@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.1

package/dist/adapters/mcp/from-api-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"from-api-endpoint.js","sourceRoot":"","sources":["../../../src/adapters/mcp/from-api-endpoint.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,eAAe,EAAkB,MAAM,+BAA+B,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAA4B,MAAM,qBAAqB,CAAC;AAC3I,OAAO,EAAE,gBAAgB,EAAmC,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACtH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAErE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,qBAAqB,EAA4C,MAAM,6BAA6B,CAAC;AAM7I,SAAS,iBAAiB,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;AAC/D,CAAC;AAED,qDAAqD;AACrD,SAAS,uBAAuB,CAAC,MAAc;IAC9C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC7D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,aAAa,CAAC;IACxC,OAAO,UAAU,CAAC;AACnB,CAAC;AA+CD,SAAS,UAAU,CAAC,KAAiB;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,0BAA0B,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CACtB,KAA+C;IAE/C,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CACtB,IAAqE;IAErE,OAAO,OAAO,IAAI,KAAK,UAAU,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAqD;IAC9E,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,KAAiC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAc;QACzB,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;KACtE,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACrD,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS;QAAE,MAAM,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACvG,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC9B,MAAwC;IAExC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAElF,OAAO;QACN,UAAU,EAAE;YACX,IAAI;YACJ,WAAW;YACX,WAAW,EAAE,eAAe,CAAC,KAAK,CAAC;YACnC,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;SACjE;QACD,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAA0B,EAAE;YACxD,IAAI,SAAiC,CAAC;YACtC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7C,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;oBACtB,MAAM,IAAI,YAAY,CAAC,+BAA+B,EAAE,IAAI,EAAE;wBAC7D,IAAI,EAAE,eAAe;wBACrB,MAAM,EAAE,sBAAsB;wBAC9B,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;qBACpD,CAAC,CAAC;gBACJ,CAAC;gBACD,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;YAChC,CAAC;YACD,uBAAuB;YACvB,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAI,YAAY,CAAC,SAAS,IAAI,2BAA2B,CAAC,CAAC;YAClE,CAAC;YAED,gCAAgC;YAChC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAClB,MAAM,IAAI,YAAY,CACrB,6EAA6E,EAC7E,IAAI,CACJ,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;YAExB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;gBACzC,IAAI,aAAa,GAAc,IAAI,CAAC;gBACpC,IAAI,SAAS,EAAE,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBAClB,MAAM,IAAI,YAAY,CAAC,iCAAiC,EAAE,IAAI,EAAE;4BAC/D,IAAI,EAAE,eAAe;4BACrB,MAAM,EAAE,sBAAsB;4BAC9B,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;yBAChD,CAAC,CAAC;oBACJ,CAAC;oBACD,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC;gBAChC,CAAC;gBAED,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAEhF,MAAM,cAAc,GAA+D;oBAClF,MAAM;oBACN,KAAK,EAAE,EAAE;oBACT,MAAM,EAAE,EAAE;oBACV,OAAO,EAAE,EAAE;iBACX,CAAC;gBAEF,IAAI,SAAS,EAAE,OAAO,EAAE,CAAC;oBACxB,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;oBAE9D,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;wBACvB,MAAM,KAAK,GAAG,cAAc,CAAa,WAAW,CAAC,KAAK,CAAC;4BAC1D,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,CAAC;4BAClC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC;wBACrB,cAAc,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;oBAC1C,CAAC;oBAED,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;wBACxB,MAAM,MAAM,GAAG,cAAc,CAAa,WAAW,CAAC,MAAM,CAAC;4BAC5D,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC;4BACnC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;wBACtB,cAAc,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC7C,CAAC;oBAED,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBACpC,MAAM,IAAI,GAAG,cAAc,CAAc,WAAW,CAAC,IAAI,CAAC;4BACzD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC;4BACjC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;wBACpB,cAAc,CAAC,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;oBACnD,CAAC;oBAED,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;wBACzB,cAAc,CAAC,OAAO,GAAG,cAAc,CAAyB,WAAW,CAAC,OAAO,CAAC;4BACnF,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC;4BACpC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;oBACxB,CAAC;gBACF,CAAC;qBAAM,IAAI,SAAS,EAAE,CAAC;oBACtB,cAAc,CAAC,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACP,cAAc,CAAC,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBACnD,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAY,YAAY,EAAE,cAAc,CAAC,CAAC;gBAC5E,MAAM,SAAS,GAAG,SAAS,EAAE,QAAQ,IAAI,gBAAgB,CAAC;gBAC1D,OAAO,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;YACH,IAAI,SAAS,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC,KAAK,CAAC;YAEzC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC;YAChC,IAAI,OAAO,YAAY,YAAY,IAAI,OAAO,YAAY,YAAY;gBAAE,MAAM,OAAO,CAAC;YACtF,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;gBAC1E,MAAM,IAAI,YAAY,CAAC,iCAAiC,EAAE,IAAI,EAAE;oBAC/D,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM;iBACpE,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,uBAAuB,IAAI,MAAM,CAAC,MAAM,KAAK,wBAAwB,IAAI,MAAM,CAAC,MAAM,KAAK,sBAAsB,CAAC,EAAE,CAAC;gBACxK,MAAM,IAAI,YAAY,CAAC,4BAA4B,EAAE,IAAI,EAAE;oBAC1D,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM;iBAC3D,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,YAAY,CAAC,uCAAuC,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE;oBACnF,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC1C,MAAM,EAAE,iBAAiB;oBACzB,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;oBAChC,KAAK,EAAE,OAAO;iBACd,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACtG,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/adapters/mcp/generation-contract.d.ts

