@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.0

package/dist/surface-mcp/executable-freshness-watch.js

@@ -0,0 +1,225 @@
+/**
+ * Executable-freshness watch — the MCP body's self-heal for a replaced binary.
+ *
+ * Every 30s the body asks TWO nerves whether the build it is serving still
+ * matches disk: executable-identity (was the file at my own path replaced?) and
+ * graph-freshness (was the module graph under my resolution root replaced?).
+ * The second one is the thin host's normal case — the binary is recompiled very
+ * rarely and `vibes update` moves the plugins instead. When either fires:
+ *   - it logs the injury once, at ERROR, with the exact remedy;
+ *   - every tool result already carries the banner (adapters/mcp/stale-body.ts);
+ *   - a MANAGED body (VIBES_PM_MANAGED set, http mode) asks the PM daemon to
+ *     roll it once the new file has settled for `settleMs` (an install by
+ *     atomic rename settles instantly; a slow copy must not be exec'd mid-write);
+ *   - a stdio body cannot be restarted by anyone but its client, so it stops at
+ *     the banner — "do everything you can, then ask for help".
+ *
+ * Measured need (2026-08-28): the managed HTTP body ran a deleted inode for
+ * 8h45m after a release install until a health-check kill replaced it by
+ * accident. This turns that accident into a design.
+ *
+ * Measured failure (2026-09-05): an http body from a retired worktree binary
+ * (ppid 1, alive 46h) still carried the VIBES_PM_MANAGED=mcp-server-dev stamp
+ * PM had given its ancestor. Its own graph was stale forever, so every retry
+ * window it asked PM to roll `mcp-server-dev` — and PM rolled the healthy
+ * shared host: 552 of 586 restarts that day, each one failing every in-flight
+ * relay call. A stamp is inherited by descendants and orphans; it is not proof
+ * of identity. So before asking, the watch proves that PM tracks THIS pid
+ * under that id, disables itself for good on a mismatch, and gives up after a
+ * bounded number of requests. The daemon enforces the same proof on its side
+ * (`expectedPid` on the restart RPC).
+ */
+import { startLifecycleRepeat } from "../lifecycle-repeat.js";
+import { settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { getStaleBodyVerdict } from "../adapters/mcp/stale-body.consumer.js";
+/** The PM daemon of this serve host's own workspace, on the host's runtime; never auto-started. */
+async function managedPmClient(runtime, workspaceRoot) {
+    const { PMClient } = await import('@vibesdotdev/pm/client');
+    return new PMClient(undefined, { runtime, workspaceRoot, autoStartDaemon: false });
+}
+function defaultRequestRestart(runtime, workspaceRoot) {
+    return async (processId, guard) => {
+        const pm = await managedPmClient(runtime, workspaceRoot);
+        await pm.restart(processId, undefined, guard);
+    };
+}
+function defaultResolveManagedPid(runtime, workspaceRoot) {
+    return async (processId) => {
+        const pm = await managedPmClient(runtime, workspaceRoot);
+        const state = await pm.getStatus(processId);
+        return state?.pid ?? null;
+    };
+}
+export function startExecutableFreshnessWatch(options) {
+    const intervalMs = options.intervalMs ?? 30_000;
+    const settleMs = options.settleMs ?? 30_000;
+    const retryMs = options.retryMs ?? 5 * 60_000;
+    const maxRestartRequests = options.maxRestartRequests ?? 3;
+    const now = options.now ?? (() => Date.now());
+    const requestRestart = options.requestRestart ?? defaultRequestRestart(options.runtime, options.workspaceRoot);
+    const resolveManagedPid = options.resolveManagedPid ?? defaultResolveManagedPid(options.runtime, options.workspaceRoot);
+    const selfPid = options.selfPid ?? options.identity.currentPid();
+    const managedProcessId = options.managedProcessId?.trim() || null;
+    let announced = false;
+    let restartRequestedAt = null;
+    let publishAttemptedAt = null;
+    /** Set once publication reports that only a kernel restart can serve the new graph. */
+    let maintenanceRequired = false;
+    let restartRequests = 0;
+    let stopped = false;
+    /** Stops the tick: the runtime lifecycle's interval disposer (RC07). */
+    let stopTick = null;
+    /**
+     * Every report goes through here: once the watch is stopped (its service is
+     * disposing, its logger may already refuse entries) an in-flight tick that
+     * resumes from an await reports nothing.
+     */
+    const report = (level, message, details) => {
+        if (stopped)
+            return;
+        options.logger[level](message, details);
+    };
+    /** Permanent: this body must never ask again. The banner stays on every result. */
+    const disable = (message, details) => {
+        if (stopped)
+            return;
+        stopped = true;
+        stopTick?.();
+        options.logger.error(message, { ...details, processId: managedProcessId, selfPid });
+    };
+    const tick = async () => {
+        if (stopped)
+            return;
+        const verdict = getStaleBodyVerdict(options.runtime, options.identity, now());
+        if (verdict.replaced !== true)
+            return;
+        if (!announced) {
+            announced = true;
+            report('error', verdict.nerve === 'graph-replaced'
+                ? 'STALE BODY — the module graph under this server\'s resolution root was replaced after it started'
+                : 'STALE BODY — the vibes executable was replaced after this server started', {
+                reason: verdict.reason,
+                nerve: verdict.nerve,
+                mode: options.mode,
+                managedProcessId,
