@vibesdotdev/external 0.0.0-stage → 1.0.0-rc.1

package/dist/config/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/config/manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAyB5B,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiD/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8K1B,CAAC;AAEV,eAAe,sBAAsB,CAAC"}

package/dist/config/manifest.js

@@ -0,0 +1,210 @@
+/**
+ * External Tools Configuration Manifest
+ *
+ * Configuration for external AI coding tool integrations.
+ * Includes import paths for userland manifests, default tiers, etc.
+ */
+import * as z from 'zod/v4';
+import { createConfigManifest, inputField, selectField, booleanField, option } from '@vibesdotdev/config/manifest/builder';
+import { ToolTierSchema } from "../schemas/tiers.js";
+import { CollaborationSettingsSchema } from "../ambient/collaboration-settings.js";
+/**
+ * Default paths to scan for userland external tool descriptors.
+ *
+ * Note: runtime discovery already scans `~/.vibes` and `./.vibes` by default.
+ * These paths exist for potential future expansion to node_modules scanning.
+ */
+const DEFAULT_IMPORT_PATHS = [
+    'node_modules/@vibes-plugins',
+    'node_modules/vibes-external-*',
+    '.vibes/external-tools'
+];
+// Schema
+export const ExternalConfigSchema = z.object({
+    /**
+     * Reserved for future use.
+     *
+     * Today, external tools are discovered via runtime filesystem discovery in:
+     * - `~/.vibes/**`
+     * - `./.vibes/**`
+     *
+     * We currently do not scan `node_modules` for external tool descriptors.
+     */
+    importPaths: z.array(z.string()).default(DEFAULT_IMPORT_PATHS),
+    /**
+     * Default tier for new tool installations
+     */
+    defaultTier: ToolTierSchema.default('default'),
+    /**
+     * Whether to auto-detect installed tools on startup
+     */
+    autoDetect: z.boolean().default(true),
+    /**
+     * Default installation location
+     */
+    defaultInstallLocation: z.enum(['global', 'project']).default('project'),
+    /**
+     * Enable debug logging for external tool integration
+     */
+    debug: z.boolean().default(false),
+    /**
+     * Custom vibes CLI path for MCP server configuration
+     * If not set, uses the default "vibes" command
+     */
+    vibesPath: z.string().optional(),
+    /**
+     * Cross-machine ambient projection (file touches, roster). Previous env
+     * `VIBES_AMBIENT_PROJECTION`: empty / anything but `off` meant on.
+     */
+    ambientProjection: z.enum(['on', 'off']).default('on'),
+    /**
+     * Multi-agent collaboration: native-edit locks, ambient message and notice
+     * delivery in hook responses, and the self-review cadence.
+     */
+    collaboration: CollaborationSettingsSchema.default(() => CollaborationSettingsSchema.parse({}))
+});
+// Manifest
+export const externalConfigManifest = createConfigManifest({
+    id: 'external',
+    name: 'External Tools',
+    description: 'Configuration for external AI coding tool integrations',
+    icon: '🔌',
+    tier: 'user',
+    category: 'integration',
+    version: 1,
+    schema: ExternalConfigSchema,
+    storage: {
+        adapter: 'json',
+        scope: 'global',
+        namespace: 'external'
+    },
+    navigation: {
+        page: 'settings',
+        section: 'integration',
+        order: 50,
+        label: 'External Tools',
+        tags: ['external', 'integration', 'mcp']
+    }
+})
+    .group({
+    id: 'discovery',
+    label: 'Tool Discovery',
+    description: 'Configure how external tools are discovered',
+    order: 1
+})
+    .group({
+    id: 'defaults',
