@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.3

package/dist/tools/agent-execution/run-wire.d.ts

@@ -0,0 +1,60 @@
+/**
+ * The agent-run HTTP wire: what an agent-run service answers on
+ * `POST /api/agents/<id>/run` (one JSON result) and `/run/stream` (SSE events),
+ * read into the public agent-execution shapes.
+ *
+ * Every reader is total over hostile text: malformed JSON, a body of the wrong
+ * shape or an unknown event never throws into the caller; it is a typed
+ * `agent-response-invalid` failure (a result) or a `malformed` reading (an
+ * event) the caller reports. Each optional field of a result is read
+ * independently, so one malformed field is dropped, not fatal.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { AgentExecutionStreamEvent, TokenUsage } from './schemas.ts';
+declare const MetadataSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+/** Run metadata as the wire carries it. */
+export type AgentRunMetadata = z.infer<typeof MetadataSchema>;
+/** The run route's answer; every field optional and read on its own. */
+export declare const AgentRunResponseSchema: z.ZodObject<{
+    output: z.ZodCatch<z.ZodOptional<z.ZodObject<{
+        content: z.ZodCatch<z.ZodOptional<z.ZodString>>;
+        result: z.ZodCatch<z.ZodOptional<z.ZodString>>;
+    }, z.core.$strip>>>;
+    executionTimeMs: z.ZodCatch<z.ZodOptional<z.ZodNumber>>;
+    status: z.ZodCatch<z.ZodOptional<z.ZodString>>;
+    timestamp: z.ZodCatch<z.ZodOptional<z.ZodISODateTime>>;
+    tokenUsage: z.ZodCatch<z.ZodOptional<z.ZodObject<{
+        input: z.ZodCatch<z.ZodNumber>;
+        output: z.ZodCatch<z.ZodNumber>;
+        total: z.ZodCatch<z.ZodNumber>;
+    }, z.core.$strip>>>;
+    metadata: z.ZodCatch<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+}, z.core.$strip>;
+export type AgentRunResponse = z.infer<typeof AgentRunResponseSchema>;
+/** The typed failure for an answer that is not an agent-run result; `cause` names which way it is not. */
+export declare function agentResponseInvalid(service: string, cause: string): CapabilityError;
+/** A run answer's text as the result, or the typed `agent-response-invalid` failure. */
+export declare function parseAgentRunResponse(text: string, service: string): AgentRunResponse;
+/** Token usage from a run's final metadata (absent or malformed metadata counts nothing). */
+export declare function agentRunUsage(metadata: AgentRunMetadata | undefined): TokenUsage;
+/** The model a run's final metadata names, if any. */
+export declare function agentRunModelId(metadata: AgentRunMetadata | undefined): string | null;
+/** One SSE event read: the tool event, an event type this wire does not carry, or a malformed event and why. */
+export type AgentStreamEventReading = {
+    readonly read: 'event';
+    readonly event: AgentExecutionStreamEvent;
+} | {
+    readonly read: 'unknown-type';
+} | {
+    readonly read: 'malformed';
+    readonly eventType: string;
+    readonly cause: 'not-json' | 'shape';
+};
+/**
+ * One SSE event (`event:` type and `data:` text) as the tool's stream event.
+ * A service `error` event's message is passed to `redact` before it is carried.
+ */
+export declare function readAgentStreamEvent(type: string, data: string, redact: (text: string) => string): AgentStreamEventReading;
+export {};
+//# sourceMappingURL=run-wire.d.ts.map

package/dist/tools/agent-execution/run-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-wire.d.ts","sourceRoot":"","sources":["../../../src/tools/agent-execution/run-wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAyC,MAAM,qBAAqB,CAAC;AAE7F,OAAO,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1E,QAAA,MAAM,cAAc,wCAAoC,CAAC;AAGzD,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE9D,wEAAwE;AACxE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;iBAajC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAwBtE,0GAA0G;AAC1G,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,CAMpF;AAsBD,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAMrF;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,UAAU,CAQhF;AAED,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAGrF;AAYD,gHAAgH;AAChH,MAAM,MAAM,uBAAuB,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAA;CAAE,CAAC;AAEpG;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,uBAAuB,CA+B1H"}