+                banner: verdict.banner
+            });
+        }
+        if (options.mode !== 'http' || !managedProcessId)
+            return; // stdio: the client owns the respawn
+        // Settle on whichever artifact actually moved: a half-written lockfile is
+        // as bad to boot against as a half-copied binary.
+        const settleMtime = verdict.nerve === 'graph-replaced'
+            ? (options.identity.graphFreshness(options.identity.hostRoot()).current?.mtimeMs ?? null)
+            : (options.identity.checkExecutableFreshness().current?.mtimeMs ?? null);
+        if (settleMtime !== null && now() - settleMtime < settleMs) {
+            report('info', 'replaced build has not settled yet; deferring managed restart', {
+                settleMs,
+                nerve: verdict.nerve
+            });
+            return;
+        }
+        // A host may provide a generation-aware publisher that swaps in the
+        // verified artifact while retaining live transports. Try it first. When it
+        // answers that only a kernel restart can serve the new graph, fall through
+        // to the guarded PM restart below. Measured 2026-09-26: without that
+        // fall-through the shared host logged "kernel maintenance required" every
+        // retry for hours, served stale code, and re-ran publication each time
+        // while new clients connected.
+        if (options.publishUpdate && !maintenanceRequired) {
+            if (publishAttemptedAt !== null && now() - publishAttemptedAt < retryMs)
+                return;
+            publishAttemptedAt = now();
+            report('info', 'checking whether the changed artifact can be published in this host', {
+                processId: managedProcessId,
+                nerve: verdict.nerve
+            });
+            const published = await settle(() => options.publishUpdate?.() ?? false);
+            if (!published.ok) {
+                if (stopped)
+                    return;
+                report('error', 'artifact publication failed; serving generation and transports retained', {
+                    processId: managedProcessId,
+                    error: valueFreeFailure(published.cause),
+                    retryInMs: retryMs
+                });
+                return;
+            }
+            if (published.value)
+                return;
+            if (stopped)
+                return;
+            maintenanceRequired = true;
+            report('warn', 'kernel maintenance required; asking the PM daemon to roll this host', {
+                processId: managedProcessId,
+                nerve: verdict.nerve
+            });
+        }
+        if (restartRequestedAt !== null && now() - restartRequestedAt < retryMs)
+            return;
+        if (restartRequests >= maxRestartRequests) {
+            disable('managed restart was requested repeatedly and this body is still running; it stops asking', { restartRequests, maxRestartRequests });
+            return;
+        }
+        // A VIBES_PM_MANAGED stamp is inherited by every descendant and survives
+        // the parent. Only the pid PM tracks under that id may ask to be rolled.
+        const managed = await settle(() => resolveManagedPid(managedProcessId));
+        if (!managed.ok) {
+            if (stopped)
+                return;
+            restartRequestedAt = now();
+            report('warn', 'could not verify this body against the PM daemon; not requesting a roll', {
+                processId: managedProcessId,
+                error: valueFreeFailure(managed.cause),
+                retryInMs: retryMs
+            });
+            return;
+        }
+        const managedPid = managed.value;
+        // Stopped while the daemon answered: a disposing body never asks to be rolled.
+        if (stopped)
+            return;
+        if (managedPid !== selfPid) {
+            disable('VIBES_PM_MANAGED names a process this body is not (inherited stamp); never asking PM to roll it', { managedPid });
+            return;
+        }
+        restartRequestedAt = now();
+        restartRequests += 1;
+        report('warn', 'asking the PM daemon to roll this managed body onto the new executable', {
+            processId: managedProcessId,
+            selfPid,
+            attempt: restartRequests,
+            maxRestartRequests
+        });
+        const restarted = await settle(() => requestRestart(managedProcessId, { expectedPid: selfPid }));
+        if (!restarted.ok) {
+            report('error', 'managed restart request failed; the banner stays on every result', {
+                processId: managedProcessId,
+                error: valueFreeFailure(restarted.cause),
+                retryInMs: retryMs
+            });
+        }
+    };
+    // A persistent host's tick. A finite host refuses background intervals; the
+    // refusal is honoured: no background watch, `tick()` stays callable on demand.
+    const repeat = startLifecycleRepeat(options.runtime.lifecycle, intervalMs, () => {
+        void (async () => {
+            const read = await settle(() => tick());
+            if (read.ok || stopped)
+                return;
+            report('warn', 'executable freshness tick failed', { error: valueFreeFailure(read.cause) });
+        })();
+    });
+    if (repeat.kind === 'repeating')
+        stopTick = repeat.stop;
+    else
+        report('info', 'finite host: no background executable freshness watch', { reason: repeat.refusal.reason });
+    return {
+        stop() {
+            stopped = true;
+            stopTick?.();
+        },
+        tick
+    };
+}
+//# sourceMappingURL=executable-freshness-watch.js.map

