@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.3

package/dist/execution/invoke.js

@@ -0,0 +1,130 @@
+/**
+ * invokeTool — tools-package entry point for executing a tool through the runtime.
+ *
+ * Thin wrapper around `invokeToolCore` that adds tools-specific
+ * resolution behaviour:
+ *   - discriminated/variant dispatch via the `tools/tool` accessor
+ *   - lazy implementation resolution via `runtime.resolve('tools/tool', …)`
+ *
+ * All cross-cutting concerns (hook-bus emission, timeout handling,
+ * error recovery-hint enrichment) live in {@link invokeToolCore} so the
+ * daemon RPC invoker stays in sync automatically.
+ */
+import { captureValue } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { retainInvocationResult } from '@vibesdotdev/kernel/reload';
+import { invocationOverlayForCaller } from '@vibesdotdev/kernel/schemas/scope';
+import { ToolExecutionInputSchema } from "../kinds/tool.js";
+import { invokeToolCore } from "./core.js";
+const ToolExecuteSchema = z.object({
+    execute: z.function()
+});
+export async function invokeTool(options) {
+    const { toolId, input, ctx, timeoutMs } = options;
+    const invocation = options.runtime.acquireInvocation();
+    const runtime = invocation.runtime;
+    let abandoned = false;
+    let produced;
+    const discard = async (value) => {
+        if (value instanceof ReadableStream) {
+            await value.cancel('Tool invocation ended before consuming its result');
+        }
+        else if (value instanceof Object && Symbol.asyncIterator in value) {
+            // SAFETY: value is confirmed to have Symbol.asyncIterator property
+            const iterator = value[Symbol.asyncIterator]();
+            let next = await iterator.return?.();
+            while (next && !next.done)
+                next = await iterator.next();
+        }
+    };
+    try {
+        // JSON wire check on the raw arguments, before the descriptor parse.
+        // The descriptor parse's domain value reaches the implementation and
+        // is not parsed as JSON again.
+        const wireInput = ToolExecutionInputSchema.parse(input);
+        // The caller is this invocation's actor: runtime contexts such as
+        // `agent/identity` resolve from it for the tool's whole async lifetime.
+        const result = await runtime.runInvocation(() => invokeToolCore(runtime, toolId, wireInput, ctx, {
+            timeoutMs,
+            approval: options.approval,
+            onApproval: options.onApproval,
+            runner: async (validatedInput, callCtx) => {
+                const execution = invocation.retain();
+                try {
+                    const value = await executeThroughRuntime(runtime, toolId, validatedInput, callCtx);
+                    produced = retainInvocationResult(value, execution);
+                    if (abandoned)
+                        await discard(produced);
+                    return produced;
+                }
+                finally {
+                    execution.release();
+                }
+            }
+        }), invocationOverlayForCaller(ctx.caller, ctx.workspace));
+        if (result !== produced) {
+            await discard(produced);
+            // SAFETY: caller expects type T produced by tool invocation
+            return retainInvocationResult(result, invocation);
+        }
+        // SAFETY: caller expects type T produced by tool invocation
+        return result;
+    }
+    catch (error) {
+        abandoned = true;
+        const diagnostics = runtime.diagnostics;
+        // Stream wrappers retain their lease throughout this cleanup, including
+        // when cancellation itself is slow. Preserve the caller's original error.
+        discard(produced).catch((cause) => diagnostics.error('Abandoned tool result cleanup failed', { scope: 'tools:invoke', plugin: 'tools', error: cause }));
+        throw error;
+    }
+    finally {
+        invocation.release();
+    }
+}
+async function executeThroughRuntime(runtime, toolId, input, ctx) {
+    const toolAccessor = runtime.assets('tools/tool');
+    if (toolAccessor.isDiscriminated(toolId)) {
+        // Runtime remains the first argument expected by registered variant
+        // wrappers; the call context is the distinct third argument. The old path
+        // accepted ctx and then dropped it, forcing callers toward ambient state.
+        // The tool's own variant schemas admit its input and its output; this
+        // invoker passes the output on as the variant produced it.
+        // SAFETY: executeDiscriminated produces the output variant for toolId
+        return toolAccessor.executeDiscriminated(toolId, captureValue(input ?? {}), runtime, z.unknown(), ctx);
+    }
+    const impl = await runtime.resolve('tools/tool', toolId);
+    // Two impl shapes are valid: the canonical `{ execute(input, runtime, ctx) }`
+    // object, OR a bare `export default async function tool(input, runtime, ctx)`
+    // (used by the agents-package code-session tools: file-read/write/patch,
+    // run-command, git, preview-url, agent, sandbox-execute, etc.). The runtime
+    // resolves the module's default export verbatim, so a bare-function tool
+    // arrives here as a callable with no `.execute` — invoke it directly rather
+    // than failing with "resolved without an execute() implementation".
+    let executeFn = null;
+    if (impl instanceof Function) {
+        executeFn = impl;
+    }
+    else if (ToolExecuteSchema.safeParse(impl).success) {
+        // SAFETY: ToolExecuteSchema confirmed impl has an execute method
+        executeFn = impl.execute.bind(impl);
+    }
+    if (!executeFn) {
+        // Neither a callable nor an `{execute}` object — a genuine resolution-path
+        // bug (e.g. a loader wrapper `{impl}` returned un-unwrapped, or a
+        // descriptor-only stub). Name the shape so the failure is diagnosable from
+        // the tool output instead of a bare TypeError.
+        // SAFETY: Object.keys is called on truthy impl
+        const keys = impl ? Object.keys(impl).slice(0, 8).join(',') : String(impl);
+        const implType = Object.prototype.toString.call(impl);
+        throw new Error(`Tool '${toolId}' resolved without an execute() implementation ` +
+            `(resolved shape keys: [${keys}], type: ${implType}). The runtime ` +
+            `resolution path returned a loader wrapper or stub instead of the tool impl.`);
+    }
+    // Descriptor parse already produced the domain value, including a union
+    // branch transform. Do not parse that value as JSON again.
+    const parsedInput = input;
+    // SAFETY: executeFn returns the result for this tool invocation
+    return executeFn(parsedInput, runtime, ctx);
+}
+//# sourceMappingURL=invoke.js.map