@@ -0,0 +1,5 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel/api/runtime';
+/** Clients can revalidate old results against their newest cached schemas.
+ * Compatible catalogs refresh live; incompatible existing contracts need maintenance. */
+export declare function validateMcpGeneration(candidate: VibesRuntime, previous: VibesRuntime): void;
+//# sourceMappingURL=generation-contract.d.ts.map

package/dist/adapters/mcp/generation-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-contract.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/generation-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AASpE;yFACyF;AACzF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAqB3F"}

package/dist/adapters/mcp/generation-contract.js

@@ -0,0 +1,34 @@
+import { RuntimeJsonSchemaSourceSchema, toRuntimeJsonSchema } from '@vibesdotdev/kernel/schemas/json-schema';
+function isToolAsset(descriptor) {
+    return descriptor.kind === 'tools/tool' && 'schemas' in descriptor;
+}
+/** Clients can revalidate old results against their newest cached schemas.
+ * Compatible catalogs refresh live; incompatible existing contracts need maintenance. */
+export function validateMcpGeneration(candidate, previous) {
+    // Resources/prompts have distinct capability negotiation. Tool catalogs and
+    // schemas refresh in place; a change to these other surfaces needs their
+    // transport contract to be prepared too.
+    const definitions = (runtime) => JSON.stringify(runtime.hasKind('tools/tool')
+        ? runtime.query('tools/tool').enabled().descriptors().filter(isToolAsset)
+            .filter((descriptor) => descriptor.mcp).map((descriptor) => ({ id: descriptor.id, mcp: descriptor.mcp })).sort((a, b) => a.id.localeCompare(b.id)) : []);
+    if (definitions(candidate) !== definitions(previous))
+        throw new Error('MCP resource/prompt contract changed; maintenance required');
+    const schemaContract = (descriptor) => JSON.stringify({
+        input: descriptor.schemas?.input ? toRuntimeJsonSchema(RuntimeJsonSchemaSourceSchema.parse(descriptor.schemas.input), { unrepresentable: 'any' }) : null,
+        output: descriptor.schemas?.output ? toRuntimeJsonSchema(RuntimeJsonSchemaSourceSchema.parse(descriptor.schemas.output), { unrepresentable: 'any' }) : null
+    });
+    if (!candidate.hasKind('tools/tool'))
+        return;
+    for (const descriptor of candidate.query('tools/tool').enabled().descriptors().filter(isToolAsset)) {
+        const previousDescriptor = previous.hasKind('tools/tool') ? previous.assets('tools/tool').descriptor(descriptor.id) : undefined;
+        const before = previousDescriptor !== undefined && isToolAsset(previousDescriptor) ? previousDescriptor : undefined;
+        if (before && schemaContract(before) !== schemaContract(descriptor))
+            throw new Error(`MCP wire schema changed for '${descriptor.id}'; maintenance required`);
+        if (!descriptor.schemas?.input)
+            throw new Error(`MCP tool '${descriptor.id}' has no input schema`);
+        toRuntimeJsonSchema(RuntimeJsonSchemaSourceSchema.parse(descriptor.schemas.input), { unrepresentable: 'any' });
+        if (descriptor.schemas.output)
+            toRuntimeJsonSchema(RuntimeJsonSchemaSourceSchema.parse(descriptor.schemas.output), { unrepresentable: 'any' });
+    }
+}
+//# sourceMappingURL=generation-contract.js.map

package/dist/adapters/mcp/generation-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generation-contract.js","sourceRoot":"","sources":["../../../src/adapters/mcp/generation-contract.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAG7G,SAAS,WAAW,CAAC,UAA6B;IACjD,OAAO,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,IAAI,UAAU,CAAC;AACpE,CAAC;AAED;yFACyF;AACzF,MAAM,UAAU,qBAAqB,CAAC,SAAuB,EAAE,QAAsB;IACpF,4EAA4E;IAC5E,yEAAyE;IACzE,yCAAyC;IACzC,MAAM,WAAW,GAAG,CAAC,OAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;QAC1F,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;aACvE,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3J,IAAI,WAAW,CAAC,SAAS,CAAC,KAAK,WAAW,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACpI,MAAM,cAAc,GAAG,CAAC,UAA+B,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1E,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,6BAA6B,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QACxJ,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,6BAA6B,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;KAC3J,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO;IAC7C,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACpG,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChI,MAAM,MAAM,GAAG,kBAAkB,KAAK,SAAS,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;QACpH,IAAI,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC7J,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,UAAU,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACnG,mBAAmB,CAAC,6BAA6B,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/G,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM;YAAE,mBAAmB,CAAC,6BAA6B,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;IAChJ,CAAC;AACF,CAAC"}

