@vibesdotdev/external 0.0.0-stage → 1.0.0-rc.0

package/dist/ambient/default-collision-filter.impl.js

@@ -0,0 +1,53 @@
+/**
+ * Default `external/collision-filter`.
+ *
+ * Decides which peer touches are worth a line in the agent's context. Swap this
+ * descriptor to widen (directory-level), narrow (same-symbol), or apply a house
+ * policy — without forking the touch stream.
+ *
+ * The read (`ExternalClient.whoElseTouched`) has already applied the structural
+ * rules: other sessions only, same workspace, inside the window, one entry per
+ * peer. This filter is the LAST word before a notice is rendered, and its job
+ * is to be conservative.
+ *
+ * A filter may only REMOVE or REORDER. Fabricating a peer here would make the
+ * notice lie, and there is no enforcement anywhere in this design to catch it.
+ */
+/**
+ * A pure `read` by another agent is not interesting enough to spend context on.
+ *
+ * Two agents READING the same file is the normal state of a healthy repo — it
+ * is not a collision, and reporting it would bury the signal that matters
+ * (someone is CHANGING a file under you) in constant chatter.
+ */
+const REPORTABLE_OPERATIONS = new Set(['edit', 'write', 'delete']);
+export const defaultCollisionFilter = {
+    filter(candidates, context) {
+        return candidates
+            .filter((peer) => {
+            // Defensive: the read already excludes self, but a swapped-in
+            // read must not be able to make an agent report itself.
+            if (peer.sessionId === context.sessionId)
+                return false;
+            // Only changes are worth interrupting for.
+            if (!REPORTABLE_OPERATIONS.has(peer.operation))
+                return false;
+            // Defensive re-check of the window: `since` is authoritative and
+            // a stale candidate must never survive a filter swap.
+            if (peer.timestamp < context.since)
+                return false;
+            // Different worktree is not a collision. Only excludes when both
+            // sides declared a workspace — an unknown workspace is not
+            // evidence of a mismatch.
+            if (context.workspaceRoot &&
+                peer.workspaceRoot &&
+                peer.workspaceRoot !== context.workspaceRoot) {
+                return false;
+            }
+            return true;
+        })
+            .sort((a, b) => a.ageMs - b.ageMs);
+    }
+};
+export default defaultCollisionFilter;
+//# sourceMappingURL=default-collision-filter.impl.js.map

package/dist/ambient/default-collision-filter.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-collision-filter.impl.js","sourceRoot":"","sources":["../../src/ambient/default-collision-filter.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACpE,MAAM,CAAC,UAAuB,EAAE,OAA+B;QAC9D,OAAO,UAAU;aACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAChB,8DAA8D;YAC9D,wDAAwD;YACxD,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YAEvD,2CAA2C;YAC3C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;YAE7D,iEAAiE;YACjE,sDAAsD;YACtD,IAAI,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAEjD,iEAAiE;YACjE,2DAA2D;YAC3D,0BAA0B;YAC1B,IACC,OAAO,CAAC,aAAa;gBACrB,IAAI,CAAC,aAAa;gBAClB,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,EAC3C,CAAC;gBACF,OAAO,KAAK,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC;QACb,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;CACD,CAAC;AAEF,eAAe,sBAAsB,CAAC"}

package/dist/ambient/default-notice-formatter.impl.d.ts

@@ -0,0 +1,4 @@
+import type { NoticeFormatterImplementation } from '../schemas/collision.ts';
+export declare const defaultNoticeFormatter: NoticeFormatterImplementation;
+export default defaultNoticeFormatter;
+//# sourceMappingURL=default-notice-formatter.impl.d.ts.map

package/dist/ambient/default-notice-formatter.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-notice-formatter.impl.d.ts","sourceRoot":"","sources":["../../src/ambient/default-notice-formatter.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEX,6BAA6B,EAE7B,MAAM,yBAAyB,CAAC;AAcjC,eAAO,MAAM,sBAAsB,EAAE,6BA6BpC,CAAC;AAEF,eAAe,sBAAsB,CAAC"}

