@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.3

package/dist/providers/remote/tool-provider.remote.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-provider.remote.impl.consumer.d.ts","sourceRoot":"","sources":["../../../src/providers/remote/tool-provider.remote.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,EACX,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAUxE,kDAAkD;AAClD,eAAO,MAAM,uBAAuB,QAAkB,CAAC;AAgHvD;;;;;GAKG;AACH,qBAAa,kBAAmB,YAAW,qBAAqB;IAC/D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;gBAElC,UAAU,EAAE,sBAAsB,EAAE,OAAO,EAAE,mBAAmB;IAM5E;;;;;;;OAOG;IACG,SAAS,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IA8C5C,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAAG,MAAM,IAAI;IAI9D;;;OAGG;IACH,OAAO,CAAC,aAAa;IAUrB,oGAAoG;YACtF,iBAAiB;YAgBjB,YAAY;CAa1B;AAED,eAAe,kBAAkB,CAAC"}

package/dist/providers/remote/tool-provider.remote.impl.consumer.js

@@ -0,0 +1,235 @@
+/**
+ * Remote Tool Provider Implementation
+ *
+ * Fetches tool descriptors from remote registries.
+ * Read-only - remote registries are managed externally.
+ *
+ * A registry URL is a public https URL without userinfo (its credential is the
+ * configured `token`, sent as a bearer). No registry URL, token, error message
+ * or stack reaches a log line or a failure: logs and failures name a registry
+ * by its type and host, and a registry failure is a typed `CapabilityError`
+ * carrying only value-free facts. Bodies are read through a byte cap and
+ * parsed item by item: a malformed descriptor is skipped and counted.
+ */
+import * as z from 'zod/v4';
+import { resolveRemoteToolRegistries } from "../../config/load.js";
+import { CapabilityError, CaughtFailureSchema, VibesRuntime, valueFreeFailure } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { getLogger } from '@vibesdotdev/logging';
+import { checkPublicHttpsUrl } from '@vibesdotdev/shared/networking/ssrf';
+import { readBoundedText, rejectedResponse, requestSecrets } from "../../shared/http-failure.js";
+import { parseToolDescriptors } from "../catalog-wire.js";
+/** The most bytes of one registry answer read. */
+export const MAX_REGISTRY_BODY_BYTES = 8 * 1024 * 1024;
+/** A vibes/custom registry answer: `{ tools: [...] }`. */
+const ToolListBodySchema = z.object({ tools: z.array(JsonValueSchema) });
+/** An npm search answer: `{ objects: [...] }`. */
+const NpmSearchBodySchema = z.object({ objects: z.array(JsonValueSchema) });
+/** One npm search result carrying `package.vibes.tool` metadata; each field read on its own. */
+const NpmSearchResultSchema = z.object({
+    package: z.object({
+        name: z.string().min(1),
+        description: z.string().optional().catch(undefined),
+        keywords: z.array(z.unknown()).optional().catch(undefined),
+        vibes: z.object({ tool: z.record(z.string(), JsonValueSchema) })
+    })
+});
+/** A registry as logs and failures may name it: its type and host only. */
+function registryLabel(registry) {
+    return { type: registry.type, host: URL.canParse(registry.url) ? new URL(registry.url).host : 'unparseable' };
+}
+/** The registry URL checked as a public https URL without userinfo, or the typed refusal (which never repeats the URL). */
+function assertSafeRegistryUrl(url) {
+    const check = checkPublicHttpsUrl(url);
+    if (!check.ok) {
+        throw new CapabilityError(`Registry URL rejected: ${check.reason}`, 'INVALID_INPUT', {
+            reason: 'unsafe-url',
+            details: { reason: check.reason }
+        });
+    }
+    if (check.url.username !== '' || check.url.password !== '') {
+        throw new CapabilityError('Registry URL rejected: credentials in the URL are not allowed; configure the registry token instead.', 'INVALID_INPUT', {
+            reason: 'url-userinfo',
+            retryable: false
+        });
+    }
+    return check.url.toString();
+}
+function registryInvalid(registry, cause) {
+    return new CapabilityError('The registry answered with a body that is not a tool list.', 'UNAVAILABLE', {
+        reason: 'registry-response-invalid',
+        retryable: false,
+        details: { ...registryLabel(registry), cause }
+    });
+}
+/** GET `url` from `registry`; a non-2xx answer, an oversized body or non-JSON text is the typed failure. */
+async function getJson(registry, url, headers) {
+    const secrets = requestSecrets(url, registry.token ? [registry.token] : []);
+    const init = { redirect: 'error' };
+    if (Object.keys(headers).length > 0)
+        init.headers = headers;
+    const response = await fetch(url, init);
+    if (!response.ok)
+        throw await rejectedResponse(response, { service: 'The tool registry', reason: 'registry-rejected', secrets });
+    const read = await readBoundedText(response, MAX_REGISTRY_BODY_BYTES);
+    if (read.truncated)
