@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.1

package/dist/mcp.runtime.plugin.js

@@ -0,0 +1,40 @@
+/**
+ * MCP Runtime Plugin
+ *
+ * Registers MCP protocol runtime kinds and protocol documentation descriptors.
+ * The developer CLI surface (`dev mcp serve`, status, etc.) lives in
+ * `@vibesdotdev/mcp/mcp.plugin`.
+ */
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import { promptsManifestKind } from '@vibesdotdev/ai-schemas';
+import { mcpInstructionPromptDescriptors } from "./adapters/mcp/prompts/index.js";
+import clientPlugin from "./mcp-client.plugin.js";
+import { mcpSamplingKind } from "./kinds/sampling.kind.js";
+import { harnessIdentityKind } from "./kinds/harness-identity.kind.js";
+import { harnessIdentityDescriptors } from "./harness-identity.descriptors.js";
+// Docs
+import mcpDescriptor from "./docs/mcp.docs.descriptor.js";
+import mcpServerDescriptor from "./docs/server.docs.descriptor.js";
+import mcpToolsDescriptor from "./docs/tools.docs.descriptor.js";
+import mcpResourcesDescriptor from "./docs/resources.docs.descriptor.js";
+import mcpPromptsDescriptor from "./docs/prompts.docs.descriptor.js";
+import vibesContextDescriptor from "./tools/vibes-context/vibes-context.descriptor.js";
+import mcpConfigDescriptor from "./config/mcp.config.descriptor.js";
+// Hoisted const: tsc rewriteRelativeImportExtensions does not rewrite `.ts` specifiers inside `export default <expr>` (TS 6.0.3).
+const defaultExport = createRuntimePlugin({
+    id: 'mcp.runtime',
+    name: 'MCP Runtime',
+    description: 'Registers MCP protocol kinds and docs descriptors',
+    kinds: [mcpSamplingKind, promptsManifestKind, harnessIdentityKind],
+    async onActivate(runtime) {
+        if (!runtime.hasPlugin(clientPlugin.id))
+            await runtime.registerPlugin(clientPlugin);
+        await clientPlugin.onActivate?.(runtime);
+    },
+    descriptors: [mcpDescriptor, mcpServerDescriptor, mcpToolsDescriptor, mcpResourcesDescriptor, mcpPromptsDescriptor, vibesContextDescriptor, mcpConfigDescriptor, ...mcpInstructionPromptDescriptors, ...harnessIdentityDescriptors],
+    loaders: [
+        loader('vibes-context', 'cloud', () => import("./tools/vibes-context/vibes-context.impl.js"))
+    ]
+});
+export default defaultExport;
+//# sourceMappingURL=mcp.runtime.plugin.js.map

package/dist/mcp.runtime.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.runtime.plugin.js","sourceRoot":"","sources":["../src/mcp.runtime.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,YAAY,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAE/E,OAAO;AACP,OAAO,aAAa,MAAM,+BAA+B,CAAC;AAC1D,OAAO,mBAAmB,MAAM,kCAAkC,CAAC;AACnE,OAAO,kBAAkB,MAAM,iCAAiC,CAAC;AACjE,OAAO,sBAAsB,MAAM,qCAAqC,CAAC;AACzE,OAAO,oBAAoB,MAAM,mCAAmC,CAAC;AACrE,OAAO,sBAAsB,MAAM,mDAAmD,CAAC;AACvF,OAAO,mBAAmB,MAAM,mCAAmC,CAAC;AAEpE,kIAAkI;AAClI,MAAM,aAAa,GAAG,mBAAmB,CAAC;IACzC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,mDAAmD;IAEhE,KAAK,EAAE,CAAC,eAAe,EAAE,mBAAmB,EAAE,mBAAmB,CAAC;IAElE,KAAK,CAAC,UAAU,CAAC,OAAO;QACvB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAAE,MAAM,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACpF,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,WAAW,EAAE,CAAC,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,GAAG,+BAA+B,EAAE,GAAG,0BAA0B,CAAC;IAEnO,OAAO,EAAE;QACR,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC;KAC7F;CACD,CAAC,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/root-state.d.ts

