@vibesdotdev/external 0.0.0-stage → 1.0.0-rc.1

package/dist/harness/strip-undefined.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strip-undefined.d.ts","sourceRoot":"","sources":["../../src/harness/strip-undefined.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAA6B,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErG,YAAY,EAAE,SAAS,IAAI,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAE/E,wBAAgB,cAAc,CAAC,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,CAG1E"}

package/dist/harness/strip-undefined.js

@@ -0,0 +1,11 @@
+/**
+ * Compatibility projection over Runtime's reader-to-wire JSON schema.
+ * Non-JSON values stay unchanged so the caller's output boundary can refuse
+ * them with its own error contract.
+ */
+import { JsonValueFromReaderSchema } from '@vibesdotdev/kernel/schemas/json';
+export function stripUndefined(value) {
+    const parsed = JsonValueFromReaderSchema.safeParse(value);
+    return parsed.success ? parsed.data : value;
+}
+//# sourceMappingURL=strip-undefined.js.map

package/dist/harness/strip-undefined.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strip-undefined.js","sourceRoot":"","sources":["../../src/harness/strip-undefined.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,yBAAyB,EAA0B,MAAM,kCAAkC,CAAC;AAIrG,MAAM,UAAU,cAAc,CAAC,KAAwB;IACtD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7C,CAAC"}

package/dist/harness/tool-projection.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Shared tool projection: live `tools/tool` descriptors to host-neutral tool definitions.
+ *
+ * The runtime's `tools/tool` registry is the only catalog. This module is the
+ * single translation every host adapter uses: one runtime descriptor becomes one
+ * host-neutral tool carrying a real input schema, a typed output schema, approval
+ * gating, safety metadata, and a result card the host can render.
+ *
+ * It is pure — the caller supplies the invoke function (the runtime transport) —
+ * so it is testable without a host or a runtime.
+ *
+ * Host adapters (OpenCode, MCP, Pi, ACP) add only their own registration
+ * mechanics on top; they never reimplement normalization, approval, or schema
+ * translation.
+ */
+import { type HostToolInput, type LiveJson } from './live-tools.ts';
+/** The descriptor shape the projection consumes; a subset of `tools/tool`. */
+export type ProjectionToolDescriptor = {
+    id: string;
+    name?: string;
+    description?: string;
+    /** MCP-specific one-liner; native host projections use the canonical description. */
+    mcpDescription?: string;
+    category?: string;
+    safety?: LiveJson;
+    requiresApproval?: boolean;
+    /** Published input JSON Schema (CLI `tools list` rows). */
+    inputSchema?: LiveJson;
+    /** Legacy harness parameter map, used only when no JSON Schema is published. */
+    parameters?: Record<string, {
+        type?: string;
+        description?: string;
+        required?: boolean;
+        choices?: readonly string[];
+    }>;
+    schemas?: {
+        input?: LiveJson;
+        output?: LiveJson;
+        actionSafety?: Record<string, string>;
+    };
+};
+export type ProjectionToolInvoke = (toolId: string, input: HostToolInput, context?: {
+    signal?: AbortSignal;
+}) => Promise<LiveJson>;
+/** The progress ping a projection sends while a tool runs. */
+export type ProjectionProgressUpdate = {
+    phase: string;
+    vibesToolId: string;
+};
+export type ProjectionToolExecutionContext = {
+    signal?: AbortSignal;
+    progress?: (update: ProjectionProgressUpdate) => Promise<void> | void;
+    requestApproval?: (toolId: string, input: HostToolInput) => Promise<void>;
+};
+export type ProjectionToolOptions = {
+    namespace: string;
+    codemode: boolean;
+    pinned?: boolean;
+    permission?: string;
+};
+/** The result card a host renders: structured output, text, and provenance. */
+export type ProjectionToolMetadata = {
+    vibesToolId: string;
+    category: string;
+    safety: LiveJson;
+    requiresApproval: boolean;
+    schemaSource: 'runtime-schema' | 'parameters' | 'none';
+    durationMs: number;
+    ok: boolean;
+};
+export type ProjectionToolResult = {
+    output: LiveJson;
+    content: string;
+    metadata: ProjectionToolMetadata;
+};
+export type ProjectionToolDefinition = {
+    name: string;
+    description: string;
+    input: Record<string, LiveJson>;
+    output?: LiveJson;
+    options: ProjectionToolOptions;
+    safety?: LiveJson;
+    requiresApproval?: boolean;
+    schemas?: {
+        actionSafety?: Record<string, string>;
+    };
+    execute: (input: HostToolInput, context?: ProjectionToolExecutionContext) => Promise<ProjectionToolResult>;
+};
+export type ProjectionPolicy = {
+    /** Tools that stay directly callable instead of Code-Mode-only. */
+    pinned?: ReadonlySet<string>;
+    /** Drop descriptors that must not reach the host (internal, host-shadowing). */
+    include?: (descriptor: ProjectionToolDescriptor) => boolean;
+    /** Tool namespace for the host (default: 'vibes'). */
+    namespace?: string;
+};
+export type ProjectionResult = {
+    tools: ProjectionToolDefinition[];
+    names: string[];
+    skipped: {
+        id: string;
+        reason: string;
+    }[];
+};
+/** The host input schema a projection derives, and where it came from. */
+export type ProjectionToolInput = {
+    schema: Record<string, LiveJson>;
+    source: 'runtime-schema' | 'parameters' | 'none';
+};
+export declare const DEFAULT_TOOL_NAMESPACE = "vibes";
+/**
+ * Default hot set: called directly rather than through a Code Mode catalog.
+ * Keep this small — every pinned tool costs prompt budget on every request.
+ */
+export declare const DEFAULT_PINNED_TOOL_IDS: ReadonlySet<string>;
+/** Canonical host name for a runtime tool id. Dots stay: identity is shared. */
+export declare function projectionToolName(descriptor: Pick<ProjectionToolDescriptor, 'id'>): string;
+/**
+ * Input schema for the host. Prefer the runtime's published JSON Schema (the same
+ * projection the native agent loop uses); degrade to the harness parameter map and
+ * say so in the description rather than silently accepting anything.
+ */
+export declare function buildProjectionToolInput(descriptor: ProjectionToolDescriptor): ProjectionToolInput;
+export declare function projectTool(descriptor: ProjectionToolDescriptor, invoke: ProjectionToolInvoke, policy?: ProjectionPolicy): ProjectionToolDefinition;
+/**
+ * Project the whole live catalog. One host tool per runtime descriptor; colliding
+ * ids are reported, never silently dropped or renamed.
+ */
+export declare function projectCatalog(catalog: readonly ProjectionToolDescriptor[], invoke: ProjectionToolInvoke, policy?: ProjectionPolicy): ProjectionResult;
+//# sourceMappingURL=tool-projection.d.ts.map

