@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.1

package/dist/cli/mcp/audit/dev.audit.tools.descriptor.js

@@ -0,0 +1,58 @@
+/**
+ * `vibes dev audit tools` — the universal-tools czar cycle capability.
+ *
+ * Checks declared tool descriptors through the MCP exposure funnel for every
+ * client preset: exposure counts, unintended preset exclusions, and description
+ * length limits. Served-catalog evidence requires --live; read-safe canary and
+ * host-attestation checks require --doctor. Composed into the existing `dev.audit`
+ * group beside `dev.audit.ledger` — NOT a new top-level group and NOT a
+ * `tools`-group command (both were killed in docs/proposals/universal-tools-czar/
+ * as second-way / slop). `--json` for the scheduled daily czar routine.
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'dev.audit.tools',
+    name: 'tools',
+    description: 'Audit MCP preset reachability and tool description limits',
+    group: 'dev.audit',
+    options: [
+        { flags: '--json', description: 'Emit a machine-readable JSON report instead of text' },
+        {
+            flags: '--strict',
+            description: 'Exit non-zero on any finding (default: only high-severity fails)'
+        },
+        {
+            flags: '--live',
+            description: 'Wire Selfie: spawn the real stdio serve, handshake, and diff SERVED vs AUTHORED'
+        },
+        {
+            flags: '--doctor',
+            description: 'Projection doctor: execute a read-safe canary and report server birth plus host attestation'
+        },
+        { flags: '--client <id>', description: 'Client preset for --live (default: claude)' },
+        { flags: '--timeout <ms>', description: 'Total --live handshake budget (default: 180000)' }
+    ],
+    examples: [
+        {
+            command: 'vibes dev audit tools',
+            description: 'Policy view: per-client exposure funnel + orphan/wire findings'
+        },
+        {
+            command: 'vibes dev audit tools --live --client claude',
+            description: 'Wire Selfie: photograph what the claude preset actually serves and diff it'
+        },
+        {
+            command: 'vibes dev audit tools --doctor --client claude',
+            description: 'Behavioral projection check; client-visible truth is unobservable without an adapter attestation'
+        },
+        {
+            command: 'vibes dev audit tools --json --strict',
+            description: 'Machine-readable report for the daily czar routine; fail on any finding'
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=dev.audit.tools.descriptor.js.map

package/dist/cli/mcp/audit/dev.audit.tools.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.audit.tools.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/mcp/audit/dev.audit.tools.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,2DAA2D;IACxE,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;QACvF;YACC,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,kEAAkE;SAC/E;QACD;YACC,KAAK,EAAE,QAAQ;YACf,WAAW,EACV,iFAAiF;SAClF;QACD;YACC,KAAK,EAAE,UAAU;YACjB,WAAW,EACV,6FAA6F;SAC9F;QACD,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,4CAA4C,EAAE;QACrF,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,iDAAiD,EAAE;KAC3F;IACD,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,uBAAuB;YAChC,WAAW,EAAE,gEAAgE;SAC7E;QACD;YACC,OAAO,EAAE,8CAA8C;YACvD,WAAW,EAAE,4EAA4E;SACzF;QACD;YACC,OAAO,EAAE,gDAAgD;YACzD,WAAW,EAAE,kGAAkG;SAC/G;QACD;YACC,OAAO,EAAE,uCAAuC;YAChD,WAAW,EAAE,yEAAyE;SACtF;KACD;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/mcp/audit/dev.audit.tools.impl.consumer.d.ts

@@ -0,0 +1,6 @@
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+declare const _default: {
+    execute(_args: CommandOptions, opts: CommandOptions, context: CommandContext): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=dev.audit.tools.impl.consumer.d.ts.map

package/dist/cli/mcp/audit/dev.audit.tools.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.audit.tools.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/cli/mcp/audit/dev.audit.tools.impl.consumer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;;mBAgJjD,cAAc,QAAQ,cAAc,WAAW,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;;AADnG,wBAgDE"}