package/dist/execution/invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.js","sourceRoot":"","sources":["../../src/execution/invoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAA8E,MAAM,kBAAkB,CAAC;AACxI,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAK3C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAc,OAA0B;IACvE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAiB,CAAC;IACtB,MAAM,OAAO,GAAG,KAAK,EAAU,KAAa,EAAiB,EAAE;QAC9D,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACrC,MAAM,KAAK,CAAC,MAAM,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;aAAM,IAAI,KAAK,YAAY,MAAM,IAAI,MAAM,CAAC,aAAa,IAAI,KAAK,EAAE,CAAC;YACrE,mEAAmE;YACnE,MAAM,QAAQ,GAAI,KAAgC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3E,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;IACF,CAAC,CAAC;IACF,IAAI,CAAC;QACJ,qEAAqE;QACrE,qEAAqE;QACrE,+BAA+B;QAC/B,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,kEAAkE;QAClE,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;YAChG,SAAS;YACT,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE;gBACzC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;gBACtC,IAAI,CAAC;oBACJ,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;oBACpF,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBACpD,IAAI,SAAS;wBAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACvC,OAAO,QAAQ,CAAC;gBACjB,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;YACnC,CAAC;SACD,CAAC,EAAE,0BAA0B,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACxB,4DAA4D;YAC5D,OAAO,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAM,CAAC;QACxD,CAAC;QACD,4DAA4D;QAC5D,OAAO,MAAW,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,WAAW,GAAsB,OAAO,CAAC,WAAW,CAAC;QAC3D,wEAAwE;QACxE,0EAA0E;QAC1E,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACxJ,MAAM,KAAK,CAAC;IACb,CAAC;YAAS,CAAC;QACV,UAAU,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,qBAAqB,CACnC,OAAqB,EACrB,MAAc,EACd,KAAyB,EACzB,GAAoE;IAEpE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,oEAAoE;QACpE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,2DAA2D;QAC3D,sEAAsE;QACtE,OAAO,YAAY,CAAC,oBAAoB,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,CAAqB,CAAC;IAC5H,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAA2C,YAAY,EAAE,MAAM,CAAC,CAAC;IAEnG,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,SAAS,GAA+B,IAAI,CAAC;IACjD,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC;QAC9B,SAAS,GAAG,IAAI,CAAC;IAClB,CAAC;SAAM,IAAI,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACtD,iEAAiE;QACjE,SAAS,GAAI,IAA2B,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,2EAA2E;QAC3E,kEAAkE;QAClE,2EAA2E;QAC3E,+CAA+C;QAC/C,+CAA+C;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,KAAK,CACd,SAAS,MAAM,iDAAiD;YAC/D,0BAA0B,IAAI,YAAY,QAAQ,iBAAiB;YACnE,6EAA6E,CAC9E,CAAC;IACH,CAAC;IACD,wEAAwE;IACxE,2DAA2D;IAC3D,MAAM,WAAW,GAAG,KAAK,CAAC;IAC1B,gEAAgE;IAChE,OAAO,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAqB,CAAC;AACjE,CAAC"}

