAClC;IAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEzC;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,eAAe,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,UAAU,CAAC,EAAE,QAAQ,CAAC;IACtB,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC;IACjG,YAAY,CAAC,EAAE,QAAQ,CAAC;IACxB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,QAAQ,CAAC,EAAE,WAAW,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CAChE;AAqCD,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,YAAY,GAAG,aAAa,CAAC;AAEhE,2EAA2E;AAC3E,QAAA,MAAM,cAAc,iPAAkB,CAAC;AACvC,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAEvD,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC5B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;CAC9D;AAUD,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,aAAa,CAAC;IACtB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACzB,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/D;;;;;OAKG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACtC,8EAA8E;IAC9E,OAAO,EAAE,YAAY,CAAC;IACtB,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC;CAC9C;AAKD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhD;AA6HD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,GAAG,SAAS,CAkKhH;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAC/C,OAAO,EAAE,YAAY,CAAC;IACtB,GAAG,EAAE,eAAe,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CAClB,GAAG,SAAS,CA2BZ;AAqFD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,SAAwB,GAAG,MAAM,CAGlF;AA0JD,sGAAsG;AACtG,KAAK,kBAAkB,GAAG;IACzB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAA;KAAE,CAAC;IAC5F,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;KAAE,CAAC;IAC7H,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACnC,CAAC;AAEF,2FAA2F;AAC3F,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,kBAAkB,CAAC;AA+L9D;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC7B,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,MAAM,EAAE,IAAI,GAAG,YAAY,GAAG,aAAa,GAAG,YAAY,CAAC;IAC3D,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AA4GD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAqGjE;AAoXD,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,wBAAwB,GAAG,SAAS,CAUhG;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACpC,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAkIzB"}