package/dist/surface-mcp/executable-freshness-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable-freshness-watch.js","sourceRoot":"","sources":["../../src/surface-mcp/executable-freshness-watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAA4B,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AA8D7E,mGAAmG;AACnG,KAAK,UAAU,eAAe,CAAC,OAA2B,EAAE,aAAqB;IAChF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC5D,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,qBAAqB,CAAC,OAA2B,EAAE,aAAqB;IAChF,OAAO,KAAK,EAAE,SAAiB,EAAE,KAA0B,EAAiB,EAAE;QAC7E,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAA2B,EAAE,aAAqB;IACnF,OAAO,KAAK,EAAE,SAAiB,EAA0B,EAAE;QAC1D,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC;IAC3B,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC5C,OAAwC;IAExC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,MAAM,CAAC;IAC9C,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/G,MAAM,iBAAiB,GACtB,OAAO,CAAC,iBAAiB,IAAI,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;IACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAElE,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAC7C,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAC7C,uFAAuF;IACvF,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,wEAAwE;IACxE,IAAI,QAAQ,GAAwB,IAAI,CAAC;IAEzC;;;;OAIG;IACH,MAAM,MAAM,GAAG,CAAC,KAAgC,EAAE,OAAe,EAAE,OAAyE,EAAQ,EAAE;QACrJ,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC;IASF,mFAAmF;IACnF,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,OAAgC,EAAQ,EAAE;QAC3E,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,QAAQ,EAAE,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO;QAEtC,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,CAAC,OAAO,EACb,OAAO,CAAC,KAAK,KAAK,gBAAgB;gBACjC,CAAC,CAAC,kGAAkG;gBACpG,CAAC,CAAC,0EAA0E,EAC7E;gBACC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,gBAAgB;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;aACtB,CACD,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,gBAAgB;YAAE,OAAO,CAAC,qCAAqC;QAE/F,0EAA0E;QAC1E,kDAAkD;QAClD,MAAM,WAAW,GAChB,OAAO,CAAC,KAAK,KAAK,gBAAgB;YACjC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;YACzF,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;QAC3E,IAAI,WAAW,KAAK,IAAI,IAAI,GAAG,EAAE,GAAG,WAAW,GAAG,QAAQ,EAAE,CAAC;YAC5D,MAAM,CAAC,MAAM,EAAE,+DAA+D,EAAE;gBAC/E,QAAQ;gBACR,KAAK,EAAE,OAAO,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,oEAAoE;QACpE,2EAA2E;QAC3E,2EAA2E;QAC3E,qEAAqE;QACrE,0EAA0E;QAC1E,uEAAuE;QACvE,+BAA+B;QAC/B,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACnD,IAAI,kBAAkB,KAAK,IAAI,IAAI,GAAG,EAAE,GAAG,kBAAkB,GAAG,OAAO;gBAAE,OAAO;YAChF,kBAAkB,GAAG,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,MAAM,EAAE,qEAAqE,EAAE;gBACrF,SAAS,EAAE,gBAAgB;gBAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,KAAK,CAAC,CAAC;YACzE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBACnB,IAAI,OAAO;oBAAE,OAAO;gBACpB,MAAM,CAAC,OAAO,EAAE,yEAAyE,EAAE;oBAC1F,SAAS,EAAE,gBAAgB;oBAC3B,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC;oBACxC,SAAS,EAAE,OAAO;iBAClB,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,IAAI,SAAS,CAAC,KAAK;gBAAE,OAAO;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,mBAAmB,GAAG,IAAI,CAAC;YAC3B,MAAM,CAAC,MAAM,EAAE,qEAAqE,EAAE;gBACrF,SAAS,EAAE,gBAAgB;gBAC3B,KAAK,EAAE,OAAO,CAAC,KAAK;aACpB,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,kBAAkB,KAAK,IAAI,IAAI,GAAG,EAAE,GAAG,kBAAkB,GAAG,OAAO;YAAE,OAAO;QAChF,IAAI,eAAe,IAAI,kBAAkB,EAAE,CAAC;YAC3C,OAAO,CACN,0FAA0F,EAC1F,EAAE,eAAe,EAAE,kBAAkB,EAAE,CACvC,CAAC;YACF,OAAO;QACR,CAAC;QAED,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,OAAO;gBAAE,OAAO;YACpB,kBAAkB,GAAG,GAAG,EAAE,CAAC;YAC3B,MAAM,CAAC,MAAM,EACZ,yEAAyE,EACzE;gBACC,SAAS,EAAE,gBAAgB;gBAC3B,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC;gBACtC,SAAS,EAAE,OAAO;aAClB,CACD,CAAC;YACF,OAAO;QACR,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;QACjC,+EAA+E;QAC/E,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,CACN,iGAAiG,EACjG,EAAE,UAAU,EAAE,CACd,CAAC;YACF,OAAO;QACR,CAAC;QAED,kBAAkB,GAAG,GAAG,EAAE,CAAC;QAC3B,eAAe,IAAI,CAAC,CAAC;QACrB,MAAM,CAAC,MAAM,EAAE,wEAAwE,EAAE;YACxF,SAAS,EAAE,gBAAgB;YAC3B,OAAO;YACP,OAAO,EAAE,eAAe;YACxB,kBAAkB;SAClB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACjG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,EAAE,kEAAkE,EAAE;gBACnF,SAAS,EAAE,gBAAgB;gBAC3B,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC;gBACxC,SAAS,EAAE,OAAO;aAClB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IAEF,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE;QAC/E,KAAK,CAAC,KAAK,IAAI,EAAE;YAChB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,EAAE,IAAI,OAAO;gBAAE,OAAO;YAC/B,MAAM,CAAC,MAAM,EAAE,kCAAkC,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC,CAAC,EAAE,CAAC;IACN,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;;QACnD,MAAM,CAAC,MAAM,EAAE,uDAAuD,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhH,OAAO;QACN,IAAI;YACH,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,EAAE,EAAE,CAAC;QACd,CAAC;QACD,IAAI;KACJ,CAAC;AACH,CAAC"}