package/dist/tools/agent-execution/run-wire.js

@@ -0,0 +1,155 @@
+/**
+ * The agent-run HTTP wire: what an agent-run service answers on
+ * `POST /api/agents/<id>/run` (one JSON result) and `/run/stream` (SSE events),
+ * read into the public agent-execution shapes.
+ *
+ * Every reader is total over hostile text: malformed JSON, a body of the wrong
+ * shape or an unknown event never throws into the caller; it is a typed
+ * `agent-response-invalid` failure (a result) or a `malformed` reading (an
+ * event) the caller reports. Each optional field of a result is read
+ * independently, so one malformed field is dropped, not fatal.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+const CountSchema = z.number().int().nonnegative();
+const MetadataSchema = z.record(z.string(), z.unknown());
+const JsonSchema = JsonValueSchema;
+/** The run route's answer; every field optional and read on its own. */
+export const AgentRunResponseSchema = z.object({
+    output: z
+        .object({ content: z.string().optional().catch(undefined), result: z.string().optional().catch(undefined) })
+        .optional()
+        .catch(undefined),
+    executionTimeMs: CountSchema.optional().catch(undefined),
+    status: z.string().optional().catch(undefined),
+    timestamp: z.iso.datetime().optional().catch(undefined),
+    tokenUsage: z
+        .object({ input: CountSchema.catch(0), output: CountSchema.catch(0), total: CountSchema.catch(0) })
+        .optional()
+        .catch(undefined),
+    metadata: MetadataSchema.optional().catch(undefined)
+});
+/** Token counts and model a provider reports in a run's final metadata, under its own names. */
+const FinalMetadataSchema = z.object({
+    usage: z
+        .object({
+        totalTokens: CountSchema.optional().catch(undefined),
+        promptTokens: CountSchema.optional().catch(undefined),
+        completionTokens: CountSchema.optional().catch(undefined),
+        inputTokens: CountSchema.optional().catch(undefined),
+        outputTokens: CountSchema.optional().catch(undefined)
+    })
+        .optional()
+        .catch(undefined),
+    tokensPrompt: CountSchema.optional().catch(undefined),
+    promptTokens: CountSchema.optional().catch(undefined),
+    tokensCompletion: CountSchema.optional().catch(undefined),
+    completionTokens: CountSchema.optional().catch(undefined),
+    totalTokens: CountSchema.optional().catch(undefined),
+    tokensUsed: CountSchema.optional().catch(undefined),
+    modelId: z.string().optional().catch(undefined),
+    model: z.string().optional().catch(undefined)
+});
+/** The typed failure for an answer that is not an agent-run result; `cause` names which way it is not. */
+export function agentResponseInvalid(service, cause) {
+    return new CapabilityError(`${service} answered with a body that is not an agent run result.`, 'UNAVAILABLE', {
+        reason: 'agent-response-invalid',
+        retryable: false,
+        details: { cause }
+    });
+}
+/** JSON text as a JSON value, or the typed `agent-response-invalid` failure carrying why (value-free). */
+function parseJson(text, service) {
+    try {
+        return { json: true, value: JsonSchema.parse(JSON.parse(text)) };
+    }
+    catch (error) {
+        return {
+            json: false,
+            failure: new CapabilityError(`${service} answered with text that is not JSON.`, 'UNAVAILABLE', {
+                reason: 'agent-response-invalid',
+                retryable: false,
+                details: { cause: 'not-json' },
+                cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+            })
+        };
+    }
+}
+/** A run answer's text as the result, or the typed `agent-response-invalid` failure. */
+export function parseAgentRunResponse(text, service) {