package/dist/ambient/default-notice-formatter.impl.js

@@ -0,0 +1,38 @@
+function shortSession(sessionId) {
+    return sessionId.slice(0, 8);
+}
+function humanAge(ageMs) {
+    const seconds = Math.floor(ageMs / 1000);
+    if (seconds < 45)
+        return 'now';
+    const minutes = Math.round(seconds / 60);
+    if (minutes < 60)
+        return `${Math.max(1, minutes)}m`;
+    return `${Math.round(minutes / 60)}h`;
+}
+export const defaultNoticeFormatter = {
+    format(peers, context) {
+        if (peers.length === 0)
+            return null;
+        const shown = peers.slice(0, Math.max(1, context.cap));
+        const hidden = peers.length - shown.length;
+        const ids = shown
+            .map((p) => {
+            const id = shortSession(p.sessionId);
+            return p.workItemTitle ? `${id} "${p.workItemTitle}"` : id;
+        })
+            .join(', ');
+        const tail = hidden > 0 ? ` +${hidden}` : '';
+        const machines = new Set(shown.map((p) => p.machineName).filter(Boolean));
+        const machine = machines.size === 1
+            ? ` ${[...machines][0]}`
+            : machines.size > 1
+                ? ` ${machines.size} machines`
+                : '';
+        const youngest = Math.min(...shown.map((p) => p.ageMs));
+        const noun = peers.length === 1 ? 'other editing' : 'others editing';
+        return `Heads up — ${peers.length} ${noun} this file (${machine.trim() || 'unknown'}, ${humanAge(youngest)}): ${ids}${tail}`;
+    }
+};
+export default defaultNoticeFormatter;
+//# sourceMappingURL=default-notice-formatter.impl.js.map

package/dist/ambient/default-notice-formatter.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-notice-formatter.impl.js","sourceRoot":"","sources":["../../src/ambient/default-notice-formatter.impl.ts"],"names":[],"mappings":"AAMA,SAAS,YAAY,CAAC,SAAiB;IACtC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC;IACpD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAkC;IACpE,MAAM,CAAC,KAAkB,EAAE,OAA+B;QACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAE3C,MAAM,GAAG,GAAG,KAAK;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACV,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACrC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAC/C,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,KAAK,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACxB,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;gBAClB,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,WAAW;gBAC9B,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAExD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACrE,OAAO,cAAc,KAAK,CAAC,MAAM,IAAI,IAAI,eAAe,OAAO,CAAC,IAAI,EAAE,IAAI,SAAS,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;IAC9H,CAAC;CACD,CAAC;AAEF,eAAe,sBAAsB,CAAC"}

package/dist/ambient/file-access-ambient-drain.impl.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Ambient notice drain handler.
+ *
+ * Drains the pending-notices queue (filled by the filesystem watcher
+ * handler) into the tool result of whatever MCP tool the agent just
+ * called. This is the delivery path for agents that never use
+ * `workspace-fs` — the notice appears on their next `brain pulse`,
+ * `session status`, `knowledge search`, etc.
+ *
+ * SILENT WHEN ALONE: if the queue is empty (no pending notices), this
+ * handler is a no-op — resolve session ID, check a Map, return. Zero
+ * added bytes to the tool result.
+ *
+ * SAFE TO INJECT: the result must be a mutable object (not an array,
+ * not a primitive). `applyLines` checks this and bails if not.
+ */
+declare const _default: {
+    handle(payload: unknown): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=file-access-ambient-drain.impl.d.ts.map

package/dist/ambient/file-access-ambient-drain.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access-ambient-drain.impl.d.ts","sourceRoot":"","sources":["../../src/ambient/file-access-ambient-drain.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;;oBAkBoB,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD9C,wBAuBE"}

package/dist/ambient/file-access-ambient-drain.impl.js

@@ -0,0 +1,53 @@
+/**
+ * Ambient notice drain handler.
+ *
+ * Drains the pending-notices queue (filled by the filesystem watcher
+ * handler) into the tool result of whatever MCP tool the agent just
+ * called. This is the delivery path for agents that never use
+ * `workspace-fs` — the notice appears on their next `brain pulse`,
+ * `session status`, `knowledge search`, etc.
+ *
+ * SILENT WHEN ALONE: if the queue is empty (no pending notices), this
+ * handler is a no-op — resolve session ID, check a Map, return. Zero
+ * added bytes to the tool result.
+ *
+ * SAFE TO INJECT: the result must be a mutable object (not an array,
+ * not a primitive). `applyLines` checks this and bails if not.
+ */
+import * as z from 'zod/v4';
+import { tryGetVibesClient } from '@vibesdotdev/kernel/client';
+import { drainPending } from "./pending-notices.js";
+import { AnnotatableToolResultSchema, ToolAfterExecuteEventSchema, resolveAmbientSessionId } from "./file-access-shared.js";
+// Hook dispatch renders stdout before the outer tool result is annotated.
+const HookDispatchSchema = z.object({ action: z.literal('hook-call') });
+export default {
+    async handle(payload) {
+        const parsedEvent = ToolAfterExecuteEventSchema.safeParse(payload);
+        if (!parsedEvent.success)
+            return;
+        const event = parsedEvent.data;
+        if (!event.runtime)
+            return;
+        if (event.toolId === 'external' && HookDispatchSchema.safeParse(event.input).success)
+            return;
+        const runtime = event.runtime;
+        const sessionId = await resolveAmbientSessionId(runtime);
+        if (!sessionId)
+            return;
+        if (tryGetVibesClient('external', runtime)?.ambientDeliveryDeferred(sessionId))
+            return;
+        // Consume only when the result can carry the notice to the caller.
+        const parsedResult = AnnotatableToolResultSchema.safeParse(event.result);
+        if (!parsedResult.success)
+            return;
+        const result = parsedResult.data;
+        const pending = drainPending(runtime, sessionId);
+        if (!pending)
+            return;
+        if (pending.notice)
+            result.notice = [pending.notice, result.notice].filter(Boolean).join('\n');
+        if (pending.messages)
+            result.messages = [pending.messages, result.messages].filter(Boolean).join('\n');
+    }
+};
+//# sourceMappingURL=file-access-ambient-drain.impl.js.map