package/dist/harness/tool-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-projection.d.ts","sourceRoot":"","sources":["../../src/harness/tool-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAgC,KAAK,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAElG,8EAA8E;AAC9E,MAAM,MAAM,wBAAwB,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,2DAA2D;IAC3D,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACtH,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,QAAQ,CAAC;QAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;CACzF,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAClC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,KAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,8DAA8D;AAC9D,MAAM,MAAM,wBAAwB,GAAG;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC5C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACtE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,MAAM,sBAAsB,GAAG;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,gBAAgB,GAAG,YAAY,GAAG,MAAM,CAAC;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAClC,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,sBAAsB,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACpD,OAAO,EAAE,CACR,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE,8BAA8B,KACpC,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,mEAAmE;IACnE,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,gFAAgF;IAChF,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,wBAAwB,KAAK,OAAO,CAAC;IAC5D,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAClC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1C,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,mBAAmB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjC,MAAM,EAAE,gBAAgB,GAAG,YAAY,GAAG,MAAM,CAAC;CACjD,CAAC;AAEF,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAKtD,CAAC;AAmBH,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,GAAG,MAAM,CAE3F;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,wBAAwB,GAAG,mBAAmB,CAgClG;AAkBD,wBAAgB,WAAW,CAC1B,UAAU,EAAE,wBAAwB,EACpC,MAAM,EAAE,oBAAoB,EAC5B,MAAM,GAAE,gBAAqB,GAC3B,wBAAwB,CA4D1B;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC7B,OAAO,EAAE,SAAS,wBAAwB,EAAE,EAC5C,MAAM,EAAE,oBAAoB,EAC5B,MAAM,GAAE,gBAAqB,GAC3B,gBAAgB,CAsBlB"}