package/dist/adapters/mcp/host-registry.d.ts

@@ -0,0 +1,159 @@
+/**
+ * Where the shared MCP host for a workspace advertises itself.
+ *
+ * WHY A REGISTRY AND NOT A PORT PROBE. The relay has to answer "is there a host
+ * I may attach to?" and the honest form of that question includes "…serving THIS
+ * workspace?". Probing a well-known port answers neither: port 3000 is the most
+ * contended port on a developer machine, and something answering there is not
+ * evidence it is a vibes MCP host, let alone one rooted at the same workspace.
+ * Attaching to the wrong host would hand an agent another workspace's tools and
+ * another workspace's session state, and the symptom would surface far from the
+ * cause.
+ *
+ * So the host writes a claim, and the relay verifies every part of it before
+ * trusting it: the process is alive AND is the process that wrote the claim, it
+ * is rooted at the same workspace, and it answers. A stale claim (host killed,
+ * machine rebooted, pid recycled) fails verification and is treated as "no
+ * host" — never as a reason to fail.
+ *
+ * ONE HOST PER WORKSPACE, not per machine. The runtime daemons are already
+ * per-workspace and that is correct: a workspace is the unit that owns a
+ * `.vibes` state directory, so two workspaces cannot share one runtime without
+ * sharing their sessions. Keying this registry by workspace root keeps the
+ * relay consistent with that.
+ *
+ * SUPERSEDED 2026-10-26 by ADR-0020 (developer root
+ * `docs/decisions/ADR-0020-one-global-daemon-set-session-threads.md`): one MCP
+ * host per machine forwards every call to the one runtime daemon, where each
+ * session is its own thread. Two workspaces share the process, not a runtime.
+ * This per-workspace registry stays until the plan's Phase 5 replaces it; do
+ * not extend it.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { LoggerImplementation } from '@vibesdotdev/logging';
+import { workspaceKey } from '@vibesdotdev/paths/workspace-mcp-host';
+import type { PathRoots } from '@vibesdotdev/paths';
+/** The roots a host claim lives under: the caller's runtime `vibesHome`. */
+export type HostClaimRoots = Pick<PathRoots, 'vibesHome'>;
+/** The runtime a claim is read or written through: its selected filesystem adapter. */
+export type HostClaimRuntime = RuntimeRef;
+export interface McpHostClaim {
+    /** Process id of the host, used for liveness. */
+    pid: number;
+    /** Port the host's HTTP transport listens on. */
+    port: number;
+    /** Absolute workspace root the host is serving. */
+    workspaceRoot: string;
+    /** ISO timestamp, for diagnostics and staleness reporting. */
+    startedAt: string;
+    /**
+     * The catalog this host is actually serving.
+     *
+     * A host resolves its tool catalog ONCE at boot (`selectMcpTools`, called
+     * from `buildServer`) and bakes it into a single McpServer. So a client that
+     * wanted a different catalog cannot be served correctly by this host — it
+     * would silently receive whatever the host booted with. Not a crash: an agent
+     * quietly holding the wrong tools, which is harder to notice and worse.
+     *
+     * Advertising it lets the relay refuse a mismatch instead of papering over
+     * it. Undefined means the host did not say, which is treated as "cannot
+     * prove a match" — refuse rather than guess.
+     */
+    presetId?: string;
+    /** Exact Tools-owned policy the host used when baking its catalog. */
+    presetPolicyKey?: string;
+    /** Existing preset attach identity, computed from this host's actual selected policy. */
+    catalogAttachKey?: string;
+    /** Harness/client id the host resolved its catalog for. */
+    clientId?: string;
+}
+/**
+ * Stable, filesystem-safe key for a workspace root.
+ *
+ * Re-exported, not defined here. Pure identity and portable hashing live in
+ * `@vibesdotdev/paths`, because
+ * `@vibesdotdev/tools` must compute the same key to find this claim, and `mcp`
+ * already depends on `tools` (so `tools` can never depend on `mcp`). One hash,
+ * one notion of "which workspace is this", so the claim file, the derived port,
+ * and every reader of both can never disagree.
+ */
+export { workspaceKey };
+/**
+ * The claim path for `workspaceRoot` under the selected `vibesHome` of the
+ * runtime the caller was handed (`getPathRoots(runtime)`, D40); never the
+ * process's home and never a literal `.vibes`.
+ */
+export declare function hostRegistryPath(workspaceRoot: string, roots: HostClaimRoots): string;
+/**
+ * The relay attestation claim for `workspaceRoot` under the runtime's roots, beside its host
+ * claim (RC08 U7). The host writes a fresh secret there each start through
+ * runtime-rpc's local-attestation primitive; a same-user relay reads it and
+ * presents it as its bearer. The host claim itself carries no secret.
+ */
+export declare function mcpRelayAttestationPath(workspaceRoot: string, roots: HostClaimRoots): string;
+/**
+ * Advertise this process as the shared host for `workspaceRoot`, through the
+ * runtime's filesystem: an owner-private write the adapter renames into place,
+ * so a reader never sees half a claim and no other user can read it.
+ */
+export declare function writeHostClaim(runtime: HostClaimRuntime, claim: McpHostClaim, roots: HostClaimRoots): Promise<void>;
+/**
+ * Remove this workspace's claim. Safe to call when none exists.
+ *
+ * With `owner`, only the process that wrote the claim may withdraw it.
+ * Measured 2026-09-06: an orphaned http body from a retired worktree shared
+ * the developer root with the live managed host; on SIGTERM its shutdown
+ * cleared the root's claim unconditionally, and every relay started after
+ * that got "no shared host has advertised a claim" while the real host kept
+ * serving. Returns true when a file was removed.
+ */
+export declare function clearHostClaim(runtime: HostClaimRuntime, workspaceRoot: string, roots: HostClaimRoots, 
+/** The withdrawing owner, and its logger from its handed runtime for a torn claim file. */
+owner?: {
+    pid: number;
+    logger: Pick<LoggerImplementation, 'debug'>;
+}): Promise<boolean>;
+/**
+ * How a claim's pid is checked against the host's process table: through the
+ * runtime's process service (liveness) and host identity (start time).
+ */
+export interface HostProcessProbe {
+    /** Whether `pid` is a running process. */
+    isRunning: (pid: number) => Promise<boolean>;
+    /**
+     * Wall-clock start of `pid` in epoch ms, or null when the process table no
+     * longer lists it. Throws typed when the table cannot be read: an
+     * unanswered probe is not a liveness verdict.
+     */
+    processStartMs: (pid: number) => number | null | Promise<number | null>;
+}
+/**
+ * The production probe on `runtime`: its `runtime/process` service and its
+ * declared host identity. A host offering neither refuses typed; liveness is
+ * never guessed.
+ */
+export declare function hostProcessProbe(runtime: Pick<RuntimeRef, 'hasKind' | 'query'>): Promise<HostProcessProbe>;
+export type HostLookup = {
+    status: 'live';
+    claim: McpHostClaim;
+    url: string;
+} | {
+    status: 'none';
+} | {
+    status: 'stale';
+    claim: McpHostClaim;
+    reason: 'dead-process' | 'workspace-mismatch';
+};
+/**
+ * Read and VERIFY the claim for a workspace, through `runtime`'s filesystem.
+ *
+ * Verification is the point of this function. A claim file proves someone once
+ * intended to host; it does not prove anyone is hosting now. Returning `stale`
+ * rather than `none` for a failed check keeps the difference visible to callers
+ * that want to report it — "the host died" and "there was never a host" call for
+ * different messages.
+ */
+export declare function readHostClaim(runtime: HostClaimRuntime, workspaceRoot: string, roots: HostClaimRoots, probe: HostProcessProbe, 
+/** The reader's logger from its handed runtime: a torn claim file is reported here. */
+logger: Pick<LoggerImplementation, 'debug'>): Promise<HostLookup>;
+//# sourceMappingURL=host-registry.d.ts.map