+    const json = parseJson(text, service);
+    if (!json.json)
+        throw json.failure;
+    const parsed = AgentRunResponseSchema.safeParse(json.value);
+    if (!parsed.success)
+        throw agentResponseInvalid(service, 'not-a-run-result');
+    return parsed.data;
+}
+/** Token usage from a run's final metadata (absent or malformed metadata counts nothing). */
+export function agentRunUsage(metadata) {
+    const read = FinalMetadataSchema.safeParse(metadata ?? {});
+    if (!read.success)
+        return { input: 0, output: 0, total: 0 };
+    const facts = read.data;
+    const input = facts.usage?.promptTokens || facts.usage?.inputTokens || facts.tokensPrompt || facts.promptTokens || 0;
+    const output = facts.usage?.completionTokens || facts.usage?.outputTokens || facts.tokensCompletion || facts.completionTokens || 0;
+    const total = facts.usage?.totalTokens || facts.totalTokens || facts.tokensUsed || input + output;
+    return { input, output, total };
+}
+/** The model a run's final metadata names, if any. */
+export function agentRunModelId(metadata) {
+    const read = FinalMetadataSchema.safeParse(metadata ?? {});
+    return read.success ? (read.data.modelId ?? read.data.model ?? null) : null;
+}
+const StreamEventDataSchemas = {
+    response: z.object({ content: z.string() }),
+    thinking: z.object({ content: z.string() }),
+    tool: z.object({ toolCallId: z.string().optional(), name: z.string(), arguments: MetadataSchema }),
+    tool_result: z.object({ metadata: MetadataSchema.optional() }),
+    complete: z.object({ metadata: MetadataSchema.optional() }),
+    error: z.object({ message: z.string() })
+};
+const StreamEventTypeSchema = z.enum(['response', 'thinking', 'tool', 'tool_result', 'complete', 'error']);
+/**
+ * One SSE event (`event:` type and `data:` text) as the tool's stream event.
+ * A service `error` event's message is passed to `redact` before it is carried.
+ */
+export function readAgentStreamEvent(type, data, redact) {
+    const kind = StreamEventTypeSchema.safeParse(type);
+    if (!kind.success)
+        return { read: 'unknown-type' };
+    const reading = parseJson(data, 'The agent stream');
+    if (!reading.json)
+        return { read: 'malformed', eventType: kind.data, cause: 'not-json' };
+    const json = reading.value;
+    const malformed = { read: 'malformed', eventType: kind.data, cause: 'shape' };
+    switch (kind.data) {
+        case 'response':
+        case 'thinking': {
+            const parsed = StreamEventDataSchemas[kind.data].safeParse(json);
+            return parsed.success ? { read: 'event', event: { type: kind.data, content: parsed.data.content } } : malformed;
+        }
+        case 'tool': {
+            const parsed = StreamEventDataSchemas.tool.safeParse(json);
+            if (!parsed.success)
+                return malformed;
+            const event = { type: 'tool', name: parsed.data.name, arguments: parsed.data.arguments };
+            if (parsed.data.toolCallId !== undefined)
+                event.toolCallId = parsed.data.toolCallId;
+            return { read: 'event', event };
+        }
+        case 'tool_result':
+        case 'complete': {
+            const parsed = StreamEventDataSchemas[kind.data].safeParse(json);
+            return parsed.success ? { read: 'event', event: { type: kind.data, metadata: parsed.data.metadata } } : malformed;
+        }
+        case 'error': {
+            const parsed = StreamEventDataSchemas.error.safeParse(json);
+            if (!parsed.success)
+                return malformed;
+            return { read: 'event', event: { type: 'error', message: redact(parsed.data.message), timestamp: new Date().toISOString() } };
+        }
+    }
+}
+//# sourceMappingURL=run-wire.js.map