@@ -0,0 +1,3 @@
+/** Compatibility reason for refusing a runtime not constructed by the kernel. */
+export declare const MCP_RUNTIME_UNIDENTIFIED_REASON = "mcp-runtime-unidentified";
+//# sourceMappingURL=root-state.d.ts.map

package/dist/root-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-state.d.ts","sourceRoot":"","sources":["../src/root-state.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,eAAO,MAAM,+BAA+B,6BAA6B,CAAC"}

package/dist/root-state.js

@@ -0,0 +1,3 @@
+/** Compatibility reason for refusing a runtime not constructed by the kernel. */
+export const MCP_RUNTIME_UNIDENTIFIED_REASON = 'mcp-runtime-unidentified';
+//# sourceMappingURL=root-state.js.map

package/dist/root-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-state.js","sourceRoot":"","sources":["../src/root-state.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC"}

package/dist/schemas/api-endpoint.d.ts

@@ -0,0 +1,12 @@
+import z from 'zod/v4';
+/** Status is observed data, never coerced from remote text. */
+export declare const ApiStatusSchema: z.ZodNumber;
+export type ApiStatus = z.infer<typeof ApiStatusSchema>;
+export declare const ToolInputSchema: z.ZodObject<{
+    type: z.ZodLiteral<"object">;
+    properties: z.ZodRecord<z.ZodString, z.ZodType<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject>>>;
+    required: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    additionalProperties: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ToolInput = z.infer<typeof ToolInputSchema>;
+//# sourceMappingURL=api-endpoint.d.ts.map

package/dist/schemas/api-endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-endpoint.d.ts","sourceRoot":"","sources":["../../src/schemas/api-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,QAAQ,CAAC;AAGvB,+DAA+D;AAC/D,eAAO,MAAM,eAAe,aAAqC,CAAC;AAClE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;;;iBAK1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/schemas/api-endpoint.js

@@ -0,0 +1,11 @@
+import z from 'zod/v4';
+import { JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+/** Status is observed data, never coerced from remote text. */
+export const ApiStatusSchema = z.number().int().min(100).max(599);
+export const ToolInputSchema = z.object({
+    type: z.literal('object'),
+    properties: z.record(z.string(), JsonObjectSchema),
+    required: z.array(z.string()).optional(),
+    additionalProperties: z.boolean().optional()
+});
+//# sourceMappingURL=api-endpoint.js.map

package/dist/schemas/api-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-endpoint.js","sourceRoot":"","sources":["../../src/schemas/api-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,QAAQ,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAGlE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC"}