+    label: 'Installation Defaults',
+    description: 'Default settings for tool installation',
+    order: 2
+})
+    .group({
+    id: 'advanced',
+    label: 'Advanced',
+    description: 'Advanced configuration options',
+    order: 3,
+    collapsible: true,
+    defaultCollapsed: true
+})
+    .field('importPaths', {
+    ui: {
+        label: 'Import Paths',
+        description: 'Reserved for future use. External tools are currently discovered from ~/.vibes and ./.vibes.',
+        component: 'json',
+        group: 'discovery',
+        order: 1,
+        helpText: 'Planned: scan additional locations (including node_modules) for external tool descriptors.'
+    },
+    tags: ['advanced']
+})
+    .field('autoDetect', {
+    ui: {
+        label: 'Auto-detect Tools',
+        description: 'Automatically detect installed AI coding tools on startup',
+        component: 'switch',
+        group: 'discovery',
+        order: 2
+    }
+})
+    .field('defaultTier', selectField('Default Tier', [
+    option('minimal', 'Minimal', {
+        description: 'Session tracking and language intelligence only',
+        icon: '📝'
+    }),
+    option('default', 'Default', {
+        description: 'Core development tools - file operations and code intelligence',
+        icon: '⚙️'
+    }),
+    option('recommended', 'Recommended', {
+        description: 'Enhanced automation with browser, desktop, and knowledge tools',
+        icon: '🚀'
+    }),
+    option('full', 'Full', {
+        description: 'All available tools for power users',
+        icon: '💪'
+    })
+], {
+    ui: {
+        group: 'defaults',
+        order: 1,
+        description: 'Default tier to apply when installing vibes integration'
+    }
+}))
+    .field('defaultInstallLocation', selectField('Default Install Location', [
+    option('project', 'Project', {
+        description: 'Install configuration in the current project directory',
+        icon: '📁'
+    }),
+    option('global', 'Global', {
+        description: 'Install configuration in the global user directory',
+        icon: '🌐'
+    })
+], {
+    ui: {
+        group: 'defaults',
+        order: 2,
+        description: 'Where to install MCP and hook configurations by default'
+    }
+}))
+    .field('vibesPath', inputField('Vibes CLI Path', {
+    ui: {
+        group: 'advanced',
+        order: 1,
+        description: 'Custom path to the vibes CLI executable',
+        placeholder: 'vibes (default)',
+        helpText: 'Leave empty to use the default "vibes" command'
+    }
+}))
+    .field('debug', booleanField('Debug Mode', {
+    ui: {
+        group: 'advanced',
+        order: 2,
+        description: 'Enable verbose logging for external tool integration'
+    }
+}))
+    .field('ambientProjection', selectField('Ambient projection', [
+    option('on', 'On', {
+        description: 'Project file touches and roster to the declared hq service'
+    }),
+    option('off', 'Off', {
+        description: 'Local-only; nothing is sent off this machine'
+    })
+], {
+    ui: {
+        group: 'advanced',
+        order: 3,
+        description: 'Cross-machine ambient projection. Off keeps the host local-only.'
+    }
+}))
+    .field('collaboration', {
+    ui: {
+        label: 'Collaboration',
+        description: 'Native-edit locks, ambient message and notice delivery, and the self-review nudge cadence (selfReviewEveryEdits, selfReviewAtStop, selfReviewPromptId).',
+        component: 'json',
+        group: 'advanced',
+        order: 4
+    }
+})
+    .build();
+export default externalConfigManifest;
+//# sourceMappingURL=manifest.js.map