package/dist/tools/agent-execution/run-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-wire.js","sourceRoot":"","sources":["../../../src/tools/agent-execution/run-wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAkB,MAAM,kCAAkC,CAAC;AAGnF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AACnD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AACzD,MAAM,UAAU,GAAG,eAAe,CAAC;AAKnC,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC;SACP,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;SAC3G,QAAQ,EAAE;SACV,KAAK,CAAC,SAAS,CAAC;IAClB,eAAe,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACvD,UAAU,EAAE,CAAC;SACX,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SAClG,QAAQ,EAAE;SACV,KAAK,CAAC,SAAS,CAAC;IAClB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACpD,CAAC,CAAC;AAGH,gGAAgG;AAChG,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC;SACN,MAAM,CAAC;QACP,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACpD,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACrD,gBAAgB,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACzD,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACpD,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;KACrD,CAAC;SACD,QAAQ,EAAE;SACV,KAAK,CAAC,SAAS,CAAC;IAClB,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACrD,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACrD,gBAAgB,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACzD,gBAAgB,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACzD,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACpD,UAAU,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC7C,CAAC,CAAC;AAEH,0GAA0G;AAC1G,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,KAAa;IAClE,OAAO,IAAI,eAAe,CAAC,GAAG,OAAO,wDAAwD,EAAE,aAAa,EAAE;QAC7G,MAAM,EAAE,wBAAwB;QAChC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,KAAK,EAAE;KAClB,CAAC,CAAC;AACJ,CAAC;AAKD,0GAA0G;AAC1G,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe;IAC/C,IAAI,CAAC;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,IAAI,eAAe,CAAC,GAAG,OAAO,uCAAuC,EAAE,aAAa,EAAE;gBAC9F,MAAM,EAAE,wBAAwB;gBAChC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE;gBAC9B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;aACzD,CAAC;SACF,CAAC;IACH,CAAC;AACF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,OAAe;IAClE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,CAAC,OAAO,CAAC;IACnC,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAAC,QAAsC;IACnE,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,YAAY,IAAI,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;IACrH,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,gBAAgB,IAAI,KAAK,CAAC,KAAK,EAAE,YAAY,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IACnI,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,GAAG,MAAM,CAAC;IAClG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,eAAe,CAAC,QAAsC;IACrE,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,MAAM,sBAAsB,GAAG;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IAClG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC/B,CAAC;AACX,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAQ3G;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAY,EAAE,MAAgC;IAChG,MAAM,IAAI,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACzF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;IAC3B,MAAM,SAAS,GAA4B,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvG,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,UAAU,CAAC;QAChB,KAAK,UAAU,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACjH,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YACtC,MAAM,KAAK,GAAyD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/I,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS;gBAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnH,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC;YACtC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;QAC/H,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/tools/agent-execution/schemas.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Agent Execution Tool Schemas
+ *
+ * Input/output schemas for the tools/agent-execution tool.
+ * Handles agent execution with billing integration.
+ */
+import * as z from 'zod/v4';
+/**
+ * Billing attribution: WHERE usage is recorded and WITH WHAT credential.
+ *
+ * This is a TRUSTED context. It travels on `ToolCallContext.metadata`, which only
+ * the executing surface populates — never on the tool's INPUT schema, which is
+ * filled in by a model.
+ *
+ * It used to be on the input schema. `agent-execution` declares
+ * `purpose: ['direct','worker','agent']`, so a model can call it, and the tool's
+ * own usageGuidance told the model to "pass billingContext when usage attribution
+ * is required." Downstream, `recordGenerationUsage` does:
+ *
+ *     fetch(`${accountOrigin}/api/account/billing/usage/record`,
+ *           { headers: { Authorization, Origin: callerOrigin } })
+ *
+ * so a model that filled this in could (a) omit it and get free inference — the