package/dist/schemas/audit.d.ts

@@ -0,0 +1,172 @@
+import z from 'zod/v4';
+export declare const WirePartsSchema: z.ZodObject<{
+    inputSchema: z.ZodNumber;
+    outputSchema: z.ZodNumber;
+    description: z.ZodNumber;
+    envelope: z.ZodNumber;
+}, z.core.$strip>;
+export type WireParts = z.infer<typeof WirePartsSchema>;
+export declare const ServedToolSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    inputProperties: z.ZodArray<z.ZodString>;
+    wireBytes: z.ZodNumber;
+    parts: z.ZodObject<{
+        inputSchema: z.ZodNumber;
+        outputSchema: z.ZodNumber;
+        description: z.ZodNumber;
+        envelope: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ServedTool = z.infer<typeof ServedToolSchema>;
+export declare const JsonRpcMessageSchema: z.ZodObject<{
+    jsonrpc: z.ZodLiteral<"2.0">;
+    id: z.ZodOptional<z.ZodNumber>;
+    method: z.ZodOptional<z.ZodString>;
+    result: z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+    error: z.ZodOptional<z.ZodObject<{
+        code: z.ZodNumber;
+        message: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type JsonRpcMessage = z.infer<typeof JsonRpcMessageSchema>;
+export declare const RpcRejectionSchema: z.ZodObject<{
+    code: z.ZodNumber;
+}, z.core.$strip>;
+export declare const ToolAuditFindingSchema: z.ZodObject<{
+    severity: z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>;
+    code: z.ZodString;
+    toolId: z.ZodString;
+    detail: z.ZodString;
+}, z.core.$strip>;
+export type ToolAuditFinding = z.infer<typeof ToolAuditFindingSchema>;
+export declare const PresetExposureSchema: z.ZodObject<{
+    presetId: z.ZodString;
+    clientId: z.ZodOptional<z.ZodString>;
+    exposedCount: z.ZodNumber;
+    exposed: z.ZodArray<z.ZodString>;
+    limitedFrom: z.ZodOptional<z.ZodNumber>;
+    descriptionBudgetChars: z.ZodNumber;
+}, z.core.$strip>;
+export type PresetExposure = z.infer<typeof PresetExposureSchema>;
+export declare const ToolAuditReportSchema: z.ZodObject<{
+    view: z.ZodLiteral<"policy">;
+    ok: z.ZodBoolean;
+    generatedForPresets: z.ZodArray<z.ZodString>;
+    totalDescriptors: z.ZodNumber;
+    presets: z.ZodArray<z.ZodObject<{
+        presetId: z.ZodString;
+        clientId: z.ZodOptional<z.ZodString>;
+        exposedCount: z.ZodNumber;
+        exposed: z.ZodArray<z.ZodString>;
+        limitedFrom: z.ZodOptional<z.ZodNumber>;
+        descriptionBudgetChars: z.ZodNumber;
+    }, z.core.$strip>>;
+    findings: z.ZodArray<z.ZodObject<{
+        severity: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
+        code: z.ZodString;
+        toolId: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ToolAuditReport = z.infer<typeof ToolAuditReportSchema>;
+export declare const WireSelfieReportSchema: z.ZodObject<{
+    view: z.ZodLiteral<"wire">;
+    clientId: z.ZodString;
+    servedCount: z.ZodNumber;
+    expectedCount: z.ZodNumber;
+    captureMs: z.ZodNumber;
+    wireBytes: z.ZodNumber;
+    findings: z.ZodArray<z.ZodObject<{
+        severity: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>;
+        code: z.ZodString;
+        toolId: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strip>>;
+    ok: z.ZodBoolean;
+}, z.core.$strip>;
+export type WireSelfieReport = z.infer<typeof WireSelfieReportSchema>;
+/** Preserve unknown wire keys for byte accounting before projecting observation fields. */
+export declare const ListedToolSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    inputSchema: z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject>>>;
+}, z.core.$catchall<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>;
+export declare const ToolsListResultSchema: z.ZodObject<{
+    tools: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        inputSchema: z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject>>>;
+    }, z.core.$catchall<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>>;
+    nextCursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const ProjectionCanaryCaptureSchema: z.ZodObject<{
+    toolId: z.ZodString;
+    status: z.ZodEnum<{
+        failed: "failed";
+        passed: "passed";
+        "not-served": "not-served";
+    }>;
+    failureKind: z.ZodOptional<z.ZodEnum<{
+        schema: "schema";
+        projection: "projection";
+        transport: "transport";
+        implementation: "implementation";
+    }>>;
+    detail: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ProjectionCanaryCapture = z.infer<typeof ProjectionCanaryCaptureSchema>;
+export declare const WireSelfieCaptureSchema: z.ZodObject<{
+    clientId: z.ZodString;
+    served: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        inputProperties: z.ZodArray<z.ZodString>;
+        wireBytes: z.ZodNumber;
+        parts: z.ZodObject<{
+            inputSchema: z.ZodNumber;
+            outputSchema: z.ZodNumber;
+            description: z.ZodNumber;
+            envelope: z.ZodNumber;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    captureMs: z.ZodNumber;
+    wireBytes: z.ZodNumber;
+    birth: z.ZodOptional<z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        provenance: z.ZodNullable<z.ZodString>;
+        catalogHash: z.ZodString;
+        selectedToolIds: z.ZodArray<z.ZodString>;
+        registeredToolIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    birthError: z.ZodOptional<z.ZodString>;
+    canary: z.ZodOptional<z.ZodObject<{
+        toolId: z.ZodString;
+        status: z.ZodEnum<{
+            failed: "failed";
+            passed: "passed";
+            "not-served": "not-served";
+        }>;
+        failureKind: z.ZodOptional<z.ZodEnum<{
+            schema: "schema";
+            projection: "projection";
+            transport: "transport";
+            implementation: "implementation";
+        }>>;
+        detail: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type WireSelfieCapture = z.infer<typeof WireSelfieCaptureSchema>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/schemas/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/schemas/audit.ts"],"names":[],"mappings":"AACA,OAAO,CAAC,MAAM,QAAQ,CAAC;AAGvB,eAAO,MAAM,eAAe;;;;;iBAK1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,gBAAgB;;;;;;;;;;;iBAM3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,oBAAoB;;;;;;;;;iBAM/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,eAAO,MAAM,kBAAkB;;iBAAiC,CAAC;AAEjE,eAAO,MAAM,sBAAsB;;;;;;;;;iBAKjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;iBAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;iBAOhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;iBASjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB;;;;qQAID,CAAC;AAC7B,eAAO,MAAM,qBAAqB;;;;;;;iBAGhC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;iBAKxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/schemas/audit.js