package/dist/cli/mcp/audit/dev.audit.tools.impl.consumer.js

@@ -0,0 +1,180 @@
+import { loadPurposePresetOverrides } from '@vibesdotdev/tools/config/load';
+/**
+ * `vibes dev audit tools` implementation.
+ *
+ * Thin CLI projection over `runToolExposureAudit` (the reusable czar-cycle core
+ * in ../../../adapters/mcp/tool-audit.ts). Formats text/JSON and sets the exit
+ * code so it works both for a human and as a scheduled standing guard.
+ */
+import { writeJson } from '@vibesdotdev/cli/output';
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { printLine } from "../../print.js";
+import * as z from 'zod/v4';
+import { getRuntimeHostCommands } from '@vibesdotdev/kernel';
+import { runToolExposureAudit } from "../../../adapters/mcp/tool-audit.js";
+import { runWireSelfie } from "../../../adapters/mcp/tool-audit-live.js";
+import { runProjectionDoctor } from "../../../adapters/mcp/projection-doctor.js";
+async function wireSelfieCommand(runtime, clientId) {
+    const hostCommands = await getRuntimeHostCommands(runtime);
+    const selfSpawnArgv = hostCommands.selfSpawnArgv('Tool wire audit');
+    return [
+        ...selfSpawnArgv,
+        'dev',
+        'mcp',
+        'serve',
+        // Fresh-spawn audits need their own body even when a shared host exists.
+        '--isolated',
+        '--finite',
+        '--preset',
+        clientId,
+        '--harness',
+        clientId,
+        '--agent',
+        clientId
+    ];
+}
+function formatText(report) {
+    const lines = [];
+    lines.push(`Tool exposure policy — ${report.totalDescriptors} declared tools/tool descriptors.`);
+    lines.push('(Policy view: what each preset intends to expose. Serve-world loader reality + served-vs-authored');
+    lines.push('drift is the live Wire Selfie handshake — see docs/proposals/universal-tools-czar/.)');
+    lines.push('');
+    lines.push('Per-preset exposure funnel:');
+    for (const preset of report.presets) {
+        const capped = preset.limitedFrom !== undefined ? ` (capped from ${preset.limitedFrom})` : '';
+        // A sub-metric, labelled as such — descriptions are ~4% of the catalog, and
+        // this number must never read as catalog health. Real weight comes from
+        // `--live` (Catalog weight), which is the only budgeted figure.
+        const budget = `${preset.descriptionBudgetChars} desc chars (~4% of wire; use --live)`;
+        lines.push(`  ${preset.presetId.padEnd(16)} ${String(preset.exposedCount).padStart(3)} tools${capped}  ${budget}`);
+    }
+    if (report.findings.length > 0) {
+        lines.push('');
+        lines.push('Findings:');
+        for (const finding of report.findings) {
+            const badge = finding.severity.toUpperCase().padEnd(6);
+            lines.push(`  [${badge}] ${finding.code} — ${finding.toolId}: ${finding.detail}`);
+        }
+    }
+    else {
+        lines.push('');
+        lines.push('No policy findings — preset reachability and description checks passed.');
+    }
+    lines.push('');
+    lines.push(report.findings.length === 0
+        ? 'PASS — no policy findings.'
+        : `${report.findings.length} policy finding(s) — use --strict to exit non-zero on any finding.`);
+    return lines.join('\n');
+}
+function formatWireText(report) {
+    const lines = [];
+    lines.push(`Wire Selfie — client '${report.clientId}': ${report.servedCount} tools served / ` +
+        `${report.expectedCount} policy-selected (captured in ${Math.round(report.captureMs / 1000)}s).`);
+    // Always show the catalog's measured cost, not just when it trips the budget —
+    // this is the number that silently grows, and the policy view cannot see it.
+    lines.push(`Catalog weight: ${report.wireBytes.toLocaleString()} bytes on the wire ` +
+        `(~${Math.round(report.wireBytes / 3.6).toLocaleString()} tokens), paid by every ` +
+        `client that does not defer tool loading.`);
+    if (report.findings.length > 0) {
+        lines.push('');
+        lines.push('Findings (served vs authored):');
+        for (const finding of report.findings) {