package/dist/harness/tool-projection.js

@@ -0,0 +1,195 @@
+/**
+ * Shared tool projection: live `tools/tool` descriptors to host-neutral tool definitions.
+ *
+ * The runtime's `tools/tool` registry is the only catalog. This module is the
+ * single translation every host adapter uses: one runtime descriptor becomes one
+ * host-neutral tool carrying a real input schema, a typed output schema, approval
+ * gating, safety metadata, and a result card the host can render.
+ *
+ * It is pure — the caller supplies the invoke function (the runtime transport) —
+ * so it is testable without a host or a runtime.
+ *
+ * Host adapters (OpenCode, MCP, Pi, ACP) add only their own registration
+ * mechanics on top; they never reimplement normalization, approval, or schema
+ * translation.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { requiresExternalHostApproval } from "./live-tools.js";
+export const DEFAULT_TOOL_NAMESPACE = 'vibes';
+/**
+ * Default hot set: called directly rather than through a Code Mode catalog.
+ * Keep this small — every pinned tool costs prompt budget on every request.
+ */
+export const DEFAULT_PINNED_TOOL_IDS = new Set([
+    'session',
+    'workspace-fs',
+    'run-command',
+    'tool-search'
+]);
+const JSON_TYPES = new Map([
+    ['string', 'string'],
+    ['number', 'number'],
+    ['integer', 'integer'],
+    ['boolean', 'boolean'],
+    ['array', 'array'],
+    ['object', 'object']
+]);
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isStringValue(value) {
+    return typeof value === 'string';
+}
+/** Canonical host name for a runtime tool id. Dots stay: identity is shared. */
+export function projectionToolName(descriptor) {
+    return descriptor.id.trim();
+}
+/**
+ * Input schema for the host. Prefer the runtime's published JSON Schema (the same
+ * projection the native agent loop uses); degrade to the harness parameter map and
+ * say so in the description rather than silently accepting anything.
+ */
+export function buildProjectionToolInput(descriptor) {
+    const candidates = [descriptor.schemas?.input, descriptor.inputSchema];
+    const published = candidates.find((candidate) => isRecord(candidate) && candidate.type === 'object');
+    if (published) {
+        return { schema: published, source: 'runtime-schema' };
+    }
+    const entries = Object.entries(descriptor.parameters ?? {});
+    if (entries.length === 0) {
+        return { schema: { type: 'object', properties: {}, additionalProperties: false }, source: 'none' };
+    }
+    const properties = {};
+    const required = [];
+    for (const [key, meta] of entries) {
+        const property = {};
+        property.type = JSON_TYPES.get(meta?.type ?? 'string') ?? 'string';
+        if (meta?.description)
+            property.description = meta.description;
+        if (meta?.choices?.length) {
+            property.enum = [...meta.choices];
+            property.type = 'string';
+        }
+        properties[key] = property;
+        if (meta?.required)
+            required.push(key);
+    }
+    const schema = {};
+    schema.type = 'object';
+    schema.properties = properties;
+    schema.additionalProperties = false;
+    if (required.length)
+        schema.required = required;
+    return { schema, source: 'parameters' };
+}
+/** Human-readable result text. Never carries runtime log noise. */
+function toContent(value) {
+    if (value === undefined || value === null)
+        return '';
+    if (isStringValue(value))
+        return value.trim();
+    return JSON.stringify(value);
+}
+/** A JSON payload from the runtime stays structured; anything else stays text. */
+function parseStructured(value) {
+    if (!isStringValue(value))
+        return value;
+    const text = value.trim();
+    if (!text.startsWith('{') && !text.startsWith('['))
+        return undefined;
+    const parsed = JsonValueSchema.safeParse(text);
+    return parsed.success ? parsed.data : undefined;
+}
+export function projectTool(descriptor, invoke, policy = {}) {
+    const input = buildProjectionToolInput(descriptor);
+    const description = (descriptor.description || descriptor.mcpDescription || descriptor.id).trim();
+    const category = descriptor.category ?? 'vibes';
+    const namespace = policy.namespace ?? DEFAULT_TOOL_NAMESPACE;
+    const options = {
+        namespace,
+        codemode: true,
+        pinned: (policy.pinned ?? DEFAULT_PINNED_TOOL_IDS).has(descriptor.id),
+        permission: descriptor.id
+    };
+    const definition = {
+        name: projectionToolName(descriptor),
+        description: input.source === 'runtime-schema'
+            ? description
+            : description + ' (untyped input: pass a JSON string in `input`)',
+        input: input.schema,
+        options,
+        execute: async (args, context) => {
+            const startedAt = Date.now();
+            await context?.progress?.({ phase: 'started', vibesToolId: descriptor.id });
+            try {
+                if (requiresExternalHostApproval(descriptor, args ?? {})) {
+                    if (!context?.requestApproval) {
+                        throw new Error('Blocked because host approval is unavailable for this tool');
+                    }
+                    await context.requestApproval(descriptor.id, args ?? {});
+                }
+                const raw = await invoke(descriptor.id, args ?? {}, { signal: context?.signal });
+                const structured = parseStructured(raw);
+                return {
+                    output: structured ?? { result: toContent(raw) },
+                    content: toContent(raw),
+                    metadata: {
+                        vibesToolId: descriptor.id,
+                        category,
+                        safety: descriptor.safety ?? 'unknown',
+                        requiresApproval: descriptor.requiresApproval === true,
+                        schemaSource: input.source,
+                        durationMs: Date.now() - startedAt,
+                        ok: true
+                    }
+                };
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                throw new CapabilityError(descriptor.id + ' failed: ' + message, 'INTERNAL', {
+                    reason: 'projected-tool-execution-failed',
+                    cause: error
+                });
+            }
+        }
+    };
+    if (descriptor.schemas?.output !== undefined)
+        definition.output = descriptor.schemas.output;
+    if (descriptor.safety !== undefined)
+        definition.safety = descriptor.safety;
+    if (descriptor.requiresApproval !== undefined)
+        definition.requiresApproval = descriptor.requiresApproval;
+    if (descriptor.schemas?.actionSafety) {
+        definition.schemas = { actionSafety: descriptor.schemas.actionSafety };
+    }
+    return definition;
+}
+/**
+ * Project the whole live catalog. One host tool per runtime descriptor; colliding
+ * ids are reported, never silently dropped or renamed.
+ */
+export function projectCatalog(catalog, invoke, policy = {}) {
+    const tools = [];
+    const skipped = [];
+    const seen = new Set();
+    for (const descriptor of catalog) {
+        if (!descriptor?.id) {
+            skipped.push({ id: String(descriptor?.id ?? '<missing>'), reason: 'missing-id' });
+            continue;
+        }
+        if (policy.include && !policy.include(descriptor)) {
+            skipped.push({ id: descriptor.id, reason: 'excluded-by-policy' });
+            continue;
+        }
+        const name = projectionToolName(descriptor);
+        if (seen.has(name)) {
+            skipped.push({ id: descriptor.id, reason: 'duplicate-name' });
+            continue;
+        }
+        seen.add(name);
+        tools.push(projectTool(descriptor, invoke, policy));
+    }
+    return { tools, names: tools.map((tool) => tool.name), skipped };
+}
+//# sourceMappingURL=tool-projection.js.map