package/dist/ambient/file-access-ambient-drain.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access-ambient-drain.impl.js","sourceRoot":"","sources":["../../src/ambient/file-access-ambient-drain.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAI/D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACN,2BAA2B,EAC3B,2BAA2B,EAC3B,uBAAuB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,0EAA0E;AAC1E,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAExE,eAAe;IACd,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC5B,MAAM,WAAW,GAAG,2BAA2B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,WAAW,CAAC,OAAO;YAAE,OAAO;QACjC,MAAM,KAAK,GAA0B,WAAW,CAAC,IAAI,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO;YAAE,OAAO;QAE7F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,iBAAiB,CAAiB,UAAU,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,SAAS,CAAC;YAAE,OAAO;QAEvG,mEAAmE;QACnE,MAAM,YAAY,GAAG,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,YAAY,CAAC,OAAO;YAAE,OAAO;QAClC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC;QACjC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxG,CAAC;CACD,CAAC"}

package/dist/ambient/file-access-ambient-drain.subscription.descriptor.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Ambient notice drain subscription.
+ *
+ * Fires on EVERY `tools.tool.afterExecute` (no toolId filter) to drain the
+ * pending-notices queue filled by the filesystem watcher handler. The
+ * notice/message lands in whatever tool result the agent receives next —
+ * `brain pulse`, `session status`, `knowledge search`, anything — not
+ * waiting for a `workspace-fs` call that may never come.
+ *
+ * The queue is per-session and in-memory. If it is empty (the common case
+ * for a solo agent), this handler is a no-op: resolve session ID, check a
+ * Map, return. Zero added bytes.
+ *
+ * See docs/architecture/AMBIENT-AGENT-AWARENESS.md.
+ */
+declare const _default: {
+    kind: "runtime/subscription";
+    id: string;
+    name: string;
+    description: string;
+    event: string;
+    handler: string;
+    handlerType: string;
+    enabled: true;
+};
+export default _default;
+//# sourceMappingURL=file-access-ambient-drain.subscription.descriptor.d.ts.map

package/dist/ambient/file-access-ambient-drain.subscription.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access-ambient-drain.subscription.descriptor.d.ts","sourceRoot":"","sources":["../../src/ambient/file-access-ambient-drain.subscription.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;AAIH,wBAUG"}

package/dist/ambient/file-access-ambient-drain.subscription.descriptor.js

@@ -0,0 +1,27 @@
+/**
+ * Ambient notice drain subscription.
+ *
+ * Fires on EVERY `tools.tool.afterExecute` (no toolId filter) to drain the
+ * pending-notices queue filled by the filesystem watcher handler. The
+ * notice/message lands in whatever tool result the agent receives next —
+ * `brain pulse`, `session status`, `knowledge search`, anything — not
+ * waiting for a `workspace-fs` call that may never come.
+ *
+ * The queue is per-session and in-memory. If it is empty (the common case
+ * for a solo agent), this handler is a no-op: resolve session ID, check a
+ * Map, return. Zero added bytes.
+ *
+ * See docs/architecture/AMBIENT-AGENT-AWARENESS.md.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    kind: 'runtime/subscription',
+    id: 'external.file-access.ambient-drain',
+    name: 'Ambient Notice Drain',
+    description: 'Drains pending collision notices and messages from the filesystem watcher queue into the next tool result',
+    event: 'tools.tool.afterExecute',
+    handler: 'inline',
+    handlerType: 'inline',
+    enabled: true
+});
+//# sourceMappingURL=file-access-ambient-drain.subscription.descriptor.js.map