+            lines.push(`  [${finding.severity.toUpperCase().padEnd(6)}] ${finding.code} — ${finding.toolId}: ${finding.detail}`);
+        }
+    }
+    else {
+        lines.push('');
+        lines.push('No drift — the wire serves exactly what the registry authors.');
+    }
+    lines.push('');
+    lines.push(report.ok ? 'PASS — no high-severity wire findings.' : 'FAIL — high-severity wire findings.');
+    return lines.join('\n');
+}
+function formatProjectionDoctorText(report) {
+    const lines = [
+        `Projection Doctor — client '${report.clientId}'`,
+        `  registry: ${report.registry.status} (${report.registry.selectedToolIds.length} selected)`,
+        `  fresh-spawn: ${report.freshSpawn.status} (${report.freshSpawn.servedCount} served, canary=${report.freshSpawn.canary?.status ?? 'not-run'})`,
+        `  birth: ${report.birth.status} (provenance=${report.birth.provenance ?? 'missing'}, catalog=${report.birth.catalogHash ?? 'missing'})`,
+        `  host-visible: ${report.host.status} (${report.host.visibleToolCount} tools)`,
+        ''
+    ];
+    if (report.findings.length > 0) {
+        lines.push('Findings:');
+        for (const finding of report.findings) {
+            lines.push(`  [${finding.kind.toUpperCase()}] ${finding.stage}/${finding.code} — ${finding.detail}`);
+        }
+    }
+    else {
+        lines.push('No findings.');
+    }
+    lines.push('', report.ok ? 'PASS — all four projection truths were proven.' : 'NOT SEALED — client-visible truth is not proven.');
+    return lines.join('\n');
+}
+const AuditOptionsSchema = z.object({
+    json: z.boolean().optional(),
+    strict: z.boolean().optional(),
+    doctor: z.boolean().optional(),
+    live: z.boolean().optional(),
+    client: z.string().optional(),
+    timeout: z.union([z.string(), z.number()]).optional()
+});
+function positiveTimeout(value) {
+    if (value === undefined)
+        return undefined;
+    const parsed = z.coerce.number().positive().safeParse(value);
+    return parsed.success ? parsed.data : undefined;
+}
+export default {
+    async execute(_args, opts, context) {
+        const options = AuditOptionsSchema.parse(opts);
+        const json = options.json === true;
+        const strict = options.strict === true;
+        const runtime = context.runtime;
+        if (options.doctor === true) {
+            const clientId = options.client ? options.client : 'claude';
+            const timeoutMs = positiveTimeout(options.timeout);
+            const report = await runProjectionDoctor(runtime, {
+                clientId,
+                timeoutMs,
+                command: await wireSelfieCommand(runtime, clientId)
+            });
+            if (json)
+                await writeJson(runtime, report);
+            else
+                await printLine(runtime, formatProjectionDoctorText(report));
+            const failed = strict ? report.findings.length > 0 : !report.ok;
+            if (failed)
+                requestCLIExit(1);
+            return;
+        }
+        if (options.live === true) {
+            const clientId = options.client ? options.client : 'claude';
+            const timeoutMs = positiveTimeout(options.timeout);
+            const report = await runWireSelfie(runtime, {
+                clientId,
+                timeoutMs,
+                command: await wireSelfieCommand(runtime, clientId)
+            });
+            if (json)
+                await writeJson(runtime, report);
+            else
+                await printLine(runtime, formatWireText(report));
+            const failed = strict ? report.findings.length > 0 : !report.ok;
+            if (failed)
+                requestCLIExit(1);
+            return;
+        }
+        const report = runToolExposureAudit(runtime, await loadPurposePresetOverrides(runtime));
+        if (json) {
+            await writeJson(runtime, report);
+        }
+        else {
+            await printLine(runtime, formatText(report));
+        }
+        const failed = strict ? report.findings.length > 0 : !report.ok;
+        if (failed)
+            requestCLIExit(1);
+    }
+};
+//# sourceMappingURL=dev.audit.tools.impl.consumer.js.map