+        throw registryInvalid(registry, 'too-large');
+    try {
+        return JsonValueSchema.parse(JSON.parse(read.text));
+    }
+    catch (error) {
+        throw new CapabilityError('The registry answered with text that is not JSON.', 'UNAVAILABLE', {
+            reason: 'registry-response-invalid',
+            retryable: false,
+            details: { ...registryLabel(registry), cause: 'not-json' },
+            cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+        });
+    }
+}
+/** A `{ tools: [...] }` answer as descriptors, item by item. */
+function readToolList(registry, body) {
+    const parsed = ToolListBodySchema.safeParse(body);
+    if (!parsed.success)
+        throw registryInvalid(registry, 'no-tools-list');
+    return parseToolDescriptors(parsed.data.tools);
+}
+/** An npm search answer as descriptors: each `package.vibes.tool` result becomes one, checked like any other descriptor. */
+function readNpmSearch(registry, body) {
+    const parsed = NpmSearchBodySchema.safeParse(body);
+    if (!parsed.success)
+        throw registryInvalid(registry, 'no-objects-list');
+    const candidates = [];
+    let skipped = 0;
+    for (const object of parsed.data.objects) {
+        const result = NpmSearchResultSchema.safeParse(object);
+        if (!result.success) {
+            skipped++;
+            continue;
+        }
+        const pkg = result.data.package;
+        const tool = pkg.vibes.tool;
+        const toolName = z.string().safeParse(tool.name);
+        const candidate = {
+            id: pkg.name,
+            kind: 'tools/tool',
+            name: toolName.success ? toolName.data : pkg.name,
+            tags: (pkg.keywords ?? []).filter((keyword) => z.string().safeParse(keyword).success),
+            schemas: { input: {}, output: {} },
+            ...tool
+        };
+        candidates.push(pkg.description === undefined ? candidate : { description: pkg.description, ...candidate });
+    }
+    const read = parseToolDescriptors(candidates);
+    return { tools: read.tools, skipped: read.skipped + skipped };
+}
+/**
+ * Remote Tool Provider
+ *
+ * Fetches tools from configured remote registries.
+ * Supports npm packages, vibes registry, and custom endpoints.
+ */
+export class RemoteToolProvider {
+    id;
+    descriptor;
+    context;
+    constructor(descriptor, context) {
+        this.id = descriptor.id;
+        this.descriptor = descriptor;
+        this.context = context;
+    }
+    /**
+     * Load tool descriptors from remote registries.
+     *
+     * Per-registry failures are logged (type and host, value-free facts). If
+     * registries are configured and *all* fail, throw — a silent empty catalog is
+     * the vanish-class bug. Partial success returns tools from healthy registries
+     * and reports the failed ones.
+     */
+    async loadTools() {
+        const runtime = this.handedRuntime();
+        const registries = await resolveRemoteToolRegistries(runtime);
+        if (registries.length === 0) {
+            return [];
+        }
+        const logger = getLogger('tools', runtime).child('remote-provider');
+        const tools = [];
+        const failures = [];
+        for (const registry of registries) {
+            const outcome = await this.fetchFromRegistry(registry);
+            if (!outcome.ok) {
+                failures.push(outcome.failure);
+                logger.error('Failed to fetch tools from remote registry', { ...registryLabel(registry), error: outcome.failure });
+                continue;
+            }
+            tools.push(...outcome.read.tools);
+            if (outcome.read.skipped > 0) {
+                logger.warn('Skipped registry tool descriptors that do not parse', { ...registryLabel(registry), skipped: outcome.read.skipped });
+            }
+        }
+        if (tools.length === 0 && failures.length > 0) {
+            throw new CapabilityError(`Remote tool provider: all ${failures.length} configured registries failed. This is not an empty catalog.`, 'UNAVAILABLE', {
+                reason: 'remote-registries-failed',
+                details: { failures: failures.map((failure) => ({ code: failure.code, reason: failure.reason })) },
+                cause: failures[0]
+            });
+        }
+        if (failures.length > 0) {
+            logger.warn('Some remote tool registries failed; returning tools from the healthy ones', {
+                failed: failures.length,
+                registries: registries.length,
+                tools: tools.length
+            });
+        }
+        return tools;
+    }
+    watch(_callback) {
+        return () => { };
+    }
+    /**
+     * The runtime the kernel handed this provider (`context.runtime`): it
+     * resolves the configured registries' credentials and owns the Logging.