+ * receiver skips recording when `accountOrigin` is absent — (b) attribute its spend
+ * to another user, or (c) name an arbitrary origin and make the server POST to it
+ * with a model-chosen `Origin` header.
+ *
+ * A credential and a destination are not things a model gets to choose. Keeping
+ * this OFF the input schema is what makes that true by construction rather than
+ * by everyone remembering.
+ */
+export declare const BillingContextSchema: z.ZodObject<{
+    accountOrigin: z.ZodOptional<z.ZodString>;
+    callerOrigin: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * The trusted, surface-supplied half of an agent-execution call.
+ *
+ * Read from `ctx.metadata`. The surface (a route with a session cookie, a worker
+ * with a verified job payload) establishes these; the model cannot reach them.
+ * When one agent run calls `agent-execution` from inside a loop, the loop threads
+ * the PARENT's trusted context down — so a child inherits the real actor and the
+ * real approval channel, and cannot escalate past either.
+ */
+export declare const AgentExecutionTrustedContextSchema: z.ZodObject<{
+    actorUserId: z.ZodOptional<z.ZodString>;
+    orgId: z.ZodOptional<z.ZodString>;
+    organizationId: z.ZodOptional<z.ZodString>;
+    billingContext: z.ZodOptional<z.ZodObject<{
+        accountOrigin: z.ZodOptional<z.ZodString>;
+        callerOrigin: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    approvalChannel: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>;
+/**
+ * Input schema for agent execution — the MODEL-FACING half.
+ *
+ * Every field here is attacker-controlled in the general case. Nothing that grants
+ * identity, credentials, or approval authority may be added to it. See
+ * {@link AgentExecutionTrustedContextSchema} for where those live instead.
+ */
+export declare const AgentExecutionInputSchema: z.ZodObject<{
+    agentId: z.ZodString;
+    input: z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>]>;
+    options: z.ZodOptional<z.ZodObject<{
+        modelId: z.ZodOptional<z.ZodString>;
+        temperature: z.ZodOptional<z.ZodNumber>;
+        maxTokens: z.ZodOptional<z.ZodNumber>;
+        timeout: z.ZodOptional<z.ZodNumber>;
+        toolIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        inheritAgentTools: z.ZodOptional<z.ZodBoolean>;
+        toolConfigurations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            toolId: z.ZodString;
+        }, z.core.$loose>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * Token usage information
+ */
+export declare const TokenUsageSchema: z.ZodObject<{
+    input: z.ZodNumber;
+    output: z.ZodNumber;
+    total: z.ZodNumber;
+}, z.core.$strip>;
+/**
+ * Output schema for agent execution
+ */
+export declare const AgentExecutionOutputSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        failed: "failed";
+        timeout: "timeout";
+        completed: "completed";
+    }>;
+    content: z.ZodString;
+    output: z.ZodObject<{
+        result: z.ZodString;
+        content: z.ZodString;
+    }, z.core.$strip>;
+    executionTimeMs: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    usage: z.ZodOptional<z.ZodObject<{
+        input: z.ZodNumber;
+        output: z.ZodNumber;
+        total: z.ZodNumber;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+/**
+ * Stream event types for streaming execution
+ */
+export declare const AgentExecutionStreamEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"status">;
+    status: z.ZodEnum<{
+        started: "started";
+        ended: "ended";
+    }>;
+    message: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"response">;
+    content: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"thinking">;
+    content: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"tool">;
+    toolCallId: z.ZodOptional<z.ZodString>;
+    name: z.ZodString;
+    arguments: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"tool_result">;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"complete">;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"error">;
+    message: z.ZodString;
+    timestamp: z.ZodString;
+}, z.core.$strip>], "type">;
+export type AgentExecutionInput = z.infer<typeof AgentExecutionInputSchema>;
+export type AgentExecutionOutput = z.infer<typeof AgentExecutionOutputSchema>;
+export type TokenUsage = z.infer<typeof TokenUsageSchema>;
+export type BillingContext = z.infer<typeof BillingContextSchema>;
+export type AgentExecutionStreamEvent = z.infer<typeof AgentExecutionStreamEventSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/tools/agent-execution/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/tools/agent-execution/schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;iBAU7C,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;iBAgBpC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;iBAWrC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAqC1C,CAAC;AAGH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC"}