package/dist/cli/mcp/audit/dev.audit.tools.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.audit.tools.impl.consumer.js","sourceRoot":"","sources":["../../../../src/cli/mcp/audit/dev.audit.tools.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAmB,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAwB,MAAM,qCAAqC,CAAC;AACjG,OAAO,EAAE,aAAa,EAAyB,MAAM,0CAA0C,CAAC;AAChG,OAAO,EACN,mBAAmB,EAEnB,MAAM,4CAA4C,CAAC;AAEpD,KAAK,UAAU,iBAAiB,CAAC,OAA8C,EAAE,QAAgB;IAChG,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,YAAY,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACpE,OAAO;QACN,GAAG,aAAa;QAChB,KAAK;QACL,KAAK;QACL,OAAO;QACP,yEAAyE;QACzE,YAAY;QACZ,UAAU;QACV,UAAU;QACV,QAAQ;QACR,WAAW;QACX,QAAQ;QACR,SAAS;QACT,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAuB;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACT,0BAA0B,MAAM,CAAC,gBAAgB,mCAAmC,CACpF,CAAC;IACF,KAAK,CAAC,IAAI,CACT,mGAAmG,CACnG,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;IACnG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,GACX,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,4EAA4E;QAC5E,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,sBAAsB,uCAAuC,CAAC;QACvF,KAAK,CAAC,IAAI,CACT,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,MAAM,KAAK,MAAM,EAAE,CACtG,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;IACF,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,CAAC,4BAA4B;QAC9B,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,oEAAoE,CAChG,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,MAAwB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACT,yBAAyB,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,WAAW,kBAAkB;QACjF,GAAG,MAAM,CAAC,aAAa,iCAAiC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CACjG,CAAC;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,KAAK,CAAC,IAAI,CACT,mBAAmB,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,qBAAqB;QACxE,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,cAAc,EAAE,0BAA0B;QAClF,0CAA0C,CAC3C,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CACT,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CACxG,CAAC;QACH,CAAC;IACF,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACT,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,qCAAqC,CAC5F,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,0BAA0B,CAAC,MAA8B;IACjE,MAAM,KAAK,GAAG;QACb,+BAA+B,MAAM,CAAC,QAAQ,GAAG;QACjD,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,YAAY;QAC5F,kBAAkB,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,CAAC,WAAW,mBAAmB,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,SAAS,GAAG;QAC/I,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,gBAAgB,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,SAAS,aAAa,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,GAAG;QACxI,mBAAmB,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,gBAAgB,SAAS;QAC/E,EAAE;KACF,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtG,CAAC;IACF,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,KAAkC;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,IAAoB,EAAE,OAAuB;QACjF,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAEhC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5D,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE;gBACjD,QAAQ;gBACR,SAAS;gBACT,OAAO,EAAE,MAAM,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;aACnD,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;;gBACtC,MAAM,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,IAAI,MAAM;gBAAE,cAAc,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO;QACR,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5D,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE;gBAC3C,QAAQ;gBACR,SAAS;gBACT,OAAO,EAAE,MAAM,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;aACnD,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;;gBACtC,MAAM,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,IAAI,MAAM;gBAAE,cAAc,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO;QACR,CAAC;QAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;QAExF,IAAI,IAAI,EAAE,CAAC;YACV,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACP,MAAM,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,IAAI,MAAM;YAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;CACD,CAAC"}