package/dist/execution/redactor.impl.consumer.d.ts

@@ -0,0 +1,12 @@
+import { type CaughtFailure } from '@vibesdotdev/kernel';
+import type { ToolAfterExecuteEvent } from '../schemas/tool-events.ts';
+export declare const REDACTION_FAILED_RESULT = "[REDACTION FAILED: tool result withheld]";
+export declare const REDACTION_FAILURE_METADATA_KEY = "tools:redactionFailure";
+declare class RedactorAfterExecuteHandler {
+    lastFailure?: CaughtFailure;
+    private recordFailure;
+    handle(event: ToolAfterExecuteEvent): Promise<void>;
+}
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<typeof RedactorAfterExecuteHandler>;
+export default _default;
+//# sourceMappingURL=redactor.impl.consumer.d.ts.map

package/dist/execution/redactor.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.impl.consumer.d.ts","sourceRoot":"","sources":["../../src/execution/redactor.impl.consumer.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,KAAK,aAAa,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,eAAO,MAAM,uBAAuB,6CAA6C,CAAC;AAClF,eAAO,MAAM,8BAA8B,2BAA2B,CAAC;AAoBvE,cAAM,2BAA2B;IAChC,WAAW,CAAC,EAAE,aAAa,CAAC;IAE5B,OAAO,CAAC,aAAa;IAKf,MAAM,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CA4BzD;;AAuBD,wBAIG"}