package/dist/config/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/config/manifest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,oBAAoB,EACpB,UAAU,EACV,WAAW,EACX,YAAY,EACZ,MAAM,EACN,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG;IAC5B,6BAA6B;IAC7B,+BAA+B;IAC/B,uBAAuB;CACvB,CAAC;AAEF,SAAS;AAET,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;;;;OAQG;IACH,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAE9D;;OAEG;IACH,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC;IAE9C;;OAEG;IACH,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAErC;;OAEG;IACH,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAExE;;OAEG;IACH,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAEjC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEhC;;;OAGG;IACH,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAEtD;;;OAGG;IACH,aAAa,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;CAC/F,CAAC,CAAC;AAIH,WAAW;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;IAC1D,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,wDAAwD;IACrE,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,aAAa;IACvB,OAAO,EAAE,CAAC;IAEV,MAAM,EAAE,oBAAoB;IAE5B,OAAO,EAAE;QACR,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,QAAQ;QACf,SAAS,EAAE,UAAU;KACrB;IAED,UAAU,EAAE;QACX,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC;KACxC;CACD,CAAC;KACA,KAAK,CAAC;IACN,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,gBAAgB;IACvB,WAAW,EAAE,6CAA6C;IAC1D,KAAK,EAAE,CAAC;CACR,CAAC;KACD,KAAK,CAAC;IACN,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EAAE,wCAAwC;IACrD,KAAK,EAAE,CAAC;CACR,CAAC;KACD,KAAK,CAAC;IACN,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,UAAU;IACjB,WAAW,EAAE,gCAAgC;IAC7C,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,IAAI;IACjB,gBAAgB,EAAE,IAAI;CACtB,CAAC;KACD,KAAK,CAAC,aAAa,EAAE;IACrB,EAAE,EAAE;QACH,KAAK,EAAE,cAAc;QACrB,WAAW,EACV,8FAA8F;QAC/F,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,CAAC;QACR,QAAQ,EACP,4FAA4F;KAC7F;IACD,IAAI,EAAE,CAAC,UAAU,CAAC;CAClB,CAAC;KACD,KAAK,CAAC,YAAY,EAAE;IACpB,EAAE,EAAE;QACH,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,2DAA2D;QACxE,SAAS,EAAE,QAAQ;QACnB,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,CAAC;KACR;CACD,CAAC;KACD,KAAK,CACL,aAAa,EACb,WAAW,CACV,cAAc,EACd;IACC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE;QAC5B,WAAW,EAAE,iDAAiD;QAC9D,IAAI,EAAE,IAAI;KACV,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE;QAC5B,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,IAAI;KACV,CAAC;IACF,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE;QACpC,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,IAAI;KACV,CAAC;IACF,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE;QACtB,WAAW,EAAE,qCAAqC;QAClD,IAAI,EAAE,IAAI;KACV,CAAC;CACF,EACD;IACC,EAAE,EAAE;QACH,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,yDAAyD;KACtE;CACD,CACD,CACD;KACA,KAAK,CACL,wBAAwB,EACxB,WAAW,CACV,0BAA0B,EAC1B;IACC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE;QAC5B,WAAW,EAAE,wDAAwD;QACrE,IAAI,EAAE,IAAI;KACV,CAAC;IACF,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE;QAC1B,WAAW,EAAE,oDAAoD;QACjE,IAAI,EAAE,IAAI;KACV,CAAC;CACF,EACD;IACC,EAAE,EAAE;QACH,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,yDAAyD;KACtE;CACD,CACD,CACD;KACA,KAAK,CACL,WAAW,EACX,UAAU,CAAC,gBAAgB,EAAE;IAC5B,EAAE,EAAE;QACH,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,yCAAyC;QACtD,WAAW,EAAE,iBAAiB;QAC9B,QAAQ,EAAE,gDAAgD;KAC1D;CACD,CAAC,CACF;KACA,KAAK,CACL,OAAO,EACP,YAAY,CAAC,YAAY,EAAE;IAC1B,EAAE,EAAE;QACH,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,sDAAsD;KACnE;CACD,CAAC,CACF;KACA,KAAK,CACL,mBAAmB,EACnB,WAAW,CACV,oBAAoB,EACpB;IACC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE;QAClB,WAAW,EAAE,4DAA4D;KACzE,CAAC;IACF,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE;QACpB,WAAW,EAAE,8CAA8C;KAC3D,CAAC;CACF,EACD;IACC,EAAE,EAAE;QACH,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,kEAAkE;KAC/E;CACD,CACD,CACD;KACA,KAAK,CAAC,eAAe,EAAE;IACvB,EAAE,EAAE;QACH,KAAK,EAAE,eAAe;QACtB,WAAW,EACV,yJAAyJ;QAC1J,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,CAAC;KACR;CACD,CAAC;KACD,KAAK,EAAE,CAAC;AAEV,eAAe,sBAAsB,CAAC"}