@@ -0,0 +1,82 @@
+import { ProjectionBirthMetadataSchema } from "./projection.js";
+import z from 'zod/v4';
+import { JsonObjectSchema, JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+export const WirePartsSchema = z.object({
+    inputSchema: z.number().nonnegative(),
+    outputSchema: z.number().nonnegative(),
+    description: z.number().nonnegative(),
+    envelope: z.number().nonnegative()
+});
+export const ServedToolSchema = z.object({
+    name: z.string(),
+    description: z.string().optional(),
+    inputProperties: z.array(z.string()),
+    wireBytes: z.number().nonnegative(),
+    parts: WirePartsSchema
+});
+export const JsonRpcMessageSchema = z.object({
+    jsonrpc: z.literal('2.0'),
+    id: z.number().optional(),
+    method: z.string().optional(),
+    result: JsonValueSchema.optional(),
+    error: z.object({ code: z.number(), message: z.string() }).optional()
+});
+export const RpcRejectionSchema = z.object({ code: z.number() });
+export const ToolAuditFindingSchema = z.object({
+    severity: z.enum(['high', 'medium', 'low']),
+    code: z.string(),
+    toolId: z.string(),
+    detail: z.string()
+});
+export const PresetExposureSchema = z.object({
+    presetId: z.string(),
+    clientId: z.string().optional(),
+    exposedCount: z.number(),
+    exposed: z.array(z.string()),
+    limitedFrom: z.number().optional(),
+    descriptionBudgetChars: z.number()
+});
+export const ToolAuditReportSchema = z.object({
+    view: z.literal('policy'),
+    ok: z.boolean(),
+    generatedForPresets: z.array(z.string()),
+    totalDescriptors: z.number(),
+    presets: z.array(PresetExposureSchema),
+    findings: z.array(ToolAuditFindingSchema)
+});
+export const WireSelfieReportSchema = z.object({
+    view: z.literal('wire'),
+    clientId: z.string(),
+    servedCount: z.number(),
+    expectedCount: z.number(),
+    captureMs: z.number(),
+    wireBytes: z.number(),
+    findings: z.array(ToolAuditFindingSchema),
+    ok: z.boolean()
+});
+/** Preserve unknown wire keys for byte accounting before projecting observation fields. */
+export const ListedToolSchema = z.object({
+    name: z.string(),
+    description: z.string().optional(),
+    inputSchema: JsonObjectSchema.optional()
+}).catchall(JsonValueSchema);
+export const ToolsListResultSchema = z.object({
+    tools: z.array(ListedToolSchema),
+    nextCursor: z.string().optional()
+});
+export const ProjectionCanaryCaptureSchema = z.object({
+    toolId: z.string(),
+    status: z.enum(['passed', 'not-served', 'failed']),
+    failureKind: z.enum(['schema', 'transport', 'projection', 'implementation']).optional(),
+    detail: z.string().optional()
+});
+export const WireSelfieCaptureSchema = z.object({
+    clientId: z.string(),
+    served: z.array(ServedToolSchema),
+    captureMs: z.number(),
+    wireBytes: z.number(),
+    birth: ProjectionBirthMetadataSchema.optional(),
+    birthError: z.string().optional(),
+    canary: ProjectionCanaryCaptureSchema.optional()
+});
+//# sourceMappingURL=audit.js.map