package/dist/execution/redactor.impl.consumer.js

@@ -0,0 +1,71 @@
+import * as z from 'zod/v4';
+import { createRuntimeImplementation, CaughtFailureSchema, CapabilityError } from '@vibesdotdev/kernel';
+export const REDACTION_FAILED_RESULT = '[REDACTION FAILED: tool result withheld]';
+export const REDACTION_FAILURE_METADATA_KEY = 'tools:redactionFailure';
+const DEFAULT_PATTERNS = [
+    { pattern: /(?<!href=")[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, replacement: '[EMAIL REDACTED]' },
+    { pattern: /\b\d{3}[-.\s]?\d{2}[-.\s]?\d{4}\b/g, replacement: '[SSN REDACTED]' },
+    { pattern: /(?<![a-zA-Z0-9])(sk-|pk_)[a-zA-Z0-9]{20,}/g, replacement: '[API KEY REDACTED]' },
+];
+const RedactorResponseSchema = z.object({
+    redacted: z.string()
+});
+const RedactorServiceSchema = z.object({
+    redact: z.function()
+});
+class RedactorAfterExecuteHandler {
+    lastFailure;
+    recordFailure(event, failure) {
+        this.lastFailure = failure;
+        withholdResult(event, failure);
+    }
+    async handle(event) {
+        if (!event || event.result === undefined || event.result === null)
+            return;
+        if (event.runtime.hasKind('security/redactor')) {
+            try {
+                const redactor = await event.runtime.query('security/redactor').first();
+                if (redactor) {
+                    // SAFETY: Query for security/redactor returns a registered redactor instance.
+                    await applyRegisteredRedactor(event, redactor);
+                    return;
+                }
+            }
+            catch (error) {
+                const failure = CaughtFailureSchema.parse(error);
+                this.recordFailure(event, failure);
+                return;
+            }
+        }
+        // Local defaults are only for runtimes without a registered redactor.
+        const stringResult = z.string().safeParse(event.result);
+        if (stringResult.success) {
+            let content = stringResult.data;
+            for (const rule of DEFAULT_PATTERNS) {
+                content = content.replace(rule.pattern, rule.replacement);
+            }
+            event.result = content;
+        }
+    }
+}
+async function applyRegisteredRedactor(event, redactor) {
+    const parsed = RedactorServiceSchema.safeParse(redactor);
+    if (!parsed.success) {
+        throw new CapabilityError('Resolved security/redactor has no redact method', 'INVALID_INPUT');
+    }
+    const rawResponse = await redactor.redact(String(event.result));
+    const response = RedactorResponseSchema.parse(rawResponse);
+    event.result = response.redacted;
+}
+function withholdResult(event, failure) {
+    event.result = REDACTION_FAILED_RESULT;
+    event.metadata.set(REDACTION_FAILURE_METADATA_KEY, {
+        message: failure instanceof Error ? failure.message : String(failure)
+    });
+}
+export default createRuntimeImplementation({
+    kind: 'runtime/subscription',
+    id: 'tools.hooks.redact-output',
+    implementation: RedactorAfterExecuteHandler
+});
+//# sourceMappingURL=redactor.impl.consumer.js.map

package/dist/execution/redactor.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.impl.consumer.js","sourceRoot":"","sources":["../../src/execution/redactor.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACN,2BAA2B,EAC3B,mBAAmB,EACnB,eAAe,EAEf,MAAM,qBAAqB,CAAC;AAG7B,MAAM,CAAC,MAAM,uBAAuB,GAAG,0CAA0C,CAAC;AAClF,MAAM,CAAC,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AAEvE,MAAM,gBAAgB,GAAG;IACxB,EAAE,OAAO,EAAE,4DAA4D,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC1G,EAAE,OAAO,EAAE,oCAAoC,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAChF,EAAE,OAAO,EAAE,4CAA4C,EAAE,WAAW,EAAE,oBAAoB,EAAE;CAC5F,CAAC;AAMF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpB,CAAC,CAAC;AAEH,MAAM,2BAA2B;IAChC,WAAW,CAAiB;IAEpB,aAAa,CAAC,KAA4B,EAAE,OAAsB;QACzE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;QAC3B,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA4B;QACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO;QAE1E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;gBACxE,IAAI,QAAQ,EAAE,CAAC;oBACd,8EAA8E;oBAC9E,MAAM,uBAAuB,CAAC,KAAK,EAAE,QAA2B,CAAC,CAAC;oBAClE,OAAO;gBACR,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACnC,OAAO;YACR,CAAC;QACF,CAAC;QAED,sEAAsE;QACtE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;gBACrC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3D,CAAC;YACD,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC;QACxB,CAAC;IACF,CAAC;CACD;AAED,KAAK,UAAU,uBAAuB,CACrC,KAA4B,EAC5B,QAAyB;IAEzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,iDAAiD,EAAE,eAAe,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3D,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CAAC,KAA4B,EAAE,OAAsB;IAC3E,KAAK,CAAC,MAAM,GAAG,uBAAuB,CAAC;IACvC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,8BAA8B,EAAE;QAClD,OAAO,EAAE,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;KACrE,CAAC,CAAC;AACJ,CAAC;AAED,eAAe,2BAA2B,CAAC;IAC1C,IAAI,EAAE,sBAAsB;IAC5B,EAAE,EAAE,2BAA2B;IAC/B,cAAc,EAAE,2BAA2B;CAC3C,CAAC,CAAC"}