package/dist/surface-mcp/host-provenance-banner.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The thin host's provenance line, printed once on stderr when `dev mcp serve`
+ * starts.
+ *
+ * WHY IT EXISTS. Before the flip, "what code is this body running?" was answered
+ * by the executable alone, and `build-provenance.ts` answered it by comparing
+ * the source checkout's git ref against the opened workspace's. Under the thin
+ * host that comparison is meaningless — the source root is a package under
+ * `node_modules` and the workspace is whatever project the agent opened — so
+ * WU-11 deleted the `sourceWorkspaceDiverged` verdict. This line is what
+ * replaces it: the three facts that DO identify a thin-host body, each read
+ * from the thing that actually varies.
+ *
+ *   shim@<sha>   the compiled binary's own source sha (`VIBES_SHIM_SOURCE_SHA`,
+ *                published by the shim). Changes only on a rebuild.
+ *   host <name>@<version>   the on-disk host package the shim imported, read
+ *                from the manifest beside `VIBES_HOST_ENTRY` — the SAME FILE
+ *                `vibes --version` reads, so the two can never disagree.
+ *   lock@<digest>   the graph nerve: sha256/12 of `<R>/bun.lock`, R being the
+ *                host identity's declared root. This is the
+ *                one that moves in ordinary use — `vibes update`, `plugins
+ *                add`, a linked provider's checkout moving — while the
+ *                executable stays byte-identical.
+ *
+ * STDERR, NEVER STDOUT: stdout is the JSON-RPC channel. Written before
+ * the stdout capture lease (`acquireStdoutCapture`), so no capture policy can swallow the one line
+ * that says which body answered.
+ *
+ * Read through the runtime (filesystem, paths, host identity) and NEVER throws: a provenance probe must
+ * not be able to stop a server from starting. Unknown facts are reported as
+ * `unknown`, never omitted — a missing field would read as a shape change,
+ * while `unknown` is a fact about the body.
+ */
+import { type RuntimeHostIdentity, type VibesRuntime } from '@vibesdotdev/kernel';
+/**
+ * `shim@<sha> host <name>@<ver> lock@<digest>` — plan §10 row 11's falsifier
+ * shape. A SINGLE COMPILED BODY (the monolith) has no host package and no
+ * resolution root on disk, so it honestly reports `host unknown lock@unknown`;
+ * that is the shape's answer to "this body cannot name its graph", not a gap.
+ * A thin host at a root with no lockfile reports `lock@none`.
+ */
+export declare function hostProvenanceBanner(runtime: VibesRuntime, identity: RuntimeHostIdentity | null): Promise<string>;
+/**
+ * Write the banner to the runtime's stderr once, when serve starts. Composing
+ * the line never throws; a host whose text output refuses fails here, typed,
+ * exactly as the serve body that needs that output would.
+ */
+export declare function writeHostProvenanceBanner(runtime: VibesRuntime, identity: RuntimeHostIdentity | null): Promise<void>;
+//# sourceMappingURL=host-provenance-banner.d.ts.map