package/dist/config/read.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Read External settings through the owning config/manifest on the given runtime.
+ * Schema defaults apply when nothing is stored or composed.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import externalConfigDescriptor, { EXTERNAL_CONFIG_MANIFEST_ID } from './external.config.descriptor.ts';
+import { type ExternalConfig } from './manifest.ts';
+export type ExternalConfigRuntime = RuntimeRef;
+export declare function readExternalConfig(runtime: ExternalConfigRuntime): Promise<ExternalConfig>;
+/** Previous useful default: projection on unless the host set `off`; a runtime composing no External config manifest takes the schema default. */
+export declare function ambientProjectionIsOff(runtime: ExternalConfigRuntime): Promise<boolean>;
+export { externalConfigDescriptor, EXTERNAL_CONFIG_MANIFEST_ID };
+//# sourceMappingURL=read.d.ts.map

package/dist/config/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/config/read.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,wBAAwB,EAAE,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AACxG,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE1E,MAAM,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAE/C,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CAEhG;AAED,kJAAkJ;AAClJ,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAM7F;AAED,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/config/read.js

@@ -0,0 +1,20 @@
+/**
+ * Read External settings through the owning config/manifest on the given runtime.
+ * Schema defaults apply when nothing is stored or composed.
+ */
+import { ConfigManifest } from '@vibesdotdev/config/manifest/config-manifest';
+import externalConfigDescriptor, { EXTERNAL_CONFIG_MANIFEST_ID } from "./external.config.descriptor.js";
+import { ExternalConfigSchema } from "./manifest.js";
+export async function readExternalConfig(runtime) {
+    return ConfigManifest.forRuntime(runtime, EXTERNAL_CONFIG_MANIFEST_ID).load();
+}
+/** Previous useful default: projection on unless the host set `off`; a runtime composing no External config manifest takes the schema default. */
+export async function ambientProjectionIsOff(runtime) {
+    if (!ConfigManifest.isRegistered(runtime, EXTERNAL_CONFIG_MANIFEST_ID)) {
+        return ExternalConfigSchema.parse({}).ambientProjection === 'off';
+    }
+    const config = await readExternalConfig(runtime);
+    return config.ambientProjection === 'off';
+}
+export { externalConfigDescriptor, EXTERNAL_CONFIG_MANIFEST_ID };
+//# sourceMappingURL=read.js.map

package/dist/config/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/config/read.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,8CAA8C,CAAC;AAE9E,OAAO,wBAAwB,EAAE,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AACxG,OAAO,EAAE,oBAAoB,EAAuB,MAAM,eAAe,CAAC;AAI1E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA8B;IACtE,OAAO,cAAc,CAAC,UAAU,CAAiB,OAAO,EAAE,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/F,CAAC;AAED,kJAAkJ;AAClJ,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAA8B;IAC1E,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,EAAE,2BAA2B,CAAC,EAAE,CAAC;QACxE,OAAO,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,iBAAiB,KAAK,KAAK,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,iBAAiB,KAAK,KAAK,CAAC;AAC3C,CAAC;AAED,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/consumer.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Host-side External tooling aggregate.
+ *
+ * The neutral `@vibesdotdev/external` export stays universal. Consumers
+ * that install files, inspect processes, or execute host recipes opt into this
+ * explicitly named surface.
+ */
+export * as config from './config/index.ts';
+export * as hooks from './hooks/consumer.ts';
+export * as presets from './presets/index.ts';
+export * as plugins from './plugins/index.ts';
+export * as detection from './detection/index.ts';
+export * as pack from './pack/index.ts';
+export { resolvePathTemplate } from './external-tool/path-template.ts';
+//# sourceMappingURL=consumer.d.ts.map

package/dist/consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.d.ts","sourceRoot":"","sources":["../src/consumer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,KAAK,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/consumer.js

@@ -0,0 +1,15 @@
+/**
+ * Host-side External tooling aggregate.
+ *
+ * The neutral `@vibesdotdev/external` export stays universal. Consumers
+ * that install files, inspect processes, or execute host recipes opt into this
+ * explicitly named surface.
+ */
+export * as config from "./config/index.js";
+export * as hooks from "./hooks/consumer.js";
+export * as presets from "./presets/index.js";
+export * as plugins from "./plugins/index.js";
+export * as detection from "./detection/index.js";
+export * as pack from "./pack/index.js";
+export { resolvePathTemplate } from "./external-tool/path-template.js";
+//# sourceMappingURL=consumer.js.map