package/dist/tools/agent-execution/schemas.js

@@ -0,0 +1,144 @@
+/**
+ * Agent Execution Tool Schemas
+ *
+ * Input/output schemas for the tools/agent-execution tool.
+ * Handles agent execution with billing integration.
+ */
+import * as z from 'zod/v4';
+/**
+ * Billing attribution: WHERE usage is recorded and WITH WHAT credential.
+ *
+ * This is a TRUSTED context. It travels on `ToolCallContext.metadata`, which only
+ * the executing surface populates — never on the tool's INPUT schema, which is
+ * filled in by a model.
+ *
+ * It used to be on the input schema. `agent-execution` declares
+ * `purpose: ['direct','worker','agent']`, so a model can call it, and the tool's
+ * own usageGuidance told the model to "pass billingContext when usage attribution
+ * is required." Downstream, `recordGenerationUsage` does:
+ *
+ *     fetch(`${accountOrigin}/api/account/billing/usage/record`,
+ *           { headers: { Authorization, Origin: callerOrigin } })
+ *
+ * so a model that filled this in could (a) omit it and get free inference — the
+ * receiver skips recording when `accountOrigin` is absent — (b) attribute its spend
+ * to another user, or (c) name an arbitrary origin and make the server POST to it
+ * with a model-chosen `Origin` header.
+ *
+ * A credential and a destination are not things a model gets to choose. Keeping
+ * this OFF the input schema is what makes that true by construction rather than
+ * by everyone remembering.
+ */
+export const BillingContextSchema = z.object({
+    accountOrigin: z.string().optional(),
+    callerOrigin: z.string().optional()
+});
+/**
+ * The trusted, surface-supplied half of an agent-execution call.
+ *
+ * Read from `ctx.metadata`. The surface (a route with a session cookie, a worker
+ * with a verified job payload) establishes these; the model cannot reach them.
+ * When one agent run calls `agent-execution` from inside a loop, the loop threads
+ * the PARENT's trusted context down — so a child inherits the real actor and the
+ * real approval channel, and cannot escalate past either.
+ */
+export const AgentExecutionTrustedContextSchema = z.object({
+    /** Who this run executes on behalf of. Checked against the agent's owner. */
+    actorUserId: z.string().optional(),
+    /** Active org established by the surface; never accepted from model input. */
+    orgId: z.string().optional(),
+    organizationId: z.string().optional(),
+    /** Where usage is billed, and with what credential. */
+    billingContext: BillingContextSchema.optional(),
+    /** The run's approval channel — an identity ("ask the human in room X"), not a capability. */
+    approvalChannel: z.unknown().optional()
+});
+/**
+ * Input schema for agent execution — the MODEL-FACING half.
+ *
+ * Every field here is attacker-controlled in the general case. Nothing that grants
+ * identity, credentials, or approval authority may be added to it. See
+ * {@link AgentExecutionTrustedContextSchema} for where those live instead.
+ */
+export const AgentExecutionInputSchema = z.object({
+    agentId: z.string().min(1).describe('ID of the agent to execute'),
+    input: z
+        .union([z.string(), z.record(z.string(), z.unknown())])
+        .describe('Input for the agent - can be string or object'),
+    options: z
+        .object({
+        modelId: z.string().optional(),
+        temperature: z.number().min(0).max(2).optional(),
+        maxTokens: z.number().int().positive().max(100000).optional(),
+        timeout: z.number().int().positive().max(300000).optional(),
+        toolIds: z.array(z.string()).optional(),
+        inheritAgentTools: z.boolean().optional(),
+        toolConfigurations: z.array(z.object({ toolId: z.string() }).passthrough()).optional()
+    })
+        .optional()
+});
+/**
+ * Token usage information
+ */
+export const TokenUsageSchema = z.object({
+    input: z.number().int().nonnegative(),
+    output: z.number().int().nonnegative(),
+    total: z.number().int().nonnegative()
+});
+/**
+ * Output schema for agent execution
+ */
+export const AgentExecutionOutputSchema = z.object({
+    status: z.enum(['completed', 'failed', 'timeout']),
+    content: z.string().describe('Generated content from the agent'),
+    output: z.object({
+        result: z.string(),
+        content: z.string()
+    }),
+    executionTimeMs: z.number().int().nonnegative(),
+    timestamp: z.iso.datetime().describe('When the execution completed (ISO 8601)'),
+    usage: TokenUsageSchema.optional().describe('Token usage statistics'),
+    metadata: z.record(z.string(), z.unknown()).optional()
+});
+/**
+ * Stream event types for streaming execution
+ */
+export const AgentExecutionStreamEventSchema = z.discriminatedUnion('type', [
+    z.object({
+        type: z.literal('status'),
+        status: z.enum(['started', 'ended']),
+        message: z.string().optional(),
+        timestamp: z.string()
+    }),
+    z.object({
+        type: z.literal('response'),
+        content: z.string()
+    }),
+    z.object({
+        type: z.literal('thinking'),
+        content: z.string()
+    }),
+    z.object({
+        type: z.literal('tool'),
+        toolCallId: z.string().optional(),
+        name: z.string(),
+        arguments: z.record(z.string(), z.unknown())
+    }),
+    z.object({
+        // Tool RESULT — carries the executed tool's structured output (e.g.
+        // `ai-generate` returns `metadata.output.images[]`). Distinct from
+        // `tool` (the call announcement) so chat surfaces can render results.
+        type: z.literal('tool_result'),
+        metadata: z.record(z.string(), z.unknown()).optional()
+    }),
+    z.object({
+        type: z.literal('complete'),
+        metadata: z.record(z.string(), z.unknown()).optional()
+    }),
+    z.object({
+        type: z.literal('error'),
+        message: z.string(),
+        timestamp: z.string()
+    })
+]);
+//# sourceMappingURL=schemas.js.map