package/dist/ambient/file-access-ambient-drain.subscription.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access-ambient-drain.subscription.descriptor.js","sourceRoot":"","sources":["../../src/ambient/file-access-ambient-drain.subscription.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,sBAAsB;IAC5B,EAAE,EAAE,oCAAoC;IACxC,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACV,2GAA2G;IAC5G,KAAK,EAAE,yBAAyB;IAChC,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/ambient/file-access-ambient-fs.impl.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Ambient file-touch handler — filesystem watcher source.
+ *
+ * RECORDS touches AND fills a pending-notices queue when a collision is
+ * detected. The filesystem watcher fires 500ms after the edit (debounced),
+ * so there is no tool result to mutate — the notice is queued and the
+ * drain subscription (on ANY `tools.tool.afterExecute`) injects it into
+ * the next tool result the agent receives.
+ *
+ * WHAT THIS CLOSES: an agent using native `edit`/`write`/`bash` records
+ * nothing under the tool-only subscription. With this handler, the OS
+ * watcher sees those edits, records them, checks for peers, and queues
+ * a notice for delivery on the agent's next MCP tool call.
+ *
+ * NOISE FILTER: the OS watcher fires on build artifacts, lock files, git
+ * metadata — all of which would pollute the touch record and cause false
+ * collision notices. Those paths are filtered out before recording.
+ *
+ * Same invariants as the tool handler: never fail, never block, degrade to
+ * silence.
+ */
+/**
+ * Paths that are not agent file touches and would cause false collision
+ * notices if recorded. The OS watcher fires on ALL changes; this filter
+ * keeps the touch record about source files, not build byproducts.
+ *
+ * EVERY PATTERN HERE IS LOAD-BEARING, and the cost of a gap is not a few
+ * spurious rows. On 2026-08-21 a single `external.db` held 3,182,962 rows of
+ * which 3,181,876 — 99.97% — were watcher events for `.bun-build` scratch
+ * files. That was 5.6GB in one database (plus 1.2GB in a second), on a volume
+ * that had reached 100% capacity. Real tool calls accounted for 1,086 rows.
+ *
+ * The gap existed because the directory patterns below assume build output
+ * lands in a build DIRECTORY. Bun writes its scratch files to the workspace
+ * ROOT as `.<hash>-00000000.bun-build`, so `dist/`, `build/`, `.turbo/` and
+ * friends all miss them. When adding a build tool, check where it writes its
+ * temporary files, not just its output.
+ */
+export declare const NOISE_PATTERNS: readonly RegExp[];
+export declare function isNoisePath(path: string): boolean;
+declare const _default: {
+    handle(payload: unknown): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=file-access-ambient-fs.impl.d.ts.map

package/dist/ambient/file-access-ambient-fs.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access-ambient-fs.impl.d.ts","sourceRoot":"","sources":["../../src/ambient/file-access-ambient-fs.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA+BH;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAqB3C,CAAC;AAEF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;;oBAsBsB,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;;AAD9C,wBA8IE"}