package/dist/consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer.js","sourceRoot":"","sources":["../src/consumer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,KAAK,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,OAAO,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,IAAI,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/detection/base.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Base Agent Detector
+ *
+ * Abstract base class providing common detection utilities.
+ */
+import { type RuntimeRef, type ValueFreeFailure } from '@vibesdotdev/kernel';
+import { type ConfigTable, type HostConfigDocument } from './config-document.ts';
+import type { ConfigFormat, AgentDetector, AgentMetadata, AgentInstallation, AgentMcpState, AgentDetectionResult } from './types.ts';
+/**
+ * Base class for agent detectors with common utilities
+ */
+export declare abstract class BaseAgentDetector implements AgentDetector {
+    protected readonly runtime: RuntimeRef;
+    abstract readonly metadata: AgentMetadata;
+    /** The runtime whose execution kind answers command probes; never a shell. */
+    protected constructor(runtime: RuntimeRef);
+    abstract detectInstallation(): Promise<AgentInstallation>;
+    abstract getMcpState(projectDir?: string): Promise<AgentMcpState>;
+    abstract getConfigPath(global: boolean, projectDir?: string): string;
+    /**
+     * Full detection combining installation and MCP state
+     */
+    detect(projectDir?: string): Promise<AgentDetectionResult>;
+    /** Log an optional probe's failure, value-free, on the handed runtime's logger. */
+    protected reportProbeFailure(message: string, failure: ValueFreeFailure): void;
+    /** Whether anything exists at `path`, through the runtime's filesystem. */
+    protected fileExists(path: string): Promise<boolean>;
+    /**
+     * List directory entry names (empty array when the directory is absent). Used by
+     * manifest-driven extension detection (scan an extensions dir for a prefix).
+     */
+    protected listDir(path: string): Promise<string[]>;
+    /**
+     * Read a host config by its declared format; `null` when the file is absent.
+     * A file that does not parse is refused typed (`host-config-invalid`), never
+     * reported as absent.
+     */
+    protected readConfig(path: string, format: ConfigFormat): Promise<HostConfigDocument | null>;
+    /**
+     * Whether an admitted command is on the execution host's PATH. A name the
+     * command schema refuses throws `INVALID_INPUT` `external-command-name-invalid`.
+     */
+    protected commandExists(command: string): Promise<boolean>;
+    /**
+     * The first version-shaped token a command prints for its version
+     * arguments, run as an argv array. Version is optional metadata: a probe
+     * that fails is logged value-free and reads as unknown.
+     */
+    protected getCommandVersion(command: string, versionFlag?: string): Promise<string | undefined>;
+    /**
+     * What an admitted command prints for admitted arguments, run as an argv
+     * array at its resolved path; `undefined` when it is not on PATH or the
+     * probe fails (optional metadata, logged value-free).
+     */
+    protected getCommandOutput(command: string, args: readonly string[]): Promise<string | undefined>;
+    /** One probe run: its output (`undefined` off PATH), or the value-free facts of its failure. */
+    private probeCommand;
+    /**
+     * The absolute path of an admitted command on the execution host's PATH.
+     */
+    protected getCommandPath(command: string): Promise<string | undefined>;
+    /**
+     * Check if the MCP server config carries its own credential: an http
+     * server's `Authorization` header. A `VIBES_AUTH_TOKEN` in `env` or
+     * `settings` is not one: installers no longer publish it, and a stdio
+     * server resolves the caller's bearer from its own host (R3). A leftover
+     * key is reported as `publishedBearer`, for a reinstall to remove.
+     */
+    protected hasAuthTokenInConfig(serverConfig: ConfigTable | undefined): boolean;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/detection/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/detection/base.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAyC,KAAK,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAIpH,OAAO,EAA6C,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC5H,OAAO,KAAK,EACX,YAAY,EACZ,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,oBAAoB,EACpB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,8BAAsB,iBAAkB,YAAW,aAAa;IAIzC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU;IAH5D,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAE1C,8EAA8E;IAC9E,SAAS,aAAgC,OAAO,EAAE,UAAU;IAE5D,QAAQ,CAAC,kBAAkB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IACzD,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IACjE,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM;IAEpE;;OAEG;IACG,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAahE,mFAAmF;IACnF,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAI9E,2EAA2E;cAC3D,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D;;;OAGG;cACa,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIxD;;;;OAIG;cACa,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAKlG;;;OAGG;cACa,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhE;;;;OAIG;cACa,iBAAiB,CAChC,OAAO,EAAE,MAAM,EACf,WAAW,SAAc,GACvB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAK9B;;;;OAIG;cACa,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IASvG,gGAAgG;YAClF,YAAY;IAW1B;;OAEG;cACa,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAI5E;;;;;;OAMG;IACH,SAAS,CAAC,oBAAoB,CAAC,YAAY,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO;CAK9E"}