package/dist/cli/mcp/lifecycle/dev.mcp.restart.descriptor.d.ts

@@ -0,0 +1,22 @@
+/**
+ * MCP Restart CLI Command Descriptor
+ *
+ * Restarts the MCP server via the process manager.
+ */
+declare const _default: {
+    readonly id: "dev.mcp.restart";
+    readonly kind: "cli/command";
+    readonly name: "restart";
+    readonly description: "Restart the MCP server";
+    readonly group: "dev.mcp";
+    readonly order: 30;
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
+    readonly options: [{
+        readonly flags: "-w, --wait";
+        readonly description: "Wait for server to be ready";
+    }];
+};
+export default _default;
+//# sourceMappingURL=dev.mcp.restart.descriptor.d.ts.map

package/dist/cli/mcp/lifecycle/dev.mcp.restart.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.mcp.restart.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/mcp/lifecycle/dev.mcp.restart.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;;;;;;;AAIH,wBAWG"}

package/dist/cli/mcp/lifecycle/dev.mcp.restart.descriptor.js

@@ -0,0 +1,19 @@
+/**
+ * MCP Restart CLI Command Descriptor
+ *
+ * Restarts the MCP server via the process manager.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    id: 'dev.mcp.restart',
+    kind: 'cli/command',
+    name: 'restart',
+    description: 'Restart the MCP server',
+    group: 'dev.mcp',
+    order: 30,
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true,
+    options: [{ flags: '-w, --wait', description: 'Wait for server to be ready' }]
+});
+//# sourceMappingURL=dev.mcp.restart.descriptor.js.map

package/dist/cli/mcp/lifecycle/dev.mcp.restart.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.mcp.restart.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/mcp/lifecycle/dev.mcp.restart.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,wBAAwB;IACrC,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;CAC9E,CAAC,CAAC"}

package/dist/cli/mcp/lifecycle/dev.mcp.restart.impl.consumer.d.ts

@@ -0,0 +1,23 @@
+/**
+ * MCP Restart CLI Command Implementation
+ *
+ * Restarts the MCP server via the process manager.
+ * Self-healing: registers the config before restarting so a missing
+ * registry entry never blocks the restart path.
+ *
+ * The client-owned stdio process is a stable relay, not the runtime body. A
+ * managed-host restart deliberately leaves that relay alive: it reconnects,
+ * replays MCP initialization and the durable Vibes session binding, broadcasts
+ * the rebound, and asks the client to refresh tools. Requests interrupted by
+ * the restart receive an explicit retryable error instead of hanging.
+ *
+ * Relays from builds predating that contract cannot be upgraded in place. One
+ * reconnect after installing the repaired binary is still required for those
+ * already-running processes; every later managed-host restart is transparent.
+ */
+import type { CommandContext, CommandOptions } from '@vibesdotdev/cli';
+declare const _default: {
+    execute(_args: CommandOptions, _opts: CommandOptions, context: CommandContext): Promise<void>;
+};
+export default _default;
+//# sourceMappingURL=dev.mcp.restart.impl.consumer.d.ts.map

package/dist/cli/mcp/lifecycle/dev.mcp.restart.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.mcp.restart.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/cli/mcp/lifecycle/dev.mcp.restart.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;;mBAS9D,cAAc,SACd,cAAc,WACZ,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;;AALjB,wBA6BE"}

package/dist/cli/mcp/lifecycle/dev.mcp.restart.impl.consumer.js

@@ -0,0 +1,41 @@
+/**
+ * MCP Restart CLI Command Implementation
+ *
+ * Restarts the MCP server via the process manager.
+ * Self-healing: registers the config before restarting so a missing
+ * registry entry never blocks the restart path.
+ *
+ * The client-owned stdio process is a stable relay, not the runtime body. A
+ * managed-host restart deliberately leaves that relay alive: it reconnects,
+ * replays MCP initialization and the durable Vibes session binding, broadcasts
+ * the rebound, and asks the client to refresh tools. Requests interrupted by
+ * the restart receive an explicit retryable error instead of hanging.
+ *
+ * Relays from builds predating that contract cannot be upgraded in place. One
+ * reconnect after installing the repaired binary is still required for those
+ * already-running processes; every later managed-host restart is transparent.
+ */
+import { createMcpServerProcessConfig } from "../support/server-process.impl.consumer.js";
+import { printLine } from "../../print.js";
+export default {
+    async execute(_args, _opts, context) {
+        const { runtime } = context;
+        const pm = await runtime.context('pm/client');
+        // The managed host belongs to this invocation's bound workspace; an
+        // unbound host fails here with `workspace-unbound`.
+        const workspaceRoot = await runtime.context('runtime/workspace-path');
+        const config = await createMcpServerProcessConfig({ runtime, workspaceRoot });
+        const isRunning = await pm.isRunning(config.id);
+        if (isRunning) {
+            await pm.register(config);
+            await pm.restart(config.id);
+        }
+        else {
+            await pm.start(config);
+        }
+        await printLine(runtime, '✅ Managed MCP server restarted\n' +
+            '   Stable stdio relays will reconnect, restore session binding, and refresh tools.\n' +
+            '   A call interrupted by this restart is returned as retryable; run it again.');
+    }
+};
+//# sourceMappingURL=dev.mcp.restart.impl.consumer.js.map