package/dist/harness/tool-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-projection.js","sourceRoot":"","sources":["../../src/harness/tool-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAqC,MAAM,iBAAiB,CAAC;AAiGlG,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IACnE,SAAS;IACT,cAAc;IACd,aAAa;IACb,aAAa;CACb,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAiB;IAC1C,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,QAAQ,EAAE,QAAQ,CAAC;CACpB,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAA2B;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,KAAe;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,UAAgD;IAClF,OAAO,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAoC;IAC5E,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAChC,CAAC,SAAS,EAA4C,EAAE,CACvD,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,CACnD,CAAC;IACF,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpG,CAAC;IACD,MAAM,UAAU,GAA6B,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC,IAAI,QAAQ,CAAC;QACnE,IAAI,IAAI,EAAE,WAAW;YAAE,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/D,IAAI,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC;QAC1B,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QAC3B,IAAI,IAAI,EAAE,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;IACvB,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,MAAM,CAAC,oBAAoB,GAAG,KAAK,CAAC;IACpC,IAAI,QAAQ,CAAC,MAAM;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACzC,CAAC;AAED,mEAAmE;AACnE,SAAS,SAAS,CAAC,KAA2B;IAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,KAAe;IACvC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,WAAW,CAC1B,UAAoC,EACpC,MAA4B,EAC5B,SAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,cAAc,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClG,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,OAAO,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,sBAAsB,CAAC;IAC7D,MAAM,OAAO,GAA0B;QACtC,SAAS;QACT,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACrE,UAAU,EAAE,UAAU,CAAC,EAAE;KACzB,CAAC;IACF,MAAM,UAAU,GAA6B;QAC5C,IAAI,EAAE,kBAAkB,CAAC,UAAU,CAAC;QACpC,WAAW,EACV,KAAK,CAAC,MAAM,KAAK,gBAAgB;YAChC,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,WAAW,GAAG,iDAAiD;QACnE,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,OAAO;QACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC;gBACJ,IAAI,4BAA4B,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC1D,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC;wBAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;oBAC/E,CAAC;oBACD,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjF,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;gBACxC,OAAO;oBACN,MAAM,EAAE,UAAU,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE;oBAChD,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;oBACvB,QAAQ,EAAE;wBACT,WAAW,EAAE,UAAU,CAAC,EAAE;wBAC1B,QAAQ;wBACR,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,SAAS;wBACtC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,KAAK,IAAI;wBACtD,YAAY,EAAE,KAAK,CAAC,MAAM;wBAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBAClC,EAAE,EAAE,IAAI;qBACR;iBACD,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,EAAE,GAAG,WAAW,GAAG,OAAO,EAAE,UAAU,EAAE;oBAC5E,MAAM,EAAE,iCAAiC;oBACzC,KAAK,EAAE,KAAK;iBACZ,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;KACD,CAAC;IACF,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5F,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC3E,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS;QAAE,UAAU,CAAC,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;IACzG,IAAI,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;QACtC,UAAU,CAAC,OAAO,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC7B,OAA4C,EAC5C,MAA4B,EAC5B,SAA2B,EAAE;IAE7B,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAClF,SAAS;QACV,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAClE,SAAS;QACV,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC9D,SAAS;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;AAClE,CAAC"}