package/dist/ambient/file-access-ambient-fs.impl.js

@@ -0,0 +1,243 @@
+/**
+ * Ambient file-touch handler — filesystem watcher source.
+ *
+ * RECORDS touches AND fills a pending-notices queue when a collision is
+ * detected. The filesystem watcher fires 500ms after the edit (debounced),
+ * so there is no tool result to mutate — the notice is queued and the
+ * drain subscription (on ANY `tools.tool.afterExecute`) injects it into
+ * the next tool result the agent receives.
+ *
+ * WHAT THIS CLOSES: an agent using native `edit`/`write`/`bash` records
+ * nothing under the tool-only subscription. With this handler, the OS
+ * watcher sees those edits, records them, checks for peers, and queues
+ * a notice for delivery on the agent's next MCP tool call.
+ *
+ * NOISE FILTER: the OS watcher fires on build artifacts, lock files, git
+ * metadata — all of which would pollute the touch record and cause false
+ * collision notices. Those paths are filtered out before recording.
+ *
+ * Same invariants as the tool handler: never fail, never block, degrade to
+ * silence.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { CollisionFilterSchema, DEFAULT_PEER_CAP, DEFAULT_RECENCY_WINDOW_MS, NoticeFormatterSchema } from "../schemas/collision.js";
+import { resolveTouchIdentity } from "../storage/touch-identity.js";
+import { canonicalTouchPath, isTouchPathInsideWorkspace } from "../schemas/path-identity.js";
+import { resolveTouchProjection, toProjectedTouch } from "./cloud-touch-projection.impl.js";
+import { resolveMessageTransport } from "./message-transport.impl.js";
+import { MESSAGE_DELIVERY_CAP, formatMessages } from "../schemas/agent-message.js";
+import { defaultCollisionFilter } from "./default-collision-filter.impl.js";
+import { defaultNoticeFormatter } from "./default-notice-formatter.impl.js";
+import { setPending } from "./pending-notices.js";
+import { resolveAmbientFileAccessClient, resolveAmbientImpl, resolveAmbientSessionId } from "./file-access-shared.js";
+import { attempt, withBudget } from "./attempt.js";
+/**
+ * Paths that are not agent file touches and would cause false collision
+ * notices if recorded. The OS watcher fires on ALL changes; this filter
+ * keeps the touch record about source files, not build byproducts.
+ *
+ * EVERY PATTERN HERE IS LOAD-BEARING, and the cost of a gap is not a few
+ * spurious rows. On 2026-08-21 a single `external.db` held 3,182,962 rows of
+ * which 3,181,876 — 99.97% — were watcher events for `.bun-build` scratch
+ * files. That was 5.6GB in one database (plus 1.2GB in a second), on a volume
+ * that had reached 100% capacity. Real tool calls accounted for 1,086 rows.
+ *
+ * The gap existed because the directory patterns below assume build output
+ * lands in a build DIRECTORY. Bun writes its scratch files to the workspace
+ * ROOT as `.<hash>-00000000.bun-build`, so `dist/`, `build/`, `.turbo/` and
+ * friends all miss them. When adding a build tool, check where it writes its
+ * temporary files, not just its output.
+ */
+export const NOISE_PATTERNS = [
+    /(^|\/)dist\//,
+    /(^|\/)\.svelte-kit\//,
+    /(^|\/)node_modules\//,
+    /(^|\/)\.git\//,
+    /(^|\/)\.vibes\//,
+    /(^|\/)\.turbo\//,
+    /(^|\/)__pycache__\//,
+    /(^|\/)\.next\//,
+    /(^|\/)build\//,
+    /(^|\/)\.cache\//,
+    /(^|\/)\.claude\//,
+    /(^|\/)\.agents\//,
+    /(^|\/)\.opencode\//,
+    /(^|\/)\.wrangler\//,
+    /(^|\/)\.vite\//,
+    /bun\.lockb?$/,
+    /\.DS_Store$/,
+    /\.(log|tmp|swp)$/,
+    // Build scratch, written to the workspace root rather than a build dir.
+    /\.bun-build$/
+];
+export function isNoisePath(path) {
+    return NOISE_PATTERNS.some((p) => p.test(path));
+}
+/** fs actions that represent a CHANGE worth checking for collisions. */
+/**
+ * The filesystem-watch event this handler records: the changed paths plus the
+ * runtime that publishes them. The runtime itself is only proven an object
+ * here — its surface is the publisher's contract, read through the shared
+ * resolvers below.
+ */
+const WatchEventSchema = z.object({
+    paths: z.array(z.unknown()).optional(),
+    reason: z.string().optional(),
+    runtime: z.custom((value) => value instanceof Object).optional()
+});
+/** A usable path candidate from the watch batch. */
+function isString(value) {
+    return typeof value === 'string';
+}
+export default {
+    async handle(payload) {
+        const parsed = WatchEventSchema.safeParse(payload);
+        if (!parsed.success)
+            return;
+        const event = parsed.data;
+        if (!event.paths || event.paths.length === 0)
+            return;
+        if (!event.runtime) {
+            // Publishers hand the runtime with the event; without it this recorder cannot act (there is no
+            // runtime to log through either), so it refuses: the hook dispatcher reports the typed failure.
+            throw new CapabilityError('The filesystem watch event carried no runtime; the touch cannot be recorded.', 'INVALID_INPUT', {
+                reason: 'watch-event-runtime-missing',
+                details: { paths: event.paths.length }
+            });
+        }
+        const paths = event.paths.filter(isString).filter((p) => p.length > 0);
+        if (paths.length === 0)
+            return;
+        const runtime = event.runtime;
+        const [sessionId, client] = await Promise.all([
+            resolveAmbientSessionId(runtime),
+            resolveAmbientFileAccessClient(runtime)
+        ]);
+        if (!sessionId || !client)
+            return;
+        const identityOutcome = await attempt(runtime, () => resolveTouchIdentity(runtime));
+        const identity = identityOutcome.ok ? identityOutcome.value : {};