package/dist/tools/agent-execution/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../src/tools/agent-execution/schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,6EAA6E;IAC7E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,8EAA8E;IAC9E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,uDAAuD;IACvD,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,8FAA8F;IAC9F,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACjE,KAAK,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SACtD,QAAQ,CAAC,+CAA+C,CAAC;IAC3D,OAAO,EAAE,CAAC;SACR,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;QAC7D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;QAC3D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACzC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;KACtF,CAAC;SACD,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACrC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAChE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC/E,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACrE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3E,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KAC5C,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,oEAAoE;QACpE,mEAAmE;QACnE,sEAAsE;QACtE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC;CACF,CAAC,CAAC"}

package/dist/tools/capability-bridge/catalog.d.ts

@@ -0,0 +1,10 @@
+import { readSafetyCategory } from '../schemas/system-tools.ts';
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+import type { ToolAssetDescriptor } from '../../schemas/runtime/descriptors.ts';
+export declare function bridgeInvocationUnavailableReason(descriptor: ToolAssetDescriptor): string | undefined;
+/** A descriptor's safety category, the one reader shared with the management projections. */
+export declare function getToolSafetyCategory(descriptor: ToolAssetDescriptor): ReturnType<typeof readSafetyCategory>;
+export declare function isToolCallableFromCompact(descriptor: ToolAssetDescriptor): boolean;
+export declare function listExpandableTools(runtime: VibesRuntime, ctx: ToolCallContext): Promise<ToolAssetDescriptor[]>;
+//# sourceMappingURL=catalog.d.ts.map

package/dist/tools/capability-bridge/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/tools/capability-bridge/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAahF,wBAAgB,iCAAiC,CAAC,UAAU,EAAE,mBAAmB,GAAG,MAAM,GAAG,SAAS,CAIrG;AAED,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,mBAAmB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAE5G;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,CASlF;AAED,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,eAAe,GAClB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA+BhC"}