package/dist/execution/redactor.subscription.descriptor.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Subscription: redact-output for tool.afterExecute.
+ *
+ * Hooks into tools.tool.afterExecute to strip sensitive credentials and PII
+ * before the result is returned to the agent / model.
+ */
+declare const _default: {
+    kind: "runtime/subscription";
+    id: string;
+    name: string;
+    description: string;
+    event: string;
+    handler: string;
+    handlerType: string;
+    enabled: true;
+    priority: number;
+};
+export default _default;
+//# sourceMappingURL=redactor.subscription.descriptor.d.ts.map

package/dist/execution/redactor.subscription.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.subscription.descriptor.d.ts","sourceRoot":"","sources":["../../src/execution/redactor.subscription.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;AAIH,wBAUG"}

package/dist/execution/redactor.subscription.descriptor.js

@@ -0,0 +1,19 @@
+/**
+ * Subscription: redact-output for tool.afterExecute.
+ *
+ * Hooks into tools.tool.afterExecute to strip sensitive credentials and PII
+ * before the result is returned to the agent / model.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    kind: 'runtime/subscription',
+    id: 'tools.hooks.redact-output',
+    name: 'Tool Output Redactor',
+    description: 'Inspects tool execution results and redacts credentials/PII before returning to the model',
+    event: 'tools.tool.afterExecute',
+    handler: 'inline',
+    handlerType: 'inline',
+    enabled: true,
+    priority: 100 // Run late so all standard filters are applied first
+});
+//# sourceMappingURL=redactor.subscription.descriptor.js.map

package/dist/execution/redactor.subscription.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.subscription.descriptor.js","sourceRoot":"","sources":["../../src/execution/redactor.subscription.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,sBAAsB;IAC5B,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,2FAA2F;IACxG,KAAK,EAAE,yBAAyB;IAChC,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,GAAG,CAAC,qDAAqD;CACnE,CAAC,CAAC"}

package/dist/execution/schemas/caller-invocation.d.ts

@@ -0,0 +1,34 @@
+import type { RuntimeInvokeWorkspace, VibesRuntime } from '@vibesdotdev/kernel';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+import type { ToolApprovalChannelDescriptor } from '@vibesdotdev/ai-schemas/agents/approval/channel';
+/** The identity fields a caller carries; each is set only when known. */
+export interface CallerIdentity {
+    sessionId?: string;
+    participantId?: string;
+    agentId?: string;
+}
+/** The identity a caller names explicitly; each wins over the harness's declared launch identity. */
+export interface CallerIdentityOptions {
+    readonly session?: string;
+    readonly participant?: string;
+    readonly agent?: string;
+}
+/** One tool run as a caller. */
+export interface CallerToolRun extends CallerIdentityOptions {
+    readonly toolId: string;
+    readonly input: unknown;
+    readonly callId: string;
+    /** The logger the call's context derives from; default `tools:caller`. */
+    readonly loggerId?: string;
+    /** Per-call execution timeout in milliseconds; omitted, none is enforced. */
+    readonly timeoutMs?: number;
+    /** The caller's cancellation: its abort reaches the tool's context signal. */
+    readonly signal?: AbortSignal;
+    readonly sendProgress?: ToolCallContext['sendProgress'];
+    readonly metadata?: ToolCallContext['metadata'];
+    readonly approval?: ToolApprovalChannelDescriptor;
+    readonly onApproval?: (approval: 'approved' | 'assumed') => Promise<void>;
+}
+/** The `workspace/bind-caller` context the workspace package registers: the call's workspace for a session. */
+export type BindCallerWorkspace = (runtime: VibesRuntime, sessionId: string) => Promise<RuntimeInvokeWorkspace | undefined>;
+//# sourceMappingURL=caller-invocation.d.ts.map

package/dist/execution/schemas/caller-invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-invocation.d.ts","sourceRoot":"","sources":["../../../src/execution/schemas/caller-invocation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iDAAiD,CAAC;AAErG,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qGAAqG;AACrG,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,gCAAgC;AAChC,MAAM,WAAW,aAAc,SAAQ,qBAAqB;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,cAAc,CAAC,CAAC;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,6BAA6B,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E;AAED,+GAA+G;AAC/G,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC"}