+        // The watcher is workspace awareness, not a machine-wide activity log.
+        // Refuse to record when its root is unknown, repair the missing-leading-
+        // slash form some providers emit, and drop anything outside the bound
+        // checkout before local persistence or cloud projection.
+        const canonicalPaths = [
+            ...new Set(paths
+                .filter((path) => isTouchPathInsideWorkspace(path, identity.workspaceRoot))
+                .map((path) => canonicalTouchPath(path, identity.workspaceRoot))
+                .filter((path) => !isNoisePath(path)))
+        ];
+        if (canonicalPaths.length === 0)
+            return;
+        // 1. RECORD locally — fire-and-forget.
+        void Promise.all(canonicalPaths.map((filePath) => attempt(runtime, () => client.trackFileAccess({
+            sessionId,
+            filePath,
+            operation: 'edit',
+            toolName: 'filesystem-watcher',
+            ...identity
+        }))));
+        // 2. PROJECT outward for cross-machine visibility.
+        void attempt(runtime, async () => {
+            const projection = await resolveTouchProjection(runtime);
+            const now = new Date();
+            projection.project(canonicalPaths.map((filePath) => toProjectedTouch({
+                sessionId,
+                filePath,
+                operation: 'edit',
+                timestamp: now,
+                machineId: identity.machineId,
+                machineName: identity.machineName,
+                participantId: identity.participantId,
+                participantSlug: identity.participantSlug,
+                workspaceRoot: identity.workspaceRoot,
+                gitBranch: identity.gitBranch,
+                workItemId: identity.workItemId,
+                workItemTitle: identity.workItemTitle
+            })));
+        });
+        // 3. CHECK FOR COLLISIONS — if another session touched the same path
+        // recently, queue a notice for delivery on the next tool call. Only
+        // the primary path (first in the batch) to respect the noise budget.
+        const primary = canonicalPaths[0];
+        if (!primary)
+            return;
+        await withBudget(runtime, attempt(runtime, async () => {
+            const peers = await collectPeers(runtime, client, {
+                sessionId,
+                filePath: primary,
+                workspaceRoot: identity.workspaceRoot
+            });
+            if (peers.length === 0)
+                return;
+            const formatter = await resolveAmbientImpl(runtime, 'external/notice-formatter', NoticeFormatterSchema, defaultNoticeFormatter);
+            const lineOutcome = await attempt(runtime, async () => formatter.format(peers, {
+                filePath: primary,
+                cap: DEFAULT_PEER_CAP,
+                now: new Date()
+            }));
+            const line = lineOutcome.ok ? lineOutcome.value : undefined;
+            if (!line)
+                return;
+            setPending(runtime, sessionId, { notice: line });
+        }), 300, 'ambient-fs-budget');
+        // 4. CLAIM MESSAGES — anything addressed to this session. Queue for
+        // delivery on the next tool call.
+        await withBudget(runtime, attempt(runtime, async () => {
+            const transport = await resolveMessageTransport(runtime);
+            const claimed = await transport.claim({
+                sessionId,
+                workspaceRoot: identity.workspaceRoot,
+                filePaths: canonicalPaths,
+                limit: MESSAGE_DELIVERY_CAP
+            });
+            const messageLine = formatMessages(claimed, MESSAGE_DELIVERY_CAP);
+            if (messageLine) {
+                setPending(runtime, sessionId, { messages: messageLine });
+            }
+        }), 300, 'ambient-fs-budget');
+    }
+};
+async function collectPeers(runtime, client, input) {
+    const now = new Date();
+    const since = new Date(now.getTime() - DEFAULT_RECENCY_WINDOW_MS);
+    const [localOutcome, remoteOutcome] = await Promise.all([
+        attempt(runtime, () => client.whoElseTouched({
+            filePath: input.filePath,
+            workspaceRoot: input.workspaceRoot,
+            excludeSessionId: input.sessionId,
+            since,
+            limit: DEFAULT_PEER_CAP + 5
+        })),
+        attempt(runtime, async () => {
+            const projection = await resolveTouchProjection(runtime);
+            return projection.peersForPath({
+                filePath: input.filePath,
+                workspaceRoot: input.workspaceRoot,
+                excludeSessionId: input.sessionId,
+                since,
+                limit: DEFAULT_PEER_CAP + 5
+            });
+        })
+    ]);
+    const bySession = new Map();
+    const local = localOutcome.ok ? localOutcome.value : [];
+    const remote = remoteOutcome.ok ? remoteOutcome.value : [];
+    for (const peer of remote)
+        bySession.set(peer.sessionId, peer);
+    for (const peer of local)
+        bySession.set(peer.sessionId, peer);
+    const candidates = Array.from(bySession.values());
+    if (candidates.length === 0)
+        return [];
+    const filter = await resolveAmbientImpl(runtime, 'external/collision-filter', CollisionFilterSchema, defaultCollisionFilter);
+    const filterOutcome = await attempt(runtime, async () => filter.filter(candidates, {
+        sessionId: input.sessionId,
+        workspaceRoot: input.workspaceRoot,
+        since,
+        now
+    }));
+    return filterOutcome.ok ? filterOutcome.value : [];
+}
+//# sourceMappingURL=file-access-ambient-fs.impl.js.map