package/dist/adapters/mcp/host-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-registry.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/host-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAmG,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIvJ,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAoB,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,4EAA4E;AAC5E,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAS1D,uFAAuF;AACvF,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAE1C,MAAM,WAAW,YAAY;IAC5B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,aAAa,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,MAAM,CAErF;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,MAAM,CAE5F;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzH;AAyBD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CACnC,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,cAAc;AACrB,2FAA2F;AAC3F,KAAK,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAA;CAAE,GAClE,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAChC,0CAA0C;IAC1C,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C;;;;OAIG;IACH,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACxE;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAMhH;AA6DD,MAAM,MAAM,UAAU,GACnB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,oBAAoB,CAAA;CAAE,CAAC;AAE3F;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAClC,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,gBAAgB;AACvB,uFAAuF;AACvF,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,CAAC,GACzC,OAAO,CAAC,UAAU,CAAC,CAiBrB"}

package/dist/adapters/mcp/host-registry.js

@@ -0,0 +1,237 @@
+/**
+ * Where the shared MCP host for a workspace advertises itself.
+ *
+ * WHY A REGISTRY AND NOT A PORT PROBE. The relay has to answer "is there a host
+ * I may attach to?" and the honest form of that question includes "…serving THIS
+ * workspace?". Probing a well-known port answers neither: port 3000 is the most
+ * contended port on a developer machine, and something answering there is not
+ * evidence it is a vibes MCP host, let alone one rooted at the same workspace.
+ * Attaching to the wrong host would hand an agent another workspace's tools and
+ * another workspace's session state, and the symptom would surface far from the
+ * cause.
+ *
+ * So the host writes a claim, and the relay verifies every part of it before
+ * trusting it: the process is alive AND is the process that wrote the claim, it
+ * is rooted at the same workspace, and it answers. A stale claim (host killed,
+ * machine rebooted, pid recycled) fails verification and is treated as "no
+ * host" — never as a reason to fail.
+ *
+ * ONE HOST PER WORKSPACE, not per machine. The runtime daemons are already
+ * per-workspace and that is correct: a workspace is the unit that owns a
+ * `.vibes` state directory, so two workspaces cannot share one runtime without
+ * sharing their sessions. Keying this registry by workspace root keeps the
+ * relay consistent with that.
+ *
+ * SUPERSEDED 2026-10-26 by ADR-0020 (developer root
+ * `docs/decisions/ADR-0020-one-global-daemon-set-session-threads.md`): one MCP
+ * host per machine forwards every call to the one runtime daemon, where each
+ * session is its own thread. Two workspaces share the process, not a runtime.
+ * This per-workspace registry stays until the plan's Phase 5 replaces it; do
+ * not extend it.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, getRuntimeHostIdentity, isCapabilityError, settle, settleNow, valueFreeFailure } from '@vibesdotdev/kernel';
+import { getRuntimeProcessService } from '@vibesdotdev/kernel/process';
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client/resolve-adapter';
+import { writeFilePrivate } from '@vibesdotdev/filesystem';
+import { mcpHostClaimPath, workspaceKey } from '@vibesdotdev/paths/workspace-mcp-host';
+/**
+ * Host claims are home state (`vibesHome`), not workspace files: they are read
+ * and written through the host's unbound filesystem adapter, never the
+ * workspace-rooted binding (which refuses paths outside the workspace).
+ */
+const HOME_STATE_FILESYSTEM = { binding: false };
+/**
+ * Stable, filesystem-safe key for a workspace root.
+ *
+ * Re-exported, not defined here. Pure identity and portable hashing live in
+ * `@vibesdotdev/paths`, because
+ * `@vibesdotdev/tools` must compute the same key to find this claim, and `mcp`
+ * already depends on `tools` (so `tools` can never depend on `mcp`). One hash,
+ * one notion of "which workspace is this", so the claim file, the derived port,
+ * and every reader of both can never disagree.
+ */
+export { workspaceKey };
+/**
+ * The claim path for `workspaceRoot` under the selected `vibesHome` of the
+ * runtime the caller was handed (`getPathRoots(runtime)`, D40); never the
+ * process's home and never a literal `.vibes`.
+ */
+export function hostRegistryPath(workspaceRoot, roots) {
+    return mcpHostClaimPath(workspaceRoot, roots);
+}
+/**
+ * The relay attestation claim for `workspaceRoot` under the runtime's roots, beside its host
+ * claim (RC08 U7). The host writes a fresh secret there each start through
+ * runtime-rpc's local-attestation primitive; a same-user relay reads it and
+ * presents it as its bearer. The host claim itself carries no secret.
+ */
+export function mcpRelayAttestationPath(workspaceRoot, roots) {
+    return hostRegistryPath(workspaceRoot, roots).replace(/\.json$/, '.attestation');
+}
+/**
+ * Advertise this process as the shared host for `workspaceRoot`, through the
+ * runtime's filesystem: an owner-private write the adapter renames into place,
+ * so a reader never sees half a claim and no other user can read it.
+ */
+export async function writeHostClaim(runtime, claim, roots) {
+    const filesystem = await resolveFileSystemAdapter(runtime, HOME_STATE_FILESYSTEM);
+    const path = hostRegistryPath(claim.workspaceRoot, roots);
+    await filesystem.mkdir(filesystem.dirname(path), { recursive: true, mode: 0o700 });
+    await writeFilePrivate(filesystem, path, `${JSON.stringify(claim, null, 2)}\n`, 'utf8');
+}
+/** The claim file's text, or null when there is none; any other failure propagates typed. */
+async function readClaimText(runtime, path) {
+    const filesystem = await resolveFileSystemAdapter(runtime, HOME_STATE_FILESYSTEM);
+    if (!(await filesystem.exists(path)))
+        return null;
+    const read = await settle(() => filesystem.readFile(path, 'utf8'));
+    if (!read.ok) {
+        // Withdrawn between the existence check and the read: no claim.
+        if (isCapabilityError(read.cause) && read.cause.code === 'NOT_FOUND')