package/dist/harness/validation-errors.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Compact rendering of native Zod issues. Each top-level issue keeps its full
+ * path; union alternatives stay one mismatch instead of becoming a branch dump.
+ */
+import * as z from 'zod/v4';
+import { type CaughtFailure } from '@vibesdotdev/kernel';
+/** Bound displayed issues while retaining the count of undisplayed mismatches. */
+export declare function conciseZodIssues(issues: readonly z.core.$ZodIssue[], maxLines?: number): string[];
+/** Preserve ordinary failure text; render a native Zod error without its union tree. */
+export declare function conciseValidationFailure(error: CaughtFailure | string): string;
+//# sourceMappingURL=validation-errors.d.ts.map

package/dist/harness/validation-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-errors.d.ts","sourceRoot":"","sources":["../../src/harness/validation-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE9E,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,SAAK,GAAG,MAAM,EAAE,CAS7F;AAED,wFAAwF;AACxF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,CAQ9E"}

package/dist/harness/validation-errors.js

@@ -0,0 +1,32 @@
+/**
+ * Compact rendering of native Zod issues. Each top-level issue keeps its full
+ * path; union alternatives stay one mismatch instead of becoming a branch dump.
+ */
+import * as z from 'zod/v4';
+import { CaughtFailureSchema } from '@vibesdotdev/kernel';
+/** Bound displayed issues while retaining the count of undisplayed mismatches. */
+export function conciseZodIssues(issues, maxLines = 10) {
+    const visible = issues.slice(0, maxLines);
+    const lines = visible.map((issue) => {
+        const path = z.core.toDotPath(issue.path) || '(root)';
+        return `${path}: ${issue.message}`;
+    });
+    const remaining = issues.length - visible.length;
+    if (remaining > 0)
+        lines.push(`${remaining} more issue${remaining === 1 ? '' : 's'}`);
+    return lines;
+}
+/** Preserve ordinary failure text; render a native Zod error without its union tree. */
+export function conciseValidationFailure(error) {
+    const asString = z.string().safeParse(error);
+    if (asString.success)
+        return asString.data;
+    const failure = CaughtFailureSchema.parse(error);
+    if (!(failure instanceof z.ZodError))
+        return failure instanceof Error ? failure.message : failure.description;
+    if (failure.issues.length === 0)
+        return failure.message;
+    const lines = conciseZodIssues(failure.issues);
+    return `Schema mismatch (${failure.issues.length} issue${failure.issues.length === 1 ? '' : 's'}):\n  ${lines.join('\n  ')}`;
+}
+//# sourceMappingURL=validation-errors.js.map