package/dist/schemas/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/schemas/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,CAAC,MAAM,QAAQ,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAErF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACnC,KAAK,EAAE,eAAe;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CACzC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;CACf,CAAC,CAAC;AAGH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AAC7B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC"}

package/dist/schemas/harness-identity.d.ts

@@ -0,0 +1,41 @@
+/**
+ * `mcp/harness-identity` descriptor schema.
+ *
+ * One descriptor names one harness that can launch an MCP client: its
+ * canonical id, the aliases it is known by (`claude-code`), the MCP
+ * `clientInfo` names it presents under (`Claude Desktop`), and how the
+ * connection's harness session id is derived. A user's plugin registers
+ * another descriptor of this kind to add a harness or an alias without
+ * editing this package.
+ */
+import * as z from 'zod/v4';
+export declare const HarnessIdentityDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"mcp/harness-identity">;
+    aliases: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    clientNames: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    sessionId: z.ZodOptional<z.ZodObject<{
+        source: z.ZodString;
+    }, z.core.$loose>>;
+}, z.core.$catchall<z.ZodUnknown>>;
+export type HarnessIdentityDescriptor = z.infer<typeof HarnessIdentityDescriptorSchema>;
+//# sourceMappingURL=harness-identity.d.ts.map

package/dist/schemas/harness-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-identity.d.ts","sourceRoot":"","sources":["../../src/schemas/harness-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAKpB,CAAC;AAEzB,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}

package/dist/schemas/harness-identity.js

@@ -0,0 +1,19 @@
+/**
+ * `mcp/harness-identity` descriptor schema.
+ *
+ * One descriptor names one harness that can launch an MCP client: its
+ * canonical id, the aliases it is known by (`claude-code`), the MCP
+ * `clientInfo` names it presents under (`Claude Desktop`), and how the
+ * connection's harness session id is derived. A user's plugin registers
+ * another descriptor of this kind to add a harness or an alias without
+ * editing this package.
+ */
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+export const HarnessIdentityDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('mcp/harness-identity'),
+    aliases: z.array(z.string().min(1)).default([]),
+    clientNames: z.array(z.string().min(1)).default([]),
+    sessionId: z.looseObject({ source: z.string().min(1) }).optional()
+}).catchall(z.unknown());
+//# sourceMappingURL=harness-identity.js.map

package/dist/schemas/harness-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-identity.js","sourceRoot":"","sources":["../../src/schemas/harness-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC"}

package/dist/schemas/host-adapters.d.ts

@@ -0,0 +1,14 @@
+import * as z from 'zod/v4';
+import type { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import type { createMcpAdapter } from '../adapters/mcp/server.consumer.ts';
+/** The consumer composition supplies implementations; the root imports only this contract. */
+export declare const McpHostAdaptersSchema: z.ZodObject<{
+    createStdioTransport: z.ZodCustom<(_stdin?: import("node:stream").Readable | undefined, _stdout?: import("node:stream").Writable | undefined, options?: {
+        maxBufferSize?: number;
+    } | undefined) => StdioServerTransport, (_stdin?: import("node:stream").Readable | undefined, _stdout?: import("node:stream").Writable | undefined, options?: {
+        maxBufferSize?: number;
+    } | undefined) => StdioServerTransport>;
+    createMcpAdapter: z.ZodCustom<typeof createMcpAdapter, typeof createMcpAdapter>;
+}, z.core.$strip>;
+export type McpHostAdapters = z.infer<typeof McpHostAdaptersSchema>;
+//# sourceMappingURL=host-adapters.d.ts.map

package/dist/schemas/host-adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-adapters.d.ts","sourceRoot":"","sources":["../../src/schemas/host-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,8FAA8F;AAC9F,eAAO,MAAM,qBAAqB;;;sBAC+D,oBAAoB;;sBAApB,oBAAoB;;iBAEnH,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/schemas/host-adapters.js