package/dist/surface-mcp/host-provenance-banner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-provenance-banner.d.ts","sourceRoot":"","sources":["../../src/surface-mcp/host-provenance-banner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAOH,OAAO,EAA6C,KAAK,mBAAmB,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA2E7H;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAIvH;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1H"}

package/dist/surface-mcp/host-provenance-banner.js

@@ -0,0 +1,135 @@
+/**
+ * The thin host's provenance line, printed once on stderr when `dev mcp serve`
+ * starts.
+ *
+ * WHY IT EXISTS. Before the flip, "what code is this body running?" was answered
+ * by the executable alone, and `build-provenance.ts` answered it by comparing
+ * the source checkout's git ref against the opened workspace's. Under the thin
+ * host that comparison is meaningless — the source root is a package under
+ * `node_modules` and the workspace is whatever project the agent opened — so
+ * WU-11 deleted the `sourceWorkspaceDiverged` verdict. This line is what
+ * replaces it: the three facts that DO identify a thin-host body, each read
+ * from the thing that actually varies.
+ *
+ *   shim@<sha>   the compiled binary's own source sha (`VIBES_SHIM_SOURCE_SHA`,
+ *                published by the shim). Changes only on a rebuild.
+ *   host <name>@<version>   the on-disk host package the shim imported, read
+ *                from the manifest beside `VIBES_HOST_ENTRY` — the SAME FILE
+ *                `vibes --version` reads, so the two can never disagree.
+ *   lock@<digest>   the graph nerve: sha256/12 of `<R>/bun.lock`, R being the
+ *                host identity's declared root. This is the
+ *                one that moves in ordinary use — `vibes update`, `plugins
+ *                add`, a linked provider's checkout moving — while the
+ *                executable stays byte-identical.
+ *
+ * STDERR, NEVER STDOUT: stdout is the JSON-RPC channel. Written before
+ * the stdout capture lease (`acquireStdoutCapture`), so no capture policy can swallow the one line
+ * that says which body answered.
+ *
+ * Read through the runtime (filesystem, paths, host identity) and NEVER throws: a provenance probe must
+ * not be able to stop a server from starting. Unknown facts are reported as
+ * `unknown`, never omitted — a missing field would read as a shape change,
+ * while `unknown` is a fact about the body.
+ */
+import * as z from 'zod/v4';
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client/resolve-adapter';
+import { getLogger } from '@vibesdotdev/logging';
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { getRuntimeStdio, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+const UNKNOWN = 'unknown';
+/** The host package manifest fields the label uses, each read independently. */
+const ManifestNameSchema = z.string().min(1);
+const ManifestVersionSchema = z.string().min(1);
+const HostPackageManifestSchema = z.object({
+    name: z.string().optional(),
+    version: z.string().optional()
+});
+function env(runtime, key) {
+    const value = runtime.getEnv(key)?.trim() ?? '';
+    return value.length > 0 ? value : null;
+}
+function textOf(value) {
+    if (value instanceof Uint8Array)
+        return new TextDecoder().decode(value);
+    return value;
+}
+/** `<name>@<version>` from the host package manifest, or this banner's `unknown`. */
+async function readHostManifestLabel(runtime, hostEntry) {
+    const path = await getRuntimePath(runtime);
+    // The host package lives outside the workspace: the unbound host adapter reads it.
+    const filesystem = await resolveFileSystemAdapter(runtime, { binding: false });
+    const manifestPath = path.join(path.dirname(hostEntry), 'package.json');
+    if (!(await filesystem.exists(manifestPath)))
+        return UNKNOWN;
+    const text = textOf(await filesystem.readFile(manifestPath, 'utf8'));
+    const parsed = HostPackageManifestSchema.parse(JSON.parse(text));
+    const name = ManifestNameSchema.safeParse(parsed.name);
+    const version = ManifestVersionSchema.safeParse(parsed.version);
+    if (!name.success)
+        return UNKNOWN;
+    return `${name.data}@${version.success ? version.data : UNKNOWN}`;
+}
+/** `<name>@<version>` of the host package whose entry the shim imported, read through the runtime filesystem. */
+async function hostPackageLabel(runtime) {
+    const hostEntry = env(runtime, 'VIBES_HOST_ENTRY');
+    if (!hostEntry)
+        return UNKNOWN;
+    const read = await settle(() => readHostManifestLabel(runtime, hostEntry));
+    if (read.ok)
+        return read.value;
+    // `unknown` is this banner's declared answer for a manifest it cannot read.
+    getLogger('mcp', runtime).debug('host provenance: host manifest unreadable', { error: valueFreeFailure(read.cause) });
+    return UNKNOWN;
+}
+/**
+ * Lock digest of the resolution root R this process was pinned to, through
+ * the host's declared process identity.
+ *
+ * Same vocabulary the shim's `--version` line uses (`lock <digest|none>`): a
+ * root that carries NO lockfile is `none` — a fact about the graph — while
+ * `unknown` means this process could not name a root, has no host identity,
+ * or could not read the lock. Collapsing them would report "no graph nerve"
+ * and "I never looked" as the same answer.
+ */
+async function lockLabel(runtime, identity) {
+    if (!identity)
+        return UNKNOWN;
+    // R is the host's declared root, never a VIBES_HOST_ROOT the environment carries: an inherited one names a parent's graph.
+    const read = await settle(() => {
+        const root = identity.hostRoot();
+        if (root === null)
+            return UNKNOWN;
+        const current = identity.graphFreshness(root).current;
+        if (current === null)
+            return UNKNOWN;
+        if (current.lockPath === null)
+            return 'none';
+        return current.digest ?? UNKNOWN;
+    });
+    if (read.ok)
+        return read.value;
+    // `unknown` is this banner's declared answer for a root it cannot digest.
+    getLogger('mcp', runtime).debug('host provenance: lock digest unavailable', { error: valueFreeFailure(read.cause) });
+    return UNKNOWN;
+}
+/**
+ * `shim@<sha> host <name>@<ver> lock@<digest>` — plan §10 row 11's falsifier
+ * shape. A SINGLE COMPILED BODY (the monolith) has no host package and no
+ * resolution root on disk, so it honestly reports `host unknown lock@unknown`;
+ * that is the shape's answer to "this body cannot name its graph", not a gap.
+ * A thin host at a root with no lockfile reports `lock@none`.
+ */
+export async function hostProvenanceBanner(runtime, identity) {
+    const shim = env(runtime, 'VIBES_SHIM_SOURCE_SHA') ?? env(runtime, 'VIBES_SHIM_VERSION') ?? UNKNOWN;
+    return `shim@${shim} host ${await hostPackageLabel(runtime)} lock@${await lockLabel(runtime, identity)}`;
+}
+/**
+ * Write the banner to the runtime's stderr once, when serve starts. Composing
+ * the line never throws; a host whose text output refuses fails here, typed,
+ * exactly as the serve body that needs that output would.
+ */
+export async function writeHostProvenanceBanner(runtime, identity) {
+    const line = `[mcp] ${await hostProvenanceBanner(runtime, identity)}`;
+    (await getRuntimeStdio(runtime)).write('stderr', `${line}\n`);
+}
+//# sourceMappingURL=host-provenance-banner.js.map