package/dist/tools/capability-bridge/catalog.js

@@ -0,0 +1,46 @@
+import { readSafetyCategory } from "../schemas/system-tools.js";
+import { getPurposePreset, isToolEnabledForPreset, toolMatchesPattern } from "../../schemas/presets/registry.js";
+import { filterToolDescriptorsForVisibility, readToolProviderOptionsFromContext } from "../../agents/tool-provider-runtime.js";
+const BRIDGE_TOOL_IDS = new Set(['tool-search', 'tool-call']);
+export function bridgeInvocationUnavailableReason(descriptor) {
+    return descriptor.requiresApproval === true
+        ? `Tool "${descriptor.id}" requires approval. Invoke the registered tool directly through a host that can approve it; the bridge cannot verify target approval.`
+        : undefined;
+}
+/** A descriptor's safety category, the one reader shared with the management projections. */
+export function getToolSafetyCategory(descriptor) {
+    return readSafetyCategory(descriptor.safety);
+}
+export function isToolCallableFromCompact(descriptor) {
+    const actionSafety = Object.values(descriptor.schemas?.actionSafety ?? {});
+    const isActionTool = descriptor.schemas?.defaultAction !== undefined;
+    return (getToolSafetyCategory(descriptor) === 'read' &&
+        descriptor.requiresApproval !== true &&
+        (!isActionTool || actionSafety.length > 0) &&
+        actionSafety.every((category) => category === 'read'));
+}
+export async function listExpandableTools(runtime, ctx) {
+    const fullPreset = getPurposePreset('mcp:full');
+    if (!fullPreset)
+        throw new Error('Required mcp:full capability preset is not registered');
+    const explicitlyDeniedByFull = (toolId) => {
+        const configured = fullPreset.tools?.[toolId]?.enabled;
+        if (configured !== undefined)
+            return configured === false;
+        return fullPreset.disabledPatterns?.some((pattern) => toolMatchesPattern(toolId, pattern)) ?? false;
+    };
+    const availableIds = new Set(runtime.assets('tools/tool').available());
+    const descriptors = runtime
+        .query('tools/tool')
+        .enabled()
+        .descriptors();
+    const visible = await filterToolDescriptorsForVisibility(descriptors, readToolProviderOptionsFromContext(ctx)?.visibility);
+    return visible.filter((descriptor) => !BRIDGE_TOOL_IDS.has(descriptor.id) &&
+        (!descriptor.purpose || descriptor.purpose.includes('mcp')) &&
+        Boolean(descriptor.schemas?.input) &&
+        availableIds.has(descriptor.id) &&
+        !explicitlyDeniedByFull(descriptor.id) &&
+        (isToolCallableFromCompact(descriptor) ||
+            isToolEnabledForPreset(descriptor.id, fullPreset)));
+}
+//# sourceMappingURL=catalog.js.map

package/dist/tools/capability-bridge/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/tools/capability-bridge/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAIhE,OAAO,EACN,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACN,kCAAkC,EAClC,kCAAkC,EAClC,MAAM,uCAAuC,CAAC;AAE/C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE9D,MAAM,UAAU,iCAAiC,CAAC,UAA+B;IAChF,OAAO,UAAU,CAAC,gBAAgB,KAAK,IAAI;QAC1C,CAAC,CAAC,SAAS,UAAU,CAAC,EAAE,wIAAwI;QAChK,CAAC,CAAC,SAAS,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,UAA+B;IACpE,OAAO,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAA+B;IACxE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,KAAK,SAAS,CAAC;IACrE,OAAO,CACN,qBAAqB,CAAC,UAAU,CAAC,KAAK,MAAM;QAC5C,UAAU,CAAC,gBAAgB,KAAK,IAAI;QACpC,CAAC,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,YAAY,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM,CAAC,CACrD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAqB,EACrB,GAAoB;IAEpB,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1F,MAAM,sBAAsB,GAAG,CAAC,MAAc,EAAW,EAAE;QAC1D,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QACvD,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,KAAK,KAAK,CAAC;QAC1D,OAAO,UAAU,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC;IACrG,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,OAAO;SACzB,KAAK,CAA+B,YAAY,CAAC;SACjD,OAAO,EAAE;SACT,WAAW,EAAE,CAAC;IAChB,MAAM,OAAO,GAAG,MAAM,kCAAkC,CACvD,WAAW,EACX,kCAAkC,CAAC,GAAG,CAAC,EAAE,UAAU,CACnD,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,CACpB,CAAC,UAAU,EAAE,EAAE,CACd,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,CAAC,CAAC,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC;QAClC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,CAAC,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,CACC,yBAAyB,CAAC,UAAU,CAAC;YACrC,sBAAsB,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CACjD,CACF,CAAC;AACH,CAAC"}