package/dist/ambient/file-access-ambient-fs.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access-ambient-fs.impl.js","sourceRoot":"","sources":["../../src/ambient/file-access-ambient-fs.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EACN,qBAAqB,EACrB,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EAErB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACN,kBAAkB,EAClB,0BAA0B,EAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EACN,8BAA8B,EAC9B,kBAAkB,EAClB,uBAAuB,EAEvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEnD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB;IAChD,cAAc;IACd,sBAAsB;IACtB,sBAAsB;IACtB,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,qBAAqB;IACrB,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,gBAAgB;IAChB,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,wEAAwE;IACxE,cAAc;CACd,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACvC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,wEAAwE;AAExE;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAe,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,MAAM,CAAC,CAAC,QAAQ,EAAE;CAC9E,CAAC,CAAC;AAEH,oDAAoD;AACpD,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,eAAe;IACd,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC5B,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACpB,+FAA+F;YAC/F,gGAAgG;YAChG,MAAM,IAAI,eAAe,CAAC,8EAA8E,EAAE,eAAe,EAAE;gBAC1H,MAAM,EAAE,6BAA6B;gBACrC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE;aACtC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAE9B,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7C,uBAAuB,CAAC,OAAO,CAAC;YAChC,8BAA8B,CAAC,OAAO,CAAC;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;YAAE,OAAO;QAElC,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,uEAAuE;QACvE,yEAAyE;QACzE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,cAAc,GAAG;YACtB,GAAG,IAAI,GAAG,CACT,KAAK;iBACH,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;iBAC1E,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;iBAC/D,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CACtC;SACD,CAAC;QACF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAExC,uCAAuC;QACvC,KAAK,OAAO,CAAC,GAAG,CACf,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/B,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CACrB,MAAM,CAAC,eAAe,CAAC;YACtB,SAAS;YACT,QAAQ;YACR,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,oBAAoB;YAC9B,GAAG,QAAQ;SACX,CAAC,CACF,CACD,CACD,CAAC;QAEF,mDAAmD;QACnD,KAAK,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,UAAU,CAAC,OAAO,CACjB,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/B,gBAAgB,CAAC;gBAChB,SAAS;gBACT,QAAQ;gBACR,SAAS,EAAE,MAAM;gBACjB,SAAS,EAAE,GAAG;gBACf,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,eAAe,EAAE,QAAQ,CAAC,eAAe;gBACzC,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;aACrC,CAAC,CACF,CACD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,UAAU,CACf,OAAO,EACP,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE;gBACjD,SAAS;gBACT,QAAQ,EAAE,OAAO;gBACjB,aAAa,EAAE,QAAQ,CAAC,aAAa;aACrC,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAE/B,MAAM,SAAS,GAAG,MAAM,kBAAkB,CACzC,OAAO,EACP,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,CACtB,CAAC;YAEF,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CACrD,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE;gBACvB,QAAQ,EAAE,OAAO;gBACjB,GAAG,EAAE,gBAAgB;gBACrB,GAAG,EAAE,IAAI,IAAI,EAAE;aACf,CAAC,CACF,CAAC;YACF,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,IAAI,CAAC,IAAI;gBAAE,OAAO;YAElB,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC,CAAC,EACF,GAAG,EACH,mBAAmB,CACnB,CAAC;QAEF,oEAAoE;QACpE,kCAAkC;QAClC,MAAM,UAAU,CACf,OAAO,EACP,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC;gBACrC,SAAS;gBACT,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,SAAS,EAAE,cAAc;gBACzB,KAAK,EAAE,oBAAoB;aAC3B,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YAClE,IAAI,WAAW,EAAE,CAAC;gBACjB,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3D,CAAC;QACF,CAAC,CAAC,EACF,GAAG,EACH,mBAAmB,CACnB,CAAC;IACH,CAAC;CACD,CAAC;AAEF,KAAK,UAAU,YAAY,CAC1B,OAAqB,EACrB,MAA+B,EAC/B,KAAsE;IAEtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,CAAC;IAElE,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvD,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CACrB,MAAM,CAAC,cAAc,CAAC;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,gBAAgB,EAAE,KAAK,CAAC,SAAS;YACjC,KAAK;YACL,KAAK,EAAE,gBAAgB,GAAG,CAAC;SAC3B,CAAC,CACF;QACD,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO,UAAU,CAAC,YAAY,CAAC;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,gBAAgB,EAAE,KAAK,CAAC,SAAS;gBACjC,KAAK;gBACL,KAAK,EAAE,gBAAgB,GAAG,CAAC;aAC3B,CAAC,CAAC;QACJ,CAAC,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAE9D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACtC,OAAO,EACP,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,CACtB,CAAC;IAEF,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CACvD,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;QACzB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK;QACL,GAAG;KACH,CAAC,CACF,CAAC;IACF,OAAO,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC"}