package/dist/surface-mcp/host-provenance-banner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-provenance-banner.js","sourceRoot":"","sources":["../../src/surface-mcp/host-provenance-banner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAA+C,MAAM,qBAAqB,CAAC;AAE7H,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7C,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAChD,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,SAAS,GAAG,CAAC,OAAqB,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,SAAS,MAAM,CAAC,KAA0B;IACzC,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,qBAAqB,CAAC,OAAqB,EAAE,SAAiB;IAC5E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC3C,mFAAmF;IACnF,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAClC,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,iHAAiH;AACjH,KAAK,UAAU,gBAAgB,CAAC,OAAqB;IACpD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAC/B,4EAA4E;IAC5E,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtH,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,SAAS,CAAC,OAAqB,EAAE,QAAoC;IACnF,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC9B,2HAA2H;IAC3H,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACtD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAC7C,OAAO,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAC/B,0EAA0E;IAC1E,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrH,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAqB,EAAE,QAAoC;IACrG,MAAM,IAAI,GACT,GAAG,CAAC,OAAO,EAAE,uBAAuB,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,IAAI,OAAO,CAAC;IACxF,OAAO,QAAQ,IAAI,SAAS,MAAM,gBAAgB,CAAC,OAAO,CAAC,SAAS,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAqB,EAAE,QAAoC;IAC1G,MAAM,IAAI,GAAG,SAAS,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IACtE,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;AAC/D,CAAC"}

package/dist/surface-mcp/index.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Runtime Surface — MCP
+ *
+ * The MCP surface boots nothing of its own (rc02-rc03 §2.3).
+ *
+ * - `vibes dev mcp serve` is a serve command. Its descriptor declares
+ *   `effects.serve`, so the CLI disposes its un-activated runtime and boots the
+ *   serve host through the one entry (`bootstrapVibesRuntime`) before the
+ *   action runs: surface and purpose `mcp`, an `ipc-worker` venue, request
+ *   principals, `sharedHost`, `qualifiers.serve: 'dev.mcp.serve'`, and the
+ *   CLI's `--finite ? finite : persistent` lifecycle. That boot composes the
+ *   workspace's plugins, discovers, activates and wires; its workspace is the
+ *   kernel's one binding (`--workspace-root`, else the nearest workspace above
+ *   the cwd).
+ * - A hosted MCP endpoint boots through the same entry behind its isolate
+ *   `prepare`, with the environment its integration registers and a literal
+ *   composition of its cloud tool plugins, and serves through
+ *   `./adapters/mcp/web-handler`.
+ *
+ * What stays here is the work the serve action does on that ready host.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+/** The serve command whose host this surface prepares (its `qualifiers.serve`). */
+export declare const MCP_SERVE_COMMAND_ID: "dev.mcp.serve";
+/**
+ * The workspace-health signal for a serve host bound to its launch directory
+ * because nothing above it marks a workspace (rc02-rc03 C5), or null when the
+ * binding is explicit or a marked workspace. A client that launches the server
+ * from an arbitrary directory lands here; agent-facing tools surface it.
+ */
+export declare function mcpServeWorkspaceWarning(runtime: Pick<VibesRuntime, 'declaredScope' | 'localEnvironment'>): string | null;
+/**
+ * Prepare the MCP serve host the CLI booted for `dev mcp serve`: the serve
+ * action's own work on an already-activated runtime. It never bootstraps,
+ * patches the declared scope, or re-registers kernel plugins.
+ *
+ * - `projectRefPlugin` when the composition carries no `workspace` plugin, so
+ *   ProjectRef authority exists either way (a plugin registered on a ready
+ *   host activates at registration).
+ * - The `mcp/workspace-warning` context.
+ * - On consumer hardware, the workspace environment bound to `workspaceRoot`;
+ *   the serve host is nobody's session until one binds (the session registry).
+ *
+ * `workspaceRoot` is the host's bound workspace, read by the caller from
+ * `runtime/workspace-path` (an unbound host fails there, `workspace-unbound`).
+ */
+export declare function prepareMcpServeHost(runtime: VibesRuntime, workspaceRoot: string): Promise<void>;
+export { MCP_WORKSPACE_WARNING_CONTEXT_ID, readMcpWorkspaceWarning } from './workspace-warning.ts';
+export type { McpProjectRootResolution } from './project-config.ts';
+export { ensureConsumerBackgroundServices, rebindWorkspaceEnvironmentForActiveSession, rebindWorkspaceEnvironmentForSession, triggerProgressiveIndexingInBackground } from './serve-lifecycle.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/surface-mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/surface-mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMzE,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,EAAG,eAAwB,CAAC;AAE7D;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,GAAG,kBAAkB,CAAC,GAC/D,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,YAAY,EACrB,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED,OAAO,EACN,gCAAgC,EAChC,uBAAuB,EACvB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EACN,gCAAgC,EAChC,0CAA0C,EAC1C,oCAAoC,EACpC,sCAAsC,EACtC,MAAM,sBAAsB,CAAC"}