package/dist/harness/validation-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-errors.js","sourceRoot":"","sources":["../../src/harness/validation-errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAsB,MAAM,qBAAqB,CAAC;AAE9E,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,MAAmC,EAAE,QAAQ,GAAG,EAAE;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;QACtD,OAAO,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACjD,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,cAAc,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,wBAAwB,CAAC,KAA6B;IACrE,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9G,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,oBAAoB,OAAO,CAAC,MAAM,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9H,CAAC"}

package/dist/hooks/bounded-payload.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Bounded, redacted summaries of a host tool's input and result for hook work.
+ *
+ * A host fires `tool.before`/`tool.after` on every tool call, and the result
+ * of a Read or a Bash is whatever the tool printed: a whole file, a build log.
+ * Hook work (brain tracking, the hook's own result) carries a summary of it,
+ * never the payload: top-level scalars are kept, strings are credential-
+ * redacted and cut to {@link MAX_STRING_CHARS}, nested values become a marker
+ * with their size, and at most {@link MAX_FIELDS} fields survive. The summary
+ * is a JSON object whatever the input was.
+ */
+import type { ExternalHookToolPayload } from './runtime.ts';
+/** The longest string a summary keeps, in characters. */
+export declare const MAX_STRING_CHARS = 512;
+/** The most top-level fields a summary keeps. */
+export declare const MAX_FIELDS = 24;
+/** One summarized field. */
+export type BoundedField = string | number | boolean | null | {
+    readonly omitted: 'array';
+    readonly length: number;
+} | {
+    readonly omitted: 'object';
+    readonly keys: number;
+} | {
+    readonly omitted: 'value';
+};
+/** A summary: a JSON object of bounded fields. */
+export interface BoundedPayload {
+    [field: string]: BoundedField;
+}
+/** What a host hands a hook as a tool's input or result (`ExternalHookToolPayloadSchema` input/result). */
+export type BoundedSource = ExternalHookToolPayload['input'];
+/**
+ * Summarize a tool input or result. A top-level string or scalar becomes
+ * `{ value }`; an array becomes `{ items }` with its length; an object keeps
+ * its first {@link MAX_FIELDS} fields, each bounded, and counts the rest.
+ */
+export declare function boundToolPayload(source: BoundedSource): BoundedPayload;
+//# sourceMappingURL=bounded-payload.d.ts.map

package/dist/hooks/bounded-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-payload.d.ts","sourceRoot":"","sources":["../../src/hooks/bounded-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE5D,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,iDAAiD;AACjD,eAAO,MAAM,UAAU,KAAK,CAAC;AAE7B,4BAA4B;AAC5B,MAAM,MAAM,YAAY,GACrB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAEjC,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC9B,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAAC;CAC9B;AAmCD,2GAA2G;AAC3G,MAAM,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;AAE7D;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,CAYtE"}