package/dist/cli/mcp/lifecycle/dev.mcp.restart.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.mcp.restart.impl.consumer.js","sourceRoot":"","sources":["../../../../src/cli/mcp/lifecycle/dev.mcp.restart.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EACN,4BAA4B,EAC5B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,eAAe;IACd,KAAK,CAAC,OAAO,CACZ,KAAqB,EACrB,KAAqB,EACrB,OAAuB;QAEvB,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAC5B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAkB,WAAW,CAAC,CAAC;QAE/D,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,CAAS,wBAAwB,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QAE9E,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,SAAS,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACP,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,SAAS,CACd,OAAO,EACP,kCAAkC;YACjC,sFAAsF;YACtF,+EAA+E,CAChF,CAAC;IACH,CAAC;CACD,CAAC"}

package/dist/cli/mcp/lifecycle/dev.mcp.serve.descriptor.d.ts

@@ -0,0 +1,75 @@
+/**
+ * MCP Serve CLI Command Descriptor
+ *
+ * Runs the MCP server in stdio or HTTP mode.
+ */
+declare const _default: {
+    readonly id: "dev.mcp.serve";
+    readonly effects: {
+        readonly serve: {
+            readonly surface: "mcp";
+            readonly purpose: "mcp";
+            readonly admission: false;
+            readonly hotReload: true;
+            readonly deferActivationWhen: {
+                readonly whenOption: "mode";
+                readonly equals: "stdio";
+                readonly unlessOptions: ["isolated", "finite"];
+            };
+            readonly compositionWhen: {
+                readonly whenOption: "mode";
+                readonly equals: "stdio";
+                readonly unlessOptions: ["isolated", "finite"];
+            };
+        };
+    };
+    readonly kind: "cli/command";
+    readonly name: "serve";
+    readonly description: "Run MCP server (for Claude Code or PM spawned process)";
+    readonly group: "dev.mcp";
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
+    readonly logBuffer: {
+        readonly enabled: true;
+        readonly fallbackToStdout: true;
+    };
+    readonly options: [{
+        readonly flags: "--no-auth";
+        readonly description: "Disable authentication";
+    }, {
+        readonly flags: "--mode <mode>";
+        readonly description: "Transport mode: stdio or http";
+        readonly default: "stdio";
+    }, {
+        readonly flags: "--isolated";
+        readonly description: string;
+    }, {
+        readonly flags: "--port <port>";
+        readonly description: "HTTP server port (http mode only; default: derived from this workspace)";
+    }, {
+        readonly flags: "--preset <name>";
+        readonly description: "Tool catalog: minimal | presence | code | full (distinct from agent identity)";
+    }, {
+        readonly flags: "--tools <globs>";
+        readonly description: "Comma-separated allow-globs after the preset (e.g. workspace/*,*/read,druid.*)";
+    }, {
+        readonly flags: "--agent <slug>";
+        readonly description: "Presence/brain body slug (grok, claude, codex, marshal). Not a catalog name.";
+    }, {
+        readonly flags: "--agent-id <id>";
+        readonly description: "Registered system agent id when the slug is not enough";
+    }, {
+        readonly flags: "--harness <name>";
+        readonly description: "External host (claude, codex, grok, cursor, …) when the body lives in that harness";
+    }, {
+        readonly flags: "--client <id>";
+        readonly description: "Legacy: catalog name (full, presence) OR harness (claude, grok). Prefer --preset + --harness + --agent";
+    }, {
+        readonly flags: "--preload-knowledge-bases <slug|id,...>";
+        readonly description: "Comma-separated knowledge base slugs or IDs to preload";
+    }];
+    readonly nonTtyBehavior: "service";
+};
+export default _default;
+//# sourceMappingURL=dev.mcp.serve.descriptor.d.ts.map

package/dist/cli/mcp/lifecycle/dev.mcp.serve.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.mcp.serve.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/mcp/lifecycle/dev.mcp.serve.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIH,wBA+EG"}