package/dist/execution/schemas/caller-invocation.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=caller-invocation.js.map

package/dist/execution/schemas/caller-invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-invocation.js","sourceRoot":"","sources":["../../../src/execution/schemas/caller-invocation.ts"],"names":[],"mappings":""}

package/dist/execution/schemas/host-bridge.d.ts

@@ -0,0 +1,14 @@
+import type * as z from 'zod/v4';
+export type HostBridgeValue = string | number | boolean | null | undefined | HostBridgeValue[] | {
+    [key: string]: HostBridgeValue;
+};
+/** Native JSON Schema keywords, retaining the bridge's existing support for type arrays. */
+export type HostBridgeJsonSchema = Omit<z.core.JSONSchema.JSONSchema, 'type' | 'properties' | 'additionalProperties' | 'items' | 'anyOf' | 'oneOf'> & {
+    type?: string | string[];
+    properties?: Record<string, HostBridgeJsonSchema | boolean>;
+    additionalProperties?: boolean | HostBridgeJsonSchema;
+    items?: HostBridgeJsonSchema | boolean | (HostBridgeJsonSchema | boolean)[];
+    anyOf?: HostBridgeJsonSchema[];
+    oneOf?: HostBridgeJsonSchema[];
+};
+//# sourceMappingURL=host-bridge.d.ts.map

package/dist/execution/schemas/host-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-bridge.d.ts","sourceRoot":"","sources":["../../../src/execution/schemas/host-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AAEjC,MAAM,MAAM,eAAe,GACxB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,GACT,eAAe,EAAE,GACjB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAA;CAAE,CAAC;AAEtC,4FAA4F;AAC5F,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY,GAAG,sBAAsB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,GAAG;IACrJ,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,CAAC;IAC5D,oBAAoB,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAAC;IACtD,KAAK,CAAC,EAAE,oBAAoB,GAAG,OAAO,GAAG,CAAC,oBAAoB,GAAG,OAAO,CAAC,EAAE,CAAC;IAC5E,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC/B,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAC/B,CAAC"}

package/dist/execution/schemas/host-bridge.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=host-bridge.js.map

package/dist/execution/schemas/host-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-bridge.js","sourceRoot":"","sources":["../../../src/execution/schemas/host-bridge.ts"],"names":[],"mappings":""}

package/dist/execution/schemas/input-validation.d.ts

@@ -0,0 +1,31 @@
+import * as z from 'zod/v4';
+export declare const ToolInputValidationIssueSchema: z.ZodObject<{
+    path: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+    message: z.ZodString;
+    code: z.ZodOptional<z.ZodString>;
+    allowedValues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const ToolInputValidationResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    value: z.ZodUnknown;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    issues: z.ZodArray<z.ZodObject<{
+        path: z.ZodReadonly<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+        message: z.ZodString;
+        code: z.ZodOptional<z.ZodString>;
+        allowedValues: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>], "ok">;
+export type ToolInputValidationIssue = z.output<typeof ToolInputValidationIssueSchema>;
+export type ToolInputValidationResult = z.output<typeof ToolInputValidationResultSchema>;
+export declare const ZodErrorContainerSchema: z.ZodObject<{
+    issues: z.ZodArray<z.ZodObject<{
+        path: z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+        message: z.ZodDefault<z.ZodString>;
+        code: z.ZodOptional<z.ZodString>;
+        values: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+        options: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+//# sourceMappingURL=input-validation.d.ts.map

package/dist/execution/schemas/input-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validation.d.ts","sourceRoot":"","sources":["../../../src/execution/schemas/input-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,8BAA8B;;;;;iBAKzC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;yBAG1C,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACvF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAUzF,eAAO,MAAM,uBAAuB;;;;;;;;iBAAmD,CAAC"}