package/dist/hooks/bounded-payload.js

@@ -0,0 +1,70 @@
+/**
+ * Bounded, redacted summaries of a host tool's input and result for hook work.
+ *
+ * A host fires `tool.before`/`tool.after` on every tool call, and the result
+ * of a Read or a Bash is whatever the tool printed: a whole file, a build log.
+ * Hook work (brain tracking, the hook's own result) carries a summary of it,
+ * never the payload: top-level scalars are kept, strings are credential-
+ * redacted and cut to {@link MAX_STRING_CHARS}, nested values become a marker
+ * with their size, and at most {@link MAX_FIELDS} fields survive. The summary
+ * is a JSON object whatever the input was.
+ */
+import { redactCredentials } from '@vibesdotdev/shared/utils';
+/** The longest string a summary keeps, in characters. */
+export const MAX_STRING_CHARS = 512;
+/** The most top-level fields a summary keeps. */
+export const MAX_FIELDS = 24;
+function boundedString(text) {
+    const redacted = redactCredentials(text);
+    return redacted.length > MAX_STRING_CHARS
+        ? `${redacted.slice(0, MAX_STRING_CHARS)}… [${redacted.length - MAX_STRING_CHARS} more chars]`
+        : redacted;
+}
+function isStringValue(value) {
+    return typeof value === 'string';
+}
+function isNumberValue(value) {
+    return typeof value === 'number';
+}
+function isBooleanValue(value) {
+    return typeof value === 'boolean';
+}
+function isRecordValue(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function boundedField(value) {
+    if (value === null)
+        return null;
+    if (Array.isArray(value))
+        return { omitted: 'array', length: value.length };
+    if (isStringValue(value))
+        return boundedString(value);
+    if (isNumberValue(value))
+        return Number.isFinite(value) ? value : null;
+    if (isBooleanValue(value))
+        return value;
+    if (isRecordValue(value))
+        return { omitted: 'object', keys: Object.keys(value).length };
+    return { omitted: 'value' };
+}
+/**
+ * Summarize a tool input or result. A top-level string or scalar becomes
+ * `{ value }`; an array becomes `{ items }` with its length; an object keeps
+ * its first {@link MAX_FIELDS} fields, each bounded, and counts the rest.
+ */
+export function boundToolPayload(source) {
+    if (source === undefined)
+        return {};
+    if (!isRecordValue(source)) {
+        return { value: boundedField(source) };
+    }
+    const entries = Object.entries(source);
+    const payload = {};
+    for (const [key, value] of entries.slice(0, MAX_FIELDS)) {
+        Object.defineProperty(payload, key, { value: boundedField(value), enumerable: true, writable: true, configurable: true });
+    }
+    if (entries.length > MAX_FIELDS)
+        payload.omittedFields = entries.length - MAX_FIELDS;
+    return payload;
+}
+//# sourceMappingURL=bounded-payload.js.map

package/dist/hooks/bounded-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-payload.js","sourceRoot":"","sources":["../../src/hooks/bounded-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAG9D,yDAAyD;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,iDAAiD;AACjD,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAiB7B,SAAS,aAAa,CAAC,IAAY;IAClC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC,MAAM,GAAG,gBAAgB;QACxC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,gBAAgB,cAAc;QAC9F,CAAC,CAAC,QAAQ,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAAoB;IAC3C,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,KAAoB;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5E,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IACxF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAKD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACrD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU;QAAE,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IACrF,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/hooks/bridge.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Optional bridge from external host hooks → `tools/tool` hook bus.
+ *
+ * When the collaboration config's `toolTiers.enabled` is set, PreToolUse /
+ * PostToolUse run tier-enforcement subscribers against resolved universal tool
+ * IDs (e.g. vibes MCP tool names). Config, not the environment: the hook runs in
+ * the workspace daemon, whose environment is not the user's shell.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { HookEvent } from '../plugins/schemas/manifest.ts';
+import type { CollaborationSettings } from '../ambient/collaboration-settings.ts';
+/** The tier-enforcement settings a bridge run applies (the collaboration config's `toolTiers`). */
+export type HookToolTierSettings = CollaborationSettings['toolTiers'];
+/**
+ * Resolve a host-reported tool name to a `tools/tool` descriptor id, if any.
+ */
+export declare function resolveVibesToolId(runtime: VibesRuntime, hostToolName: string): string | null;
+export interface HookBridgeInput {
+    event: HookEvent;
+    hostToolName?: string;
+    toolInput?: unknown;
+    toolResult?: unknown;
+}
+export interface HookBridgeResult {
+    bridged: boolean;
+    toolId?: string;
+    denied?: boolean;
+    message?: string;
+}
+/**
+ * Emit `tools/tool` bus events for host hook events (tier enforcement only; no impl.execute).
+ */
+export declare function runHookToolBridge(runtime: VibesRuntime, input: HookBridgeInput, tiers: HookToolTierSettings): Promise<HookBridgeResult>;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/hooks/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/hooks/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAQ3E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAElF,mGAAmG;AACnG,MAAM,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;AAMtE;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiB7F;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,SAAS,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACtC,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,oBAAoB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAoD3B"}