+            return null;
+        throw new CapabilityError('The MCP host claim cannot be read.', 'UNAVAILABLE', {
+            reason: 'mcp-host-claim-unreadable',
+            retryable: false,
+            details: { failure: valueFreeFailure(read.cause).name },
+            cause: read.cause
+        });
+    }
+    if (isUtf8Text(read.value))
+        return read.value;
+    return new TextDecoder().decode(read.value);
+}
+function isUtf8Text(value) {
+    return typeof value === 'string';
+}
+/**
+ * Remove this workspace's claim. Safe to call when none exists.
+ *
+ * With `owner`, only the process that wrote the claim may withdraw it.
+ * Measured 2026-09-06: an orphaned http body from a retired worktree shared
+ * the developer root with the live managed host; on SIGTERM its shutdown
+ * cleared the root's claim unconditionally, and every relay started after
+ * that got "no shared host has advertised a claim" while the real host kept
+ * serving. Returns true when a file was removed.
+ */
+export async function clearHostClaim(runtime, workspaceRoot, roots, 
+/** The withdrawing owner, and its logger from its handed runtime for a torn claim file. */
+owner) {
+    const path = hostRegistryPath(workspaceRoot, roots);
+    const raw = await readClaimText(runtime, path);
+    if (raw === null)
+        return false; // nothing to withdraw
+    if (owner) {
+        const claim = parseClaim(raw, owner.logger);
+        if (claim && claim.pid !== owner.pid)
+            return false; // someone else's live claim
+    }
+    const filesystem = await resolveFileSystemAdapter(runtime, HOME_STATE_FILESYSTEM);
+    await filesystem.remove(path);
+    return true;
+}
+/**
+ * The production probe on `runtime`: its `runtime/process` service and its
+ * declared host identity. A host offering neither refuses typed; liveness is
+ * never guessed.
+ */
+export async function hostProcessProbe(runtime) {
+    const [processes, identity] = await Promise.all([getRuntimeProcessService(runtime), getRuntimeHostIdentity(runtime)]);
+    return {
+        isRunning: (pid) => processes.isRunning(pid),
+        processStartMs: (pid) => identity.readProcessStartMs(pid)
+    };
+}
+/**
+ * `ps` reports elapsed time in whole seconds, and the claim and the probe are
+ * not read on the same clock tick. A genuine host is always EARLIER than its
+ * claim by however long the runtime took to boot, so the window only has to
+ * absorb rounding — 5 s is generous without letting a recycled pid through.
+ */
+const CLAIM_START_TOLERANCE_MS = 5_000;
+/**
+ * Is the process at `claim.pid` the one that wrote the claim?
+ *
+ * Liveness proves a pid exists; it does not prove it is OUR process. The host
+ * writes its claim AFTER it boots, so the host that wrote it started before
+ * `startedAt`. A pid that started after the claim inherited the number from a
+ * host that has since died — the recycled-pid case. A pid the process table no
+ * longer lists exited after the liveness check saw it. A table that cannot be
+ * read fails typed; liveness is never guessed.
+ */
+async function claimedProcessIsRunning(claim, probe) {
+    if (!Number.isSafeInteger(claim.pid) || claim.pid <= 0)
+        return false;
+    if (!(await probe.isRunning(claim.pid)))
+        return false;
+    const claimedStartMs = Date.parse(claim.startedAt);
+    if (!Number.isFinite(claimedStartMs))
+        return true;
+    const actualStartMs = await probe.processStartMs(claim.pid);
+    if (actualStartMs === null)
+        return false;
+    return actualStartMs <= claimedStartMs + CLAIM_START_TOLERANCE_MS;
+}
+/** A claim file's shape; the optional catalog fields are read independently of the required ones. */
+const ClaimSchema = z.object({
+    pid: z.number(),
+    port: z.number(),
+    workspaceRoot: z.string(),
+    startedAt: z.string(),
+    presetId: z.string().optional().catch(undefined),
+    presetPolicyKey: z.string().optional().catch(undefined),
+    catalogAttachKey: z.string().optional().catch(undefined),
+    clientId: z.string().optional().catch(undefined)
+});
+function parseClaim(raw, logger) {
+    const parsedJson = settleNow(() => JSON.parse(raw));
+    if (!parsedJson.ok) {
+        // A torn or hand-edited file is no claim: the relay reports "no host".
+        logger.debug('mcp host claim is not valid JSON; treating as no claim', {
+            failure: valueFreeFailure(parsedJson.cause)
+        });
+        return null;
+    }
+    const parsed = ClaimSchema.safeParse(parsedJson.value);
+    if (!parsed.success)
+        return null;
+    const claim = { pid: parsed.data.pid, port: parsed.data.port, workspaceRoot: parsed.data.workspaceRoot, startedAt: parsed.data.startedAt };
+    if (parsed.data.presetId !== undefined)
+        claim.presetId = parsed.data.presetId;
+    if (parsed.data.presetPolicyKey !== undefined)
+        claim.presetPolicyKey = parsed.data.presetPolicyKey;
+    if (parsed.data.catalogAttachKey !== undefined)
+        claim.catalogAttachKey = parsed.data.catalogAttachKey;
+    if (parsed.data.clientId !== undefined)
+        claim.clientId = parsed.data.clientId;
+    return claim;
+}
+/**
+ * Read and VERIFY the claim for a workspace, through `runtime`'s filesystem.
+ *
+ * Verification is the point of this function. A claim file proves someone once
+ * intended to host; it does not prove anyone is hosting now. Returning `stale`
+ * rather than `none` for a failed check keeps the difference visible to callers
+ * that want to report it — "the host died" and "there was never a host" call for
+ * different messages.
+ */
+export async function readHostClaim(runtime, workspaceRoot, roots, probe, 
+/** The reader's logger from its handed runtime: a torn claim file is reported here. */
+logger) {
+    const raw = await readClaimText(runtime, hostRegistryPath(workspaceRoot, roots));
+    if (raw === null)
+        return { status: 'none' };
+    const claim = parseClaim(raw, logger);
+    if (!claim)
+        return { status: 'none' };
+    // A claim for a different root in this workspace's slot means the hash
+    // collided or the file was hand-edited. Never attach across workspaces.
+    if (claim.workspaceRoot !== workspaceRoot) {
+        return { status: 'stale', claim, reason: 'workspace-mismatch' };
+    }
+    if (!(await claimedProcessIsRunning(claim, probe))) {
+        return { status: 'stale', claim, reason: 'dead-process' };
+    }
+    return { status: 'live', claim, url: `http://127.0.0.1:${claim.port}/mcp` };
+}
+//# sourceMappingURL=host-registry.js.map