package/dist/execution/schemas/input-validation.js

@@ -0,0 +1,20 @@
+import * as z from 'zod/v4';
+export const ToolInputValidationIssueSchema = z.object({
+    path: z.array(z.union([z.string(), z.number()])).readonly(),
+    message: z.string(),
+    code: z.string().optional(),
+    allowedValues: z.array(z.string()).optional()
+});
+export const ToolInputValidationResultSchema = z.discriminatedUnion('ok', [
+    z.object({ ok: z.literal(true), value: z.unknown() }),
+    z.object({ ok: z.literal(false), issues: z.array(ToolInputValidationIssueSchema) })
+]);
+const ZodRawIssueSchema = z.object({
+    path: z.array(z.union([z.string(), z.number()])).default([]),
+    message: z.string().default('Invalid input'),
+    code: z.string().optional(),
+    values: z.array(z.union([z.string(), z.number(), z.boolean()])).optional(),
+    options: z.array(z.union([z.string(), z.number(), z.boolean()])).optional()
+});
+export const ZodErrorContainerSchema = z.object({ issues: z.array(ZodRawIssueSchema) });
+//# sourceMappingURL=input-validation.js.map

package/dist/execution/schemas/input-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validation.js","sourceRoot":"","sources":["../../../src/execution/schemas/input-validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACrD,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC;CACnF,CAAC,CAAC;AAKH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC"}

package/dist/execution/schemas/invoke.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Type contracts for {@link ../invoke.ts | `invokeTool`}.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel/api/runtime';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+import type { ToolInvocationErrorMetadata as CoreToolInvocationErrorMetadata } from '../core.ts';
+import type { ToolApprovalChannelDescriptor } from '@vibesdotdev/ai-schemas/agents/approval/channel';
+export interface InvokeToolOptions {
+    runtime: VibesRuntime;
+    toolId: string;
+    input: unknown;
+    ctx: ToolCallContext;
+    /** Explicit approval channel, reconstructed by the executing Tools owner after preflight. */
+    approval?: ToolApprovalChannelDescriptor;
+    /** Trusted owner observation; a refusal prevents implementation admission. */
+    onApproval?: (approval: 'approved' | 'assumed') => Promise<void>;
+    /**
+     * Per-call execution timeout in milliseconds. Forwarded to
+     * {@link invokeToolCore}. Omit to disable timeout enforcement.
+     */
+    timeoutMs?: number;
+}
+/** Errors thrown by tools after subscribers have run may carry these fields. */
+export type ToolInvocationErrorMetadata = CoreToolInvocationErrorMetadata;
+//# sourceMappingURL=invoke.d.ts.map

package/dist/execution/schemas/invoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../../src/execution/schemas/invoke.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,2BAA2B,IAAI,+BAA+B,EAAE,MAAM,YAAY,CAAC;AACjG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iDAAiD,CAAC;AAErG,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,eAAe,CAAC;IACrB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,6BAA6B,CAAC;IACzC,8EAA8E;IAC9E,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,gFAAgF;AAChF,MAAM,MAAM,2BAA2B,GAAG,+BAA+B,CAAC"}

package/dist/execution/schemas/invoke.js

@@ -0,0 +1,5 @@
+/**
+ * Type contracts for {@link ../invoke.ts | `invokeTool`}.
+ */
+export {};
+//# sourceMappingURL=invoke.js.map

package/dist/execution/schemas/invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.js","sourceRoot":"","sources":["../../../src/execution/schemas/invoke.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/execution/tier-enforcement.errors.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Pure error types for capability-tier enforcement (framework-safe exports).
+ * Implementation lives in tier-enforcement.impl.consumer.ts (loaded via runtime).
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+export declare class CapabilityTierExceededError extends CapabilityError {
+    readonly toolId: string;
+    readonly toolTier: string;
+    readonly agentCeiling: string;
+    constructor(toolId: string, toolTier: string, agentCeiling: string);
+}
+export declare class ToolCapabilityMissingError extends CapabilityError {
+    readonly toolId: string;
+    constructor(toolId: string);
+}
+//# sourceMappingURL=tier-enforcement.errors.d.ts.map