package/dist/surface-mcp/index.js

@@ -0,0 +1,92 @@
+/**
+ * Runtime Surface — MCP
+ *
+ * The MCP surface boots nothing of its own (rc02-rc03 §2.3).
+ *
+ * - `vibes dev mcp serve` is a serve command. Its descriptor declares
+ *   `effects.serve`, so the CLI disposes its un-activated runtime and boots the
+ *   serve host through the one entry (`bootstrapVibesRuntime`) before the
+ *   action runs: surface and purpose `mcp`, an `ipc-worker` venue, request
+ *   principals, `sharedHost`, `qualifiers.serve: 'dev.mcp.serve'`, and the
+ *   CLI's `--finite ? finite : persistent` lifecycle. That boot composes the
+ *   workspace's plugins, discovers, activates and wires; its workspace is the
+ *   kernel's one binding (`--workspace-root`, else the nearest workspace above
+ *   the cwd).
+ * - A hosted MCP endpoint boots through the same entry behind its isolate
+ *   `prepare`, with the environment its integration registers and a literal
+ *   composition of its cloud tool plugins, and serves through
+ *   `./adapters/mcp/web-handler`.
+ *
+ * What stays here is the work the serve action does on that ready host.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { projectRefPlugin, resolveProjectRefContext } from '@vibesdotdev/workspace/project-ref';
+import { tryResolveWorkspaceEnvironment, workspaceEnvironmentKind } from '@vibesdotdev/workspace/environment';
+import { publishMcpWorkspaceWarning } from "./workspace-warning.js";
+/** The serve command whose host this surface prepares (its `qualifiers.serve`). */
+export const MCP_SERVE_COMMAND_ID = 'dev.mcp.serve';
+/**
+ * The workspace-health signal for a serve host bound to its launch directory
+ * because nothing above it marks a workspace (rc02-rc03 C5), or null when the
+ * binding is explicit or a marked workspace. A client that launches the server
+ * from an arbitrary directory lands here; agent-facing tools surface it.
+ */
+export function mcpServeWorkspaceWarning(runtime) {
+    if (runtime.declaredScope.workspace?.root)
+        return null;
+    const binding = runtime.localEnvironment.workspaceBinding?.() ?? null;
+    if (binding?.source !== 'cwd')
+        return null;
+    return (`vibes MCP found no workspace marker (.git, or a package.json declaring workspaces) ` +
+        `above its launch directory, so it bound that directory itself: ${binding.root}. ` +
+        `Tools may read the wrong project. Fix: pass --workspace-root <dir> in the MCP client ` +
+        `config, or launch the server with its cwd inside the repository.`);
+}
+/**
+ * Prepare the MCP serve host the CLI booted for `dev mcp serve`: the serve
+ * action's own work on an already-activated runtime. It never bootstraps,
+ * patches the declared scope, or re-registers kernel plugins.
+ *
+ * - `projectRefPlugin` when the composition carries no `workspace` plugin, so
+ *   ProjectRef authority exists either way (a plugin registered on a ready
+ *   host activates at registration).
+ * - The `mcp/workspace-warning` context.
+ * - On consumer hardware, the workspace environment bound to `workspaceRoot`;
+ *   the serve host is nobody's session until one binds (the session registry).
+ *
+ * `workspaceRoot` is the host's bound workspace, read by the caller from
+ * `runtime/workspace-path` (an unbound host fails there, `workspace-unbound`).
+ */
+export async function prepareMcpServeHost(runtime, workspaceRoot) {
+    const serve = runtime.declaredScope.qualifiers.serve;
+    if (serve !== MCP_SERVE_COMMAND_ID) {
+        throw new CapabilityError(`The MCP serve surface runs on the '${MCP_SERVE_COMMAND_ID}' serve host; this host declared ${serve ? `'${serve}'` : 'no serve command'}.`, 'CONFLICT', { reason: 'scope-conflict', details: { origin: 'prepareMcpServeHost', serve: serve ?? null } });
+    }
+    if (!runtime.hasPlugin('workspace') && !runtime.hasPlugin(projectRefPlugin.id)) {
+        await runtime.registerPlugin(projectRefPlugin);
+    }
+    publishMcpWorkspaceWarning(runtime, mcpServeWorkspaceWarning(runtime));
+    if (runtime.declaredScope.hardware === 'consumer') {
+        const { default: workspaceStatePlugin } = await import('@vibesdotdev/workspace/state.plugin');
+        if (!runtime.hasPlugin(workspaceStatePlugin.id))
+            await runtime.registerPlugin(workspaceStatePlugin);
+        const projectRef = (await resolveProjectRefContext(runtime)).resolve({ cwd: workspaceRoot });
+        const { bindWorkspaceEnvironment } = await import('@vibesdotdev/workspace/environment/node');
+        await bindWorkspaceEnvironment(runtime, {
+            // The serve host is nobody's session until one binds (the session
+            // registry, Q4); a workspace already bound keeps its session, which
+            // lives in the workspace environment, never the declared scope.
+            sessionId: (runtime.hasKind(workspaceEnvironmentKind.id)
+                ? (await tryResolveWorkspaceEnvironment(runtime))?.sessionId
+                : undefined) ?? 'mcp-session',
+            target: 'local',
+            root: workspaceRoot,
+            projectId: projectRef?.projectId
+        });
+        // The stored login is not bound into the environment: tools resolve the
+        // caller's bearer through auth's resolveCallerBearer (rc05 §2.2).
+    }
+}
+export { MCP_WORKSPACE_WARNING_CONTEXT_ID, readMcpWorkspaceWarning } from "./workspace-warning.js";
+export { ensureConsumerBackgroundServices, rebindWorkspaceEnvironmentForActiveSession, rebindWorkspaceEnvironmentForSession, triggerProgressiveIndexingInBackground } from "./serve-lifecycle.js";
+//# sourceMappingURL=index.js.map