package/dist/adapters/mcp/host-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-registry.js","sourceRoot":"","sources":["../../../src/adapters/mcp/host-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AACvJ,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAMvF;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,EAAE,OAAO,EAAE,KAAK,EAAW,CAAC;AAoC1D;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAqB,EAAE,KAAqB;IAC5E,OAAO,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,aAAqB,EAAE,KAAqB;IACnF,OAAO,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAyB,EAAE,KAAmB,EAAE,KAAqB;IACzG,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzF,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,aAAa,CAAC,OAAyB,EAAE,IAAY;IACnE,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACd,gEAAgE;QAChE,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAClF,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,aAAa,EAAE;YAC9E,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;YACvD,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAC9C,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,OAAyB,EACzB,aAAqB,EACrB,KAAqB;AACrB,2FAA2F;AAC3F,KAAoE;IAEpE,MAAM,IAAI,GAAG,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,sBAAsB;IACtD,IAAI,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,4BAA4B;IACjF,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAClF,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACb,CAAC;AAiBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA8C;IACpF,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtH,OAAO;QACN,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC;QAC5C,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,GAAG,CAAC;KACzD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC;;;;;;;;;GASG;AACH,KAAK,UAAU,uBAAuB,CAAC,KAAmB,EAAE,KAAuB;IAClF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,aAAa,IAAI,cAAc,GAAG,wBAAwB,CAAC;AACnE,CAAC;AAED,qGAAqG;AACrG,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAChD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACvD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAChD,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,GAAW,EAAE,MAA2C;IAC3E,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACpB,uEAAuE;QACvE,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;YACtE,OAAO,EAAE,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAiB,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzJ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS;QAAE,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;IACnG,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACtG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC9E,OAAO,KAAK,CAAC;AACd,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,OAAyB,EACzB,aAAqB,EACrB,KAAqB,EACrB,KAAuB;AACvB,uFAAuF;AACvF,MAA2C;IAE3C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAE5C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAEtC,uEAAuE;IACvE,wEAAwE;IACxE,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC3D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,oBAAoB,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;AAC7E,CAAC"}