package/dist/detection/base.js

@@ -0,0 +1,115 @@
+/**
+ * Base Agent Detector
+ *
+ * Abstract base class providing common detection utilities.
+ */
+import { CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { getLogger } from '@vibesdotdev/logging';
+import { resolveExternalCommand, runExternalCommandProbe } from "./command-probe.js";
+import { externalFileSystem, listNamesIfPresent, readTextIfPresent } from "../utils/runtime-fs.js";
+import { configEntry, configTable, parseHostConfig } from "./config-document.js";
+/**
+ * Base class for agent detectors with common utilities
+ */
+export class BaseAgentDetector {
+    runtime;
+    /** The runtime whose execution kind answers command probes; never a shell. */
+    constructor(runtime) {
+        this.runtime = runtime;
+    }
+    /**
+     * Full detection combining installation and MCP state
+     */
+    async detect(projectDir) {
+        const [installation, mcpState] = await Promise.all([
+            this.detectInstallation(),
+            this.getMcpState(projectDir)
+        ]);
+        return {
+            agent: this.metadata,
+            installation,
+            mcpState
+        };
+    }
+    /** Log an optional probe's failure, value-free, on the handed runtime's logger. */
+    reportProbeFailure(message, failure) {
+        getLogger('external.detection', this.runtime).warn(message, { failure });
+    }
+    /** Whether anything exists at `path`, through the runtime's filesystem. */
+    async fileExists(path) {
+        return (await externalFileSystem(this.runtime)).exists(path);
+    }
+    /**
+     * List directory entry names (empty array when the directory is absent). Used by
+     * manifest-driven extension detection (scan an extensions dir for a prefix).
+     */
+    async listDir(path) {
+        return listNamesIfPresent(await externalFileSystem(this.runtime), path);
+    }
+    /**
+     * Read a host config by its declared format; `null` when the file is absent.
+     * A file that does not parse is refused typed (`host-config-invalid`), never
+     * reported as absent.
+     */
+    async readConfig(path, format) {
+        const text = await readTextIfPresent(await externalFileSystem(this.runtime), path);
+        return text === null ? null : parseHostConfig(text, path, format);
+    }
+    /**
+     * Whether an admitted command is on the execution host's PATH. A name the
+     * command schema refuses throws `INVALID_INPUT` `external-command-name-invalid`.
+     */
+    async commandExists(command) {
+        return (await resolveExternalCommand(this.runtime, command)) !== null;
+    }
+    /**
+     * The first version-shaped token a command prints for its version
+     * arguments, run as an argv array. Version is optional metadata: a probe
+     * that fails is logged value-free and reads as unknown.
+     */
+    async getCommandVersion(command, versionFlag = '--version') {
+        const output = await this.getCommandOutput(command, versionFlag ? [versionFlag] : []);
+        return output?.match(/\d+\.\d+\.\d+|\d+\.\d+/)?.[0];
+    }
+    /**
+     * What an admitted command prints for admitted arguments, run as an argv
+     * array at its resolved path; `undefined` when it is not on PATH or the
+     * probe fails (optional metadata, logged value-free).
+     */
+    async getCommandOutput(command, args) {
+        const outcome = await this.probeCommand(command, args);
+        if ('failed' in outcome) {
+            this.reportProbeFailure('command output probe failed', outcome.failed);
+            return undefined;
+        }
+        return outcome.output?.stdout;
+    }
+    /** One probe run: its output (`undefined` off PATH), or the value-free facts of its failure. */
+    async probeCommand(command, args) {
+        try {
+            return { output: (await runExternalCommandProbe(this.runtime, command, args)) ?? undefined };
+        }
+        catch (error) {
+            return { failed: valueFreeFailure(CaughtFailureSchema.parse(error)) };
+        }
+    }
+    /**
+     * The absolute path of an admitted command on the execution host's PATH.
+     */
+    async getCommandPath(command) {
+        return (await resolveExternalCommand(this.runtime, command)) ?? undefined;
+    }
+    /**
+     * Check if the MCP server config carries its own credential: an http
+     * server's `Authorization` header. A `VIBES_AUTH_TOKEN` in `env` or
+     * `settings` is not one: installers no longer publish it, and a stdio
+     * server resolves the caller's bearer from its own host (R3). A leftover
+     * key is reported as `publishedBearer`, for a reinstall to remove.
+     */
+    hasAuthTokenInConfig(serverConfig) {
+        const headers = serverConfig ? configTable(configEntry(serverConfig, 'headers')) : undefined;
+        const authorization = headers ? configEntry(headers, 'Authorization') : undefined;
+        return authorization !== undefined && authorization !== null && authorization !== '' && authorization !== false;
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/detection/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/detection/base.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAA0C,MAAM,qBAAqB,CAAC;AACpH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAA2B,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAA6C,MAAM,sBAAsB,CAAC;AAU5H;;GAEG;AACH,MAAM,OAAgB,iBAAiB;IAIG;IADzC,8EAA8E;IAC9E,YAAyC,OAAmB;QAAnB,YAAO,GAAP,OAAO,CAAY;IAAG,CAAC;IAMhE;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,UAAmB;QAC/B,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,IAAI,CAAC,kBAAkB,EAAE;YACzB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;SAC5B,CAAC,CAAC;QAEH,OAAO;YACN,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,YAAY;YACZ,QAAQ;SACR,CAAC;IACH,CAAC;IAED,mFAAmF;IACzE,kBAAkB,CAAC,OAAe,EAAE,OAAyB;QACtE,SAAS,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,2EAA2E;IACjE,KAAK,CAAC,UAAU,CAAC,IAAY;QACtC,OAAO,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,OAAO,CAAC,IAAY;QACnC,OAAO,kBAAkB,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,MAAoB;QAC5D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QACnF,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,aAAa,CAAC,OAAe;QAC5C,OAAO,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,iBAAiB,CAChC,OAAe,EACf,WAAW,GAAG,WAAW;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,MAAM,EAAE,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACO,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,IAAuB;QACxE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,kBAAkB,CAAC,6BAA6B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACvE,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;IAC/B,CAAC;IAED,gGAAgG;IACxF,KAAK,CAAC,YAAY,CACzB,OAAe,EACf,IAAuB;QAEvB,IAAI,CAAC;YACJ,OAAO,EAAE,MAAM,EAAE,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;QAC9F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,CAAC;IACF,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,cAAc,CAAC,OAAe;QAC7C,OAAO,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,SAAS,CAAC;IAC3E,CAAC;IAED;;;;;;OAMG;IACO,oBAAoB,CAAC,YAAqC;QACnE,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7F,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,OAAO,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,IAAI,aAAa,KAAK,EAAE,IAAI,aAAa,KAAK,KAAK,CAAC;IACjH,CAAC;CACD"}