@@ -0,0 +1,7 @@
+import * as z from 'zod/v4';
+/** The consumer composition supplies implementations; the root imports only this contract. */
+export const McpHostAdaptersSchema = z.object({
+    createStdioTransport: z.custom(value => z.function().safeParse(value).success),
+    createMcpAdapter: z.custom(value => z.function().safeParse(value).success)
+});
+//# sourceMappingURL=host-adapters.js.map

package/dist/schemas/host-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-adapters.js","sourceRoot":"","sources":["../../src/schemas/host-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAwF,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;IACrK,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAA0B,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;CACnG,CAAC,CAAC"}

package/dist/schemas/projection.d.ts

@@ -0,0 +1,10 @@
+import z from 'zod/v4';
+export declare const ProjectionBirthMetadataSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    provenance: z.ZodNullable<z.ZodString>;
+    catalogHash: z.ZodString;
+    selectedToolIds: z.ZodArray<z.ZodString>;
+    registeredToolIds: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type ProjectionBirthMetadata = z.infer<typeof ProjectionBirthMetadataSchema>;
+//# sourceMappingURL=projection.d.ts.map

package/dist/schemas/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../../src/schemas/projection.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,QAAQ,CAAC;AAEvB,eAAO,MAAM,6BAA6B;;;;;;iBAMxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC"}

package/dist/schemas/projection.js

@@ -0,0 +1,9 @@
+import z from 'zod/v4';
+export const ProjectionBirthMetadataSchema = z.object({
+    version: z.literal(1),
+    provenance: z.string().nullable(),
+    catalogHash: z.string(),
+    selectedToolIds: z.array(z.string()),
+    registeredToolIds: z.array(z.string())
+});
+//# sourceMappingURL=projection.js.map

package/dist/schemas/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/schemas/projection.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,QAAQ,CAAC;AAEvB,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACtC,CAAC,CAAC"}

package/dist/schemas/tool.d.ts

@@ -0,0 +1,8 @@
+/**
+ * MCP Tool Schema Definitions (deprecated barrel)
+ *
+ * @deprecated These types have moved to @vibesdotdev/mcp/adapters/mcp
+ * Re-exported here for backwards compatibility.
+ */
+export { type McpInputSchema, type McpToolHandler, type McpResponseFormatter, defaultFormatter, tableFormatter, listFormatter } from '../adapters/mcp/index.ts';
+//# sourceMappingURL=tool.d.ts.map

package/dist/schemas/tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../src/schemas/tool.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,0BAA0B,CAAC"}

package/dist/schemas/tool.js

@@ -0,0 +1,8 @@
+/**
+ * MCP Tool Schema Definitions (deprecated barrel)
+ *
+ * @deprecated These types have moved to @vibesdotdev/mcp/adapters/mcp
+ * Re-exported here for backwards compatibility.
+ */
+export { defaultFormatter, tableFormatter, listFormatter } from "../adapters/mcp/index.js";
+//# sourceMappingURL=tool.js.map

package/dist/schemas/tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../src/schemas/tool.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAIN,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,0BAA0B,CAAC"}