package/dist/adapters/mcp/index.d.ts

@@ -0,0 +1,12 @@
+export { createMcpAdapter } from './server.consumer.ts';
+export type { McpAdapter, McpAdapterOptions, SamplingRequest, SamplingResult } from '../types.ts';
+export type { McpUser, McpToolResult } from '../../types.ts';
+export { type McpToolContext, type McpHttpRequest, type WorkspaceSource, type WorkspaceContext, type McpServerRuntimeConfig, type McpToolExecutionInfo, type McpRuntimeContext, prepareMcpToolExecution, prepareMcpToolExecutionAsync } from './context.ts';
+export { type McpInputSchema, type McpResponseFormatter, defaultFormatter, tableFormatter, listFormatter } from './formatters.ts';
+export { type McpResourceContent, type VibesResource, type VibesResourceTemplate, type VibesPrompt, type ApiToolConfig, type McpServerConfig, type McpToolMetadata, type McpToolHandler, type McpTool } from './vibes-types.ts';
+export { fromApiEndpoint, type FromApiEndpointConfig, type ApiRequestTransform } from './from-api-endpoint.ts';
+export { ensureSamplingAvailable, buildSamplingMessages } from './sampling.ts';
+export { buildProjectionDoctorReport, runProjectionDoctor } from './projection-doctor.ts';
+export type { ProjectionDoctorChallenge, ProjectionDoctorFinding, ProjectionDoctorReport, ProjectionFailureKind, ProjectionHostAttestation } from './projection-doctor.ts';
+export { wrapToolOutputText, deriveTrustTier, shouldDropFromModelContext, TIER_3_DROP_PLACEHOLDER, TOOL_OUTPUT_TRUST_INSTRUCTION, type TrustTier, type TrustTaggedText } from './trust-tag.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlG,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG7D,OAAO,EACN,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,MAAM,cAAc,CAAC;AAGtB,OAAO,EACN,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACN,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,OAAO,EACZ,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACN,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,YAAY,EACX,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,EACzB,MAAM,wBAAwB,CAAC;AAIhC,OAAO,EACN,kBAAkB,EAClB,eAAe,EACf,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,MAAM,gBAAgB,CAAC"}

package/dist/adapters/mcp/index.js

@@ -0,0 +1,17 @@
+export { createMcpAdapter } from "./server.consumer.js";
+// Tool context and types
+export { prepareMcpToolExecution, prepareMcpToolExecutionAsync } from "./context.js";
+// Formatters
+export { defaultFormatter, tableFormatter, listFormatter } from "./formatters.js";
+// Vibes-domain MCP types
+export {} from "./vibes-types.js";
+// Tool helpers
+export { fromApiEndpoint } from "./from-api-endpoint.js";
+export { ensureSamplingAvailable, buildSamplingMessages } from "./sampling.js";
+export { buildProjectionDoctorReport, runProjectionDoctor } from "./projection-doctor.js";
+// Trust-tag wrapper (F4 / VIBA-34). Callers that build the system prompt
+// must include TOOL_OUTPUT_TRUST_INSTRUCTION before any tool-result turns.
+export { wrapToolOutputText, deriveTrustTier, shouldDropFromModelContext, TIER_3_DROP_PLACEHOLDER, TOOL_OUTPUT_TRUST_INSTRUCTION } from "./trust-tag.js";
+// Note: Low-level transport primitives are available from @vibesdotdev/mcp
+// This adapter provides tool-specific MCP server building
+//# sourceMappingURL=index.js.map

package/dist/adapters/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAMxD,yBAAyB;AACzB,OAAO,EAQN,uBAAuB,EACvB,4BAA4B,EAC5B,MAAM,cAAc,CAAC;AAEtB,aAAa;AACb,OAAO,EAGN,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,iBAAiB,CAAC;AAEzB,yBAAyB;AACzB,OAAO,EAUN,MAAM,kBAAkB,CAAC;AAE1B,eAAe;AACf,OAAO,EACN,eAAe,EAGf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACN,uBAAuB,EACvB,qBAAqB,EACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAS1F,yEAAyE;AACzE,2EAA2E;AAC3E,OAAO,EACN,kBAAkB,EAClB,eAAe,EACf,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAG7B,MAAM,gBAAgB,CAAC;AAExB,2EAA2E;AAC3E,0DAA0D"}