package/dist/detection/command-probe.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Command probes for host detection, through the runtime execution kind.
+ *
+ * A host manifest names the command that proves the host is installed
+ * (`detection.command`, `altCommands`) and the arguments that print its
+ * version (`versionArgs`). Manifests come from packages and from userland
+ * (`~/.vibes/external-tools/*`), so every name and argument is untrusted.
+ * Nothing here runs a shell: a name is admitted by {@link ExternalCommandNameSchema},
+ * located by the execution kind's PATH lookup (`resolveCommand`), and run as
+ * an argv array at the absolute path that lookup returned.
+ */
+import * as z from 'zod/v4';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/**
+ * A bare executable name: a letter or digit, then letters, digits, `.`, `_`,
+ * `+` or `-`, at most 128 characters. No path separator, whitespace, quote or
+ * shell metacharacter can pass.
+ */
+export declare const ExternalCommandNameSchema: z.ZodString;
+/** Arguments for a version probe: at most 16, each 1–256 characters with no NUL. */
+export declare const ExternalCommandArgsSchema: z.ZodArray<z.ZodString>;
+/** How long a version probe may run before it is killed. */
+export declare const COMMAND_PROBE_TIMEOUT_MS = 5000;
+/** The most probe output a version pattern is matched against. */
+export declare const COMMAND_PROBE_OUTPUT_LIMIT = 4096;
+/** Admit a manifest command name, or refuse it `INVALID_INPUT` `external-command-name-invalid`; the name is never echoed. */
+export declare function parseExternalCommandName(raw: string): string;
+/** Admit version-probe arguments, or refuse them `INVALID_INPUT` `external-command-args-invalid`. */
+export declare function parseExternalCommandArgs(raw: readonly string[]): string[];
+/** The absolute path of an admitted command on the execution host's PATH, or `null` when it is not there. */
+export declare function resolveExternalCommand(runtime: RuntimeRef, command: string): Promise<string | null>;
+/** What one version probe printed, bounded to {@link COMMAND_PROBE_OUTPUT_LIMIT} characters. */
+export interface CommandProbeOutput {
+    readonly exitCode: number;
+    readonly timedOut: boolean;
+    readonly stdout: string;
+}
+/**
+ * Run an admitted command with admitted arguments as an argv array at its
+ * resolved absolute path. `null` when the command is not on PATH.
+ */
+export declare function runExternalCommandProbe(runtime: RuntimeRef, command: string, args: readonly string[]): Promise<CommandProbeOutput | null>;
+//# sourceMappingURL=command-probe.d.ts.map

package/dist/detection/command-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-probe.d.ts","sourceRoot":"","sources":["../../src/detection/command-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGvE;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,aAA0D,CAAC;AAEjG,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,yBAAgE,CAAC;AAEvG,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C,kEAAkE;AAClE,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAK/C,6HAA6H;AAC7H,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAS5D;AAED,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CASzE;AAED,6GAA6G;AAC7G,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAEzG;AAED,gGAAgG;AAChG,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,GACrB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAcpC"}