package/dist/surface-mcp/build-provenance.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Build provenance: capture the source git ref + dist freshness at serve
+ * startup so a stale body is wire-detectable. The fan-out phantom saga's
+ * root cause was invisible staleness — a long-lived stdio child spawned from
+ * source at one ref, source moved under it (87→104 registry), and nothing
+ * on the wire said the body was behind. This string rides the MCP
+ * `instructions` field so the connected agent can see and surface it.
+ *
+ * Filesystem and path reads go through the handed runtime. This module does
+ * not import `node:fs`, `node:path`, or `node:url`.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/**
+ * What provenance reads from the runtime it was handed: its execution provider
+ * (git probes), its composed host environment, and its own env channel (the
+ * baked `VIBES_SOURCE_SHA` / `VIBES_SOURCE_DIRTY` an entrypoint republishes).
+ */
+export type ProvenanceRuntime = RuntimeRef;
+export interface BuildProvenance {
+    sourceRoot: string;
+    sourceGitRef: string | null;
+    sourceRefKind: 'git-checkout' | 'package-gitHead' | 'baked-source-sha' | 'unknown';
+    sourceDirty: boolean | null;
+    workspaceRoot: string;
+    /**
+     * The USER PROJECT's ref. Diagnostic only — it is a DIFFERENT repository
+     * from the one that owns this body's code, so it can neither confirm nor
+     * deny freshness. WU-11 deleted the `sourceWorkspaceDiverged` heuristic
+     * that compared the two: under a thin host `sourceRoot` is a package under
+     * `node_modules` and `workspaceRoot` is whatever project the agent opened,
+     * so the two refs disagree by construction and the "DIVERGENCE" line fired
+     * on every healthy body. Real staleness is the graph nerve
+     * (`runtime-environment-bun/services/graph-freshness`, plan §7): the
+     * lockfile under R, which is the thing this body's modules actually came
+     * from.
+     */
+    workspaceGitRef: string | null;
+    executableDistPath: string | null;
+    commitTime: string | null;
+    distStale: boolean | null;
+    provenanceString: string;
+}
+export interface BuildProvenanceInput {
+    /** Filesystem root that owns the executable MCP module graph. */
+    sourceRoot: string;
+    /** Baked source ref for packaged execution; undefined probes sourceRoot Git. */
+    sourceGitRef?: string | null;
+    sourceRefKind?: 'git-checkout' | 'package-gitHead' | 'baked-source-sha' | 'unknown';
+    /** Whether the executable was built from bytes not fully named by sourceGitRef. */
+    sourceDirty?: boolean | null;
+    /** User project targeted by workspace/session/storage tools. */
+    workspaceRoot: string;
+    /** Actual dist directory containing the executable module, when applicable. */
+    executableDistPath?: string | null;
+    executionKind?: 'source' | 'dist' | 'unknown';
+}
+/** Compose provenance for the MCP body that owns this module graph. */
+export declare function getMcpBuildProvenance(runtime: ProvenanceRuntime, workspaceRoot: string, executableModulePath?: string): Promise<BuildProvenance>;
+/**
+ * Compute build provenance for the MCP serve instructions.
+ *
+ * sourceRoot and workspaceRoot are intentionally separate. A client commonly
+ * executes MCP from a pinned source checkout while VIBES_WORKSPACE_PATH points
+ * at the user's active project.
+ */
+export declare function getBuildProvenance(runtime: ProvenanceRuntime, input: BuildProvenanceInput): Promise<BuildProvenance>;
+//# sourceMappingURL=build-provenance.d.ts.map

package/dist/surface-mcp/build-provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-provenance.d.ts","sourceRoot":"","sources":["../../src/surface-mcp/build-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAA4C,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIhG;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAM3C,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,cAAc,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,SAAS,CAAC;IACnF,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;OAWG;IACH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACpC,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,cAAc,GAAG,iBAAiB,GAAG,kBAAkB,GAAG,SAAS,CAAC;IACpF,mFAAmF;IACnF,WAAW,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;CAC9C;AAiED,uEAAuE;AACvE,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,iBAAiB,EAC1B,aAAa,EAAE,MAAM,EACrB,oBAAoB,CAAC,EAAE,MAAM,GAC3B,OAAO,CAAC,eAAe,CAAC,CAqD1B;AA2DD;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAqH1H"}