package/dist/ambient/file-access-ambient-fs.subscription.descriptor.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Ambient file-touch subscription — filesystem watcher source.
+ *
+ * The sibling `external.file-access.ambient` subscription fires on
+ * `tools.tool.afterExecute` filtered to `workspace-fs` — it only sees MCP
+ * workspace-fs tool calls. An agent using native `edit`/`write`/`bash`
+ * records nothing, which is exactly the case for most MCP client agents.
+ *
+ * When explicitly enabled, this subscription records watcher touches and queues
+ * notices/messages for the next observable tool or hook response.
+ *
+ * Disabled in production: Workspace must drop gone paths and exclude .vibes/
+ * before re-enablement. A watcher event is no guarantee of universal native-edit
+ * coverage. Disposable fixtures enable this descriptor before runtime wiring.
+ *
+ * See docs/architecture/AMBIENT-AGENT-AWARENESS.md.
+ */
+declare const _default: {
+    kind: "runtime/subscription";
+    id: string;
+    name: string;
+    description: string;
+    event: string;
+    handler: string;
+    handlerType: string;
+    filter: {
+        reason: string;
+    };
+    enabled: false;
+};
+export default _default;
+//# sourceMappingURL=file-access-ambient-fs.subscription.descriptor.d.ts.map

package/dist/ambient/file-access-ambient-fs.subscription.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access-ambient-fs.subscription.descriptor.d.ts","sourceRoot":"","sources":["../../src/ambient/file-access-ambient-fs.subscription.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;;AAIH,wBAoBG"}

package/dist/ambient/file-access-ambient-fs.subscription.descriptor.js

@@ -0,0 +1,39 @@
+/**
+ * Ambient file-touch subscription — filesystem watcher source.
+ *
+ * The sibling `external.file-access.ambient` subscription fires on
+ * `tools.tool.afterExecute` filtered to `workspace-fs` — it only sees MCP
+ * workspace-fs tool calls. An agent using native `edit`/`write`/`bash`
+ * records nothing, which is exactly the case for most MCP client agents.
+ *
+ * When explicitly enabled, this subscription records watcher touches and queues
+ * notices/messages for the next observable tool or hook response.
+ *
+ * Disabled in production: Workspace must drop gone paths and exclude .vibes/
+ * before re-enablement. A watcher event is no guarantee of universal native-edit
+ * coverage. Disposable fixtures enable this descriptor before runtime wiring.
+ *
+ * See docs/architecture/AMBIENT-AGENT-AWARENESS.md.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    kind: 'runtime/subscription',
+    id: 'external.file-access.ambient-fs',
+    name: 'Ambient File Touch (Filesystem Watcher)',
+    description: 'Records file changes seen by the OS-level workspace watcher so native/external edits participate in collision awareness',
+    event: 'filesystem.fragment.invalidate',
+    handler: 'inline',
+    handlerType: 'inline',
+    filter: {
+        reason: 'watch'
+    },
+    // Disabled 2026-10-05 00:08 UTC (coordinator stop-gap, Drew-directed): a full-tree watcher pass persisted
+    // as ~100k file_accesses inserts held the shared MCP host's thread.
+    //
+    // Re-enabled by the watcher fix (d6669da30), then disabled again 2026-10-05 05:45 UTC
+    // (coordinator stop-gap): the watcher still publishes paths whose stat fails with
+    // ENOENT, .vibes/ is inside the watched tree, and the daemon crash-looped. It
+    // returns once the watcher drops gone paths and ignores .vibes/ (workspace owner).
+    enabled: false
+});
+//# sourceMappingURL=file-access-ambient-fs.subscription.descriptor.js.map