package/dist/detection/command-probe.js

@@ -0,0 +1,75 @@
+/**
+ * Command probes for host detection, through the runtime execution kind.
+ *
+ * A host manifest names the command that proves the host is installed
+ * (`detection.command`, `altCommands`) and the arguments that print its
+ * version (`versionArgs`). Manifests come from packages and from userland
+ * (`~/.vibes/external-tools/*`), so every name and argument is untrusted.
+ * Nothing here runs a shell: a name is admitted by {@link ExternalCommandNameSchema},
+ * located by the execution kind's PATH lookup (`resolveCommand`), and run as
+ * an argv array at the absolute path that lookup returned.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { runTimedCapture, whichCommand } from '@vibesdotdev/kernel/execution';
+/**
+ * A bare executable name: a letter or digit, then letters, digits, `.`, `_`,
+ * `+` or `-`, at most 128 characters. No path separator, whitespace, quote or
+ * shell metacharacter can pass.
+ */
+export const ExternalCommandNameSchema = z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/);
+/** Arguments for a version probe: at most 16, each 1–256 characters with no NUL. */
+export const ExternalCommandArgsSchema = z.array(z.string().min(1).max(256).regex(/^[^\0]*$/)).max(16);
+/** How long a version probe may run before it is killed. */
+export const COMMAND_PROBE_TIMEOUT_MS = 5000;
+/** The most probe output a version pattern is matched against. */
+export const COMMAND_PROBE_OUTPUT_LIMIT = 4096;
+/** Why the probed command inherits the host environment. */
+const PROBE_INHERIT_REASON = 'An installed host CLI reads its own install environment (HOME, PATH) to print its version.';
+/** Admit a manifest command name, or refuse it `INVALID_INPUT` `external-command-name-invalid`; the name is never echoed. */
+export function parseExternalCommandName(raw) {
+    const parsed = ExternalCommandNameSchema.safeParse(raw);
+    if (!parsed.success) {
+        throw new CapabilityError('A host manifest command must be a bare executable name.', 'INVALID_INPUT', {
+            reason: 'external-command-name-invalid',
+            retryable: false
+        });
+    }
+    return parsed.data;
+}
+/** Admit version-probe arguments, or refuse them `INVALID_INPUT` `external-command-args-invalid`. */
+export function parseExternalCommandArgs(raw) {
+    const parsed = ExternalCommandArgsSchema.safeParse(raw);
+    if (!parsed.success) {
+        throw new CapabilityError('Host manifest version arguments must be at most 16 short strings.', 'INVALID_INPUT', {
+            reason: 'external-command-args-invalid',
+            retryable: false
+        });
+    }
+    return parsed.data;
+}
+/** The absolute path of an admitted command on the execution host's PATH, or `null` when it is not there. */
+export async function resolveExternalCommand(runtime, command) {
+    return whichCommand(runtime, parseExternalCommandName(command));
+}
+/**
+ * Run an admitted command with admitted arguments as an argv array at its
+ * resolved absolute path. `null` when the command is not on PATH.
+ */
+export async function runExternalCommandProbe(runtime, command, args) {
+    const argv = parseExternalCommandArgs(args);
+    const executable = await resolveExternalCommand(runtime, command);
+    if (executable === null)
+        return null;
+    const result = await runTimedCapture(runtime, executable, argv, {
+        envMode: 'inherit',
+        inheritReason: PROBE_INHERIT_REASON,
+        timeoutMs: COMMAND_PROBE_TIMEOUT_MS
+    });
+    return {
+        exitCode: result.exitCode,
+        timedOut: result.timedOut,
+        stdout: result.stdout.slice(0, COMMAND_PROBE_OUTPUT_LIMIT)
+    };
+}
+//# sourceMappingURL=command-probe.js.map

package/dist/detection/command-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-probe.js","sourceRoot":"","sources":["../../src/detection/command-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;AAEjG,oFAAoF;AACpF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAEvG,4DAA4D;AAC5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAE7C,kEAAkE;AAClE,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAE/C,4DAA4D;AAC5D,MAAM,oBAAoB,GAAG,4FAA4F,CAAC;AAE1H,6HAA6H;AAC7H,MAAM,UAAU,wBAAwB,CAAC,GAAW;IACnD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,yDAAyD,EAAE,eAAe,EAAE;YACrG,MAAM,EAAE,+BAA+B;YACvC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,wBAAwB,CAAC,GAAsB;IAC9D,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,mEAAmE,EAAE,eAAe,EAAE;YAC/G,MAAM,EAAE,+BAA+B;YACvC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAmB,EAAE,OAAe;IAChF,OAAO,YAAY,CAAC,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,OAAmB,EACnB,OAAe,EACf,IAAuB;IAEvB,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;QAC/D,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,oBAAoB;QACnC,SAAS,EAAE,wBAAwB;KACnC,CAAC,CAAC;IACH,OAAO;QACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC;KAC1D,CAAC;AACH,CAAC"}