package/dist/surface-mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/surface-mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAChG,OAAO,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9G,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAwB,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACvC,OAAiE;IAEjE,IAAI,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,IAAI,IAAI,CAAC;IACtE,IAAI,OAAO,EAAE,MAAM,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CACN,qFAAqF;QACrF,kEAAkE,OAAO,CAAC,IAAI,IAAI;QAClF,uFAAuF;QACvF,kEAAkE,CAClE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAqB,EACrB,aAAqB;IAErB,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC;IACrD,IAAI,KAAK,KAAK,oBAAoB,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CACxB,sCAAsC,oBAAoB,oCAAoC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,kBAAkB,GAAG,EAC1I,UAAU,EACV,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,EAAE,CAC9F,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,MAAM,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAChD,CAAC;IAED,0BAA0B,CAAC,OAAO,EAAE,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;IAEvE,IAAI,OAAO,CAAC,aAAa,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACnD,MAAM,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAAE,MAAM,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QACpG,MAAM,UAAU,GAAG,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;QAC7F,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QAC7F,MAAM,wBAAwB,CAAC,OAAO,EAAE;YACvC,kEAAkE;YAClE,oEAAoE;YACpE,gEAAgE;YAChE,SAAS,EACR,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAC5C,CAAC,CAAC,CAAC,MAAM,8BAA8B,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS;gBAC5D,CAAC,CAAC,SAAS,CAAC,IAAI,aAAa;YAC/B,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,UAAU,EAAE,SAAS;SAChC,CAAC,CAAC;QACH,wEAAwE;QACxE,kEAAkE;IACnE,CAAC;AACF,CAAC;AAED,OAAO,EACN,gCAAgC,EAChC,uBAAuB,EACvB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACN,gCAAgC,EAChC,0CAA0C,EAC1C,oCAAoC,EACpC,sCAAsC,EACtC,MAAM,sBAAsB,CAAC"}

package/dist/surface-mcp/local-tools-bootstrap.d.ts

@@ -0,0 +1,36 @@
+/**
+ * MCP serve reports the project-local `.vibes/tools` the boot's discovery pass
+ * registered (rc02-rc03 §2.5), before tool selection / buildServer — the same
+ * catalog CLI list/run/inspect see. Nothing here scans: a discovery failure
+ * already failed (or, under repair argv, reported) the boot.
+ *
+ * `vibes tools scan --load` remains the explicit re-scan after edits
+ * mid-serve and for CI.
+ */
+/**
+ * Surface package (runtime-surface-mcp) consumes the tools *feature* via its
+ * public export — never sibling `tools/src/**` imports.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { type LocalToolsReport } from '@vibesdotdev/tools/local/node/ensure-local-tools';
+export type LocalToolsBootstrapDeps = {
+    /** Where notices go (default stderr). */
+    writeNotice?: (line: string) => void;
+    /** Structured log sink (optional). The meta is the loaded-tool report. */
+    logInfo?: (message: string, meta?: {
+        readonly toolIds: readonly string[];
+        readonly scannedPaths: readonly string[];
+    }) => void;
+};
+/**
+ * Report this serve host's project-local tools once. Call on the ready serve
+ * host, before selectMcpTools / createMcpAdapter.
+ */
+export declare function reportLocalToolsForMcpServe(runtime: Pick<VibesRuntime, 'discovered'>, deps?: LocalToolsBootstrapDeps): LocalToolsReport;
+/**
+ * Explicit localToolIds for createMcpAdapter / buildServer. Always pass the
+ * report — even when empty — so the adapter tags exactly what this host
+ * discovered. Empty means "this host has no local tools".
+ */
+export declare function localToolIdsForMcpAdapter(report: Pick<LocalToolsReport, 'toolIds'>): readonly string[];
+//# sourceMappingURL=local-tools-bootstrap.d.ts.map

package/dist/surface-mcp/local-tools-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-tools-bootstrap.d.ts","sourceRoot":"","sources":["../../src/surface-mcp/local-tools-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;GAGG;AACH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAEvG,MAAM,MAAM,uBAAuB,GAAG;IACrC,yCAAyC;IACzC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,CACT,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,KACpF,IAAI,CAAC;CACV,CAAC;AAEF;;;GAGG;AACH,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,EACzC,IAAI,GAAE,uBAA4B,GAChC,gBAAgB,CAiBlB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,GAAG,SAAS,MAAM,EAAE,CAEtG"}