package/dist/cli/mcp/lifecycle/dev.mcp.serve.descriptor.js

@@ -0,0 +1,84 @@
+/**
+ * MCP Serve CLI Command Descriptor
+ *
+ * Runs the MCP server in stdio or HTTP mode.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    id: 'dev.mcp.serve',
+    // Hosts invocations for many agents; the process itself acts for none.
+    effects: { serve: {
+            surface: 'mcp', purpose: 'mcp', admission: false, hotReload: true,
+            deferActivationWhen: { whenOption: 'mode', equals: 'stdio', unlessOptions: ['isolated', 'finite'] },
+            compositionWhen: { whenOption: 'mode', equals: 'stdio', unlessOptions: ['isolated', 'finite'] }
+        } },
+    kind: 'cli/command',
+    name: 'serve',
+    description: 'Run MCP server (for Claude Code or PM spawned process)',
+    group: 'dev.mcp',
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true,
+    logBuffer: {
+        enabled: true,
+        fallbackToStdout: true
+    },
+    options: [
+        {
+            flags: '--no-auth',
+            description: 'Disable authentication'
+        },
+        {
+            flags: '--mode <mode>',
+            description: 'Transport mode: stdio or http',
+            default: 'stdio'
+        },
+        {
+            // Opt-IN to the expensive path. stdio used to always boot its own
+            // runtime, which is how one workspace ended up with 10 of them and
+            // 51.3GB resident. The default now attaches to the workspace's shared
+            // host; this flag is for the cases that genuinely need their own.
+            flags: '--isolated',
+            description: 'Boot a private runtime (~6GB) instead of attaching to the shared host. ' +
+                'For debugging the runtime itself or running a build the host is not serving.'
+        },
+        {
+            // NO default here. A baked '3000' made every workspace on a machine ask
+            // for the same port and made "did the user ask for this port?"
+            // unanswerable. Absent the flag the port is derived from the workspace
+            // (cli/mcp/support/host-port.ts); an explicit --port always wins.
+            flags: '--port <port>',
+            description: 'HTTP server port (http mode only; default: derived from this workspace)'
+        },
+        {
+            flags: '--preset <name>',
+            description: 'Tool catalog: minimal | presence | code | full (distinct from agent identity)'
+        },
+        {
+            flags: '--tools <globs>',
+            description: 'Comma-separated allow-globs after the preset (e.g. workspace/*,*/read,druid.*)'
+        },
+        {
+            flags: '--agent <slug>',
+            description: 'Presence/brain body slug (grok, claude, codex, marshal). Not a catalog name.'
+        },
+        {
+            flags: '--agent-id <id>',
+            description: 'Registered system agent id when the slug is not enough'
+        },
+        {
+            flags: '--harness <name>',
+            description: 'External host (claude, codex, grok, cursor, …) when the body lives in that harness'
+        },
+        {
+            flags: '--client <id>',
+            description: 'Legacy: catalog name (full, presence) OR harness (claude, grok). Prefer --preset + --harness + --agent'
+        },
+        {
+            flags: '--preload-knowledge-bases <slug|id,...>',
+            description: 'Comma-separated knowledge base slugs or IDs to preload'
+        }
+    ],
+    nonTtyBehavior: 'service'
+});
+//# sourceMappingURL=dev.mcp.serve.descriptor.js.map