package/dist/adapters/mcp/isolated-notice.d.ts

@@ -0,0 +1,111 @@
+/**
+ * What an agent is told when it is running on a private runtime.
+ *
+ * `--isolated` is a legitimate mode — it is the only way to debug the runtime
+ * itself, or to run a build that is not the one the host is serving. It is also
+ * expensive in a way that is completely invisible from inside: a process cannot
+ * see the other nine like it. That asymmetry is the whole reason this notice
+ * exists. The agent holding this runtime is the only party in a position to
+ * release it, and the only one with no way to know it should.
+ *
+ * It goes in the MCP `instructions` field, NOT a stderr line. Instructions are
+ * read into the agent's context at session start; stderr is written where no
+ * agent will ever look. A warning nobody reads is indistinguishable from no
+ * warning at all — and it is worse, because it lets the author believe the
+ * problem was handled.
+ *
+ * The same diagnosis also has to reach the client that could NOT attach.
+ * Standard stdio never falls back to a private runtime — `startStdioMcp`
+ * throws — so the thrown message is the only place a failed attach is ever
+ * explained. `attachFailureMessage` builds it from the same cause text as the
+ * notice (`attachCause`), so the two surfaces cannot drift into telling
+ * different stories about one claim.
+ */
+/**
+ * A host url as a notice may print it: scheme, host and path only. Userinfo,
+ * query and fragment can carry credentials (VIBES_MCP_HOST_URL is operator
+ * input) and are dropped; the rest still passes the shared credential redactor.
+ * An unparseable value is removed whole.
+ */
+export declare function renderHostUrl(url: string): string;
+/** The commands a failed attach points at. Both exist on the installed CLI. */
+export declare const HOST_STATUS_COMMAND = "vibes dev mcp status";
+export declare const HOST_RESTART_COMMAND = "vibes dev mcp restart";
+/** The part of a host claim a message needs in order to name the process it judged. */
+export interface AttachClaimSummary {
+    pid: number;
+    port: number;
+    workspaceRoot: string;
+    startedAt: string;
+    presetId?: string;
+}
+export interface IsolatedNoticeInput {
+    /** Why this process ended up isolated. */
+    reason: 'requested' | 'no-host' | 'stale-host' | 'unreachable' | 'identity-mismatch' | 'transport-unavailable';
+    /** For 'identity-mismatch': what the host serves vs what was asked for. */
+    mismatch?: {
+        hostPreset?: string;
+        wantedPreset?: string;
+    };
+    /** Present when a host was found but could not be used. */
+    staleReason?: 'dead-process' | 'workspace-mismatch';
+    workspaceRoot?: string;
+    /** The claim the relay judged, when it read one, so a message can name the pid it refused. */
+    claim?: AttachClaimSummary;
+    /** The host url that was tried, when discovery or VIBES_MCP_HOST_URL produced one. */
+    url?: string;
+    /** True when `url` came from VIBES_MCP_HOST_URL rather than a claim. */
+    explicitUrl?: boolean;
+}
+/**
+ * What the relay found when it could not attach: everything the notice knows
+ * except `requested`, which is a decision, not a finding.
+ */
+export type AttachFinding = Omit<IsolatedNoticeInput, 'reason'> & {
+    reason: Exclude<IsolatedNoticeInput['reason'], 'requested'>;
+};
+/**
+ * The cause, as a clause that follows "because" — the ONE description of what
+ * the relay found. `reasonLine` frames it for an agent that is now isolated;
+ * `attachFailureMessage` frames it for a client that got nothing at all. Two
+ * framings, one diagnosis, so they cannot disagree about the same claim.
+ */
+export declare function attachCause(input: IsolatedNoticeInput): string;
+/** One concrete thing to do about the finding. */
+export declare function attachNextStep(finding: AttachFinding): string;
+/** The relay's receipt, as much of it as a message can use. `RelayResult` is assignable. */
+export interface AttachFailureReceipt {
+    relayed?: boolean;
+    reason?: AttachFinding['reason'] | 'disabled';
+    mismatch?: IsolatedNoticeInput['mismatch'];
+    staleReason?: IsolatedNoticeInput['staleReason'];
+    url?: string;
+    claim?: AttachClaimSummary;
+}
+export interface AttachFailureContext {
+    workspaceRoot: string;
+    /** VIBES_MCP_HOST_URL, when the client set it. */
+    hostUrl?: string;
+    /** True when PM was asked to start the host before the final attempt. */
+    hostStarted?: boolean;
+}
+/**
+ * The error a standard-stdio client sees when it cannot attach.
+ *
+ * Specific on purpose. The previous text ("check status; --isolated is explicit
+ * debugging only") was identical for a dead pid, a foreign workspace, a wrong
+ * catalog and a dead socket, while the relay had already worked out which one
+ * it was. It still says the load-bearing thing — no private runtime was started
+ * — because a silent ~6GB fallback is the failure this path exists to prevent.
+ */
+export declare function attachFailureMessage(receipt: AttachFailureReceipt, context: AttachFailureContext): string;
+/**
+ * Build the instructions section. Returns undefined for the shared path, so the
+ * normal case adds nothing to the agent's context.
+ *
+ * The text is THE prompts kind's: `mcp.instructions.private-runtime` when
+ * isolation is simply correct, `mcp.instructions.isolated-runtime` otherwise.
+ * The cause clause stays `attachCause`, shared with `attachFailureMessage`.
+ */
+export declare function isolatedRuntimeInstructions(input: IsolatedNoticeInput | undefined): string | undefined;
+//# sourceMappingURL=isolated-notice.d.ts.map