package/dist/execution/tier-enforcement.errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier-enforcement.errors.d.ts","sourceRoot":"","sources":["../../src/execution/tier-enforcement.errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,qBAAa,2BAA4B,SAAQ,eAAe;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAElB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;CAclE;AAED,qBAAa,0BAA2B,SAAQ,eAAe;IAC9D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,MAAM,EAAE,MAAM;CAY1B"}

package/dist/execution/tier-enforcement.errors.js

@@ -0,0 +1,32 @@
+/**
+ * Pure error types for capability-tier enforcement (framework-safe exports).
+ * Implementation lives in tier-enforcement.impl.consumer.ts (loaded via runtime).
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+export class CapabilityTierExceededError extends CapabilityError {
+    toolId;
+    toolTier;
+    agentCeiling;
+    constructor(toolId, toolTier, agentCeiling) {
+        super(`Capability tier exceeded: tool '${toolId}' requires tier '${toolTier}' but agent ceiling is '${agentCeiling}'`, 'PERMISSION_DENIED', {
+            reason: 'capability-tier-exceeded',
+            details: { toolId, toolTier, agentCeiling }
+        });
+        this.name = 'CapabilityTierExceededError';
+        this.toolId = toolId;
+        this.toolTier = toolTier;
+        this.agentCeiling = agentCeiling;
+    }
+}
+export class ToolCapabilityMissingError extends CapabilityError {
+    toolId;
+    constructor(toolId) {
+        super(`Tool '${toolId}' is missing capability.tier. Registration without tier is deprecated and will soon be rejected.`, 'INVALID_INPUT', {
+            reason: 'tool-capability-missing',
+            details: { toolId }
+        });
+        this.name = 'ToolCapabilityMissingError';
+        this.toolId = toolId;
+    }
+}
+//# sourceMappingURL=tier-enforcement.errors.js.map

package/dist/execution/tier-enforcement.errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier-enforcement.errors.js","sourceRoot":"","sources":["../../src/execution/tier-enforcement.errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,OAAO,2BAA4B,SAAQ,eAAe;IACtD,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,YAAY,CAAS;IAE9B,YAAY,MAAc,EAAE,QAAgB,EAAE,YAAoB;QACjE,KAAK,CACJ,mCAAmC,MAAM,oBAAoB,QAAQ,2BAA2B,YAAY,GAAG,EAC/G,mBAAmB,EACnB;YACC,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE;SAC3C,CACD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IAClC,CAAC;CACD;AAED,MAAM,OAAO,0BAA2B,SAAQ,eAAe;IACrD,MAAM,CAAS;IAExB,YAAY,MAAc;QACzB,KAAK,CACJ,SAAS,MAAM,kGAAkG,EACjH,eAAe,EACf;YACC,MAAM,EAAE,yBAAyB;YACjC,OAAO,EAAE,EAAE,MAAM,EAAE;SACnB,CACD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD"}

package/dist/execution/tier-enforcement.impl.consumer.d.ts

@@ -0,0 +1,10 @@
+import type { ToolBeforeExecuteEvent } from '../schemas/tool-events.ts';
+export { CapabilityTierExceededError, ToolCapabilityMissingError } from './tier-enforcement.errors.ts';
+declare class TierEnforcementHandler {
+    handle(event: ToolBeforeExecuteEvent): Promise<void>;
+    private resolveToolDescriptor;
+    private getAgentCapabilityCeiling;
+}
+declare const _default: import("@vibesdotdev/kernel").RuntimeImplementationWrapper<typeof TierEnforcementHandler>;
+export default _default;
+//# sourceMappingURL=tier-enforcement.impl.consumer.d.ts.map

package/dist/execution/tier-enforcement.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tier-enforcement.impl.consumer.d.ts","sourceRoot":"","sources":["../../src/execution/tier-enforcement.impl.consumer.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAiBxE,OAAO,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AA2BvG,cAAM,sBAAsB;IACrB,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;YAkD5C,qBAAqB;IAiBnC,OAAO,CAAC,yBAAyB;CA2BjC;;AAED,wBAIG"}