package/dist/cli/mcp/lifecycle/dev.mcp.serve.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.mcp.serve.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/mcp/lifecycle/dev.mcp.serve.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,eAAe;IACnB,uEAAuE;IACvE,OAAO,EAAE,EAAE,KAAK,EAAE;YACjB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;YACjE,mBAAmB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACnG,eAAe,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE;SAC/F,EAAE;IACH,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,wDAAwD;IACrE,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;IACb,SAAS,EAAE;QACV,OAAO,EAAE,IAAI;QACb,gBAAgB,EAAE,IAAI;KACtB;IACD,OAAO,EAAE;QACR;YACC,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,wBAAwB;SACrC;QACD;YACC,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,OAAO;SAChB;QACD;YACC,kEAAkE;YAClE,mEAAmE;YACnE,sEAAsE;YACtE,kEAAkE;YAClE,KAAK,EAAE,YAAY;YACnB,WAAW,EACV,yEAAyE;gBACzE,8EAA8E;SAC/E;QACD;YACC,wEAAwE;YACxE,+DAA+D;YAC/D,uEAAuE;YACvE,kEAAkE;YAClE,KAAK,EAAE,eAAe;YACtB,WAAW,EACV,yEAAyE;SAC1E;QACD;YACC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,+EAA+E;SAC5F;QACD;YACC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,gFAAgF;SAC7F;QACD;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,8EAA8E;SAC3F;QACD;YACC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,wDAAwD;SACrE;QACD;YACC,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,oFAAoF;SACjG;QACD;YACC,KAAK,EAAE,eAAe;YACtB,WAAW,EACV,wGAAwG;SACzG;QACD;YACC,KAAK,EAAE,yCAAyC;YAChD,WAAW,EAAE,wDAAwD;SACrE;KACD;IACD,cAAc,EAAE,SAAkB;CAClC,CAAC,CAAC"}

package/dist/cli/mcp/lifecycle/dev.mcp.start.descriptor.d.ts

@@ -0,0 +1,35 @@
+/**
+ * MCP Start CLI Command Descriptor
+ *
+ * Starts the MCP server via the process manager.
+ */
+declare const _default: {
+    readonly id: "dev.mcp.start";
+    readonly kind: "cli/command";
+    readonly name: "start";
+    readonly description: "Start the MCP server";
+    readonly group: "dev.mcp";
+    readonly order: 10;
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer", "cloud"];
+    readonly enabled: true;
+    readonly options: [{
+        readonly flags: "-p, --port <port>";
+        readonly description: "HTTP port (default: derived from this workspace)";
+    }, {
+        readonly flags: "-m, --mode <mode>";
+        readonly description: "Server mode: http or stdio";
+        readonly default: "http";
+    }, {
+        readonly flags: "--no-auth";
+        readonly description: "Disable authentication";
+    }, {
+        readonly flags: "-w, --wait";
+        readonly description: "Wait for server to be ready";
+    }, {
+        readonly flags: "--here";
+        readonly description: "Use current directory as workspace";
+    }];
+};
+export default _default;
+//# sourceMappingURL=dev.mcp.start.descriptor.d.ts.map

package/dist/cli/mcp/lifecycle/dev.mcp.start.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.mcp.start.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/mcp/lifecycle/dev.mcp.start.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIH,wBAoBG"}

package/dist/cli/mcp/lifecycle/dev.mcp.start.descriptor.js

@@ -0,0 +1,28 @@
+/**
+ * MCP Start CLI Command Descriptor
+ *
+ * Starts the MCP server via the process manager.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    id: 'dev.mcp.start',
+    kind: 'cli/command',
+    name: 'start',
+    description: 'Start the MCP server',
+    group: 'dev.mcp',
+    order: 10,
+    surfaces: ['cli'],
+    hardware: ['consumer', 'cloud'],
+    enabled: true,
+    options: [
+        {
+            flags: '-p, --port <port>',
+            description: 'HTTP port (default: derived from this workspace)'
+        },
+        { flags: '-m, --mode <mode>', description: 'Server mode: http or stdio', default: 'http' },
+        { flags: '--no-auth', description: 'Disable authentication' },
+        { flags: '-w, --wait', description: 'Wait for server to be ready' },
+        { flags: '--here', description: 'Use current directory as workspace' }
+    ]
+});
+//# sourceMappingURL=dev.mcp.start.descriptor.js.map

package/dist/cli/mcp/lifecycle/dev.mcp.start.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.mcp.start.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/mcp/lifecycle/dev.mcp.start.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,sBAAsB;IACnC,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,IAAI;IACb,OAAO,EAAE;QACR;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,kDAAkD;SAC/D;QACD,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,4BAA4B,EAAE,OAAO,EAAE,MAAM,EAAE;QAC1F,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,wBAAwB,EAAE;QAC7D,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,6BAA6B,EAAE;QACnE,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;KACtE;CACD,CAAC,CAAC"}