+     */
+    handedRuntime() {
+        const runtime = this.context.runtime;
+        if (!(runtime instanceof VibesRuntime)) {
+            throw new CapabilityError('The remote tool provider was constructed without its runtime.', 'INTERNAL', {
+                reason: 'runtime-missing'
+            });
+        }
+        return runtime;
+    }
+    /** One registry's descriptors, or its typed failure (a thrown fetch error's text is never kept). */
+    async fetchFromRegistry(registry) {
+        try {
+            return { ok: true, read: await this.readRegistry(registry) };
+        }
+        catch (error) {
+            if (error instanceof CapabilityError)
+                return { ok: false, failure: error };
+            return {
+                ok: false,
+                failure: new CapabilityError('The tool registry could not be reached.', 'UNAVAILABLE', {
+                    reason: 'registry-unreachable',
+                    details: { ...registryLabel(registry), failure: valueFreeFailure(CaughtFailureSchema.parse(error)).name },
+                    cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+                })
+            };
+        }
+    }
+    async readRegistry(registry) {
+        const bearer = {};
+        if (registry.token)
+            bearer.Authorization = `Bearer ${registry.token}`;
+        const base = assertSafeRegistryUrl(registry.url);
+        switch (registry.type) {
+            case 'vibes':
+                return readToolList(registry, await getJson(registry, `${base.replace(/\/$/, '')}/tools`, { 'Content-Type': 'application/json', ...bearer }));
+            case 'npm':
+                return readNpmSearch(registry, await getJson(registry, base, bearer));
+            case 'custom':
+                return readToolList(registry, await getJson(registry, base, { 'Content-Type': 'application/json', ...bearer }));
+        }
+    }
+}
+export default RemoteToolProvider;
+//# sourceMappingURL=tool-provider.remote.impl.consumer.js.map

package/dist/providers/remote/tool-provider.remote.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-provider.remote.impl.consumer.js","sourceRoot":"","sources":["../../../src/providers/remote/tool-provider.remote.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAQ5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC3G,OAAO,EAAE,eAAe,EAAkB,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAwB,MAAM,oBAAoB,CAAC;AAEhF,kDAAkD;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvD,0DAA0D;AAC1D,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;AACzE,kDAAkD;AAClD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;AAC5E,gGAAgG;AAChG,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACnD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,EAAE,CAAC;KAChE,CAAC;CACF,CAAC,CAAC;AAOH,2EAA2E;AAC3E,SAAS,aAAa,CAAC,QAAwB;IAC9C,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;AAC/G,CAAC;AAED,2HAA2H;AAC3H,SAAS,qBAAqB,CAAC,GAAW;IACzC,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,0BAA0B,KAAK,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE;YACpF,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;SACjC,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CAAC,sGAAsG,EAAE,eAAe,EAAE;YAClJ,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,QAAwB,EAAE,KAAa;IAC/D,OAAO,IAAI,eAAe,CAAC,4DAA4D,EAAE,aAAa,EAAE;QACvG,MAAM,EAAE,2BAA2B;QACnC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE;KAC9C,CAAC,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,KAAK,UAAU,OAAO,CAAC,QAAwB,EAAE,GAAW,EAAE,OAA+B;IAC5F,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,MAAM,gBAAgB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;IACjI,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,SAAS;QAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACjE,IAAI,CAAC;QACJ,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,aAAa,EAAE;YAC7F,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE;YAC1D,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACzD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,gEAAgE;AAChE,SAAS,YAAY,CAAC,QAAwB,EAAE,IAAe;IAC9D,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACtE,OAAO,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,4HAA4H;AAC5H,SAAS,aAAa,CAAC,QAAwB,EAAE,IAAe;IAC/D,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,eAAe,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACxE,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;YACV,SAAS;QACV,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG;YACjB,EAAE,EAAE,GAAG,CAAC,IAAI;YACZ,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;YACjD,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YACxG,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAClC,GAAG,IAAI;SAC6B,CAAC;QACtC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;AAC/D,CAAC;AAKD;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IACrB,EAAE,CAAS;IACX,UAAU,CAAyB;IAC3B,OAAO,CAAsB;IAE9C,YAAY,UAAkC,EAAE,OAA4B;QAC3E,IAAI,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACX,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC/B,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnH,SAAS;YACV,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACnI,CAAC;QACF,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CACxB,6BAA6B,QAAQ,CAAC,MAAM,8DAA8D,EAC1G,aAAa,EACb;gBACC,MAAM,EAAE,0BAA0B;gBAClC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE;gBAClG,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;aAClB,CACD,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,2EAA2E,EAAE;gBACxF,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,UAAU,CAAC,MAAM;gBAC7B,KAAK,EAAE,KAAK,CAAC,MAAM;aACnB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAA2C;QAChD,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,aAAa;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QACrC,IAAI,CAAC,CAAC,OAAO,YAAY,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,+DAA+D,EAAE,UAAU,EAAE;gBACtG,MAAM,EAAE,iBAAiB;aACzB,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,oGAAoG;IAC5F,KAAK,CAAC,iBAAiB,CAAC,QAAwB;QACvD,IAAI,CAAC;YACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,eAAe;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC3E,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,IAAI,eAAe,CAAC,yCAAyC,EAAE,aAAa,EAAE;oBACtF,MAAM,EAAE,sBAAsB;oBAC9B,OAAO,EAAE,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;oBACzG,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;iBACzD,CAAC;aACF,CAAC;QACH,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAwB;QAClD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,KAAK;YAAE,MAAM,CAAC,aAAa,GAAG,UAAU,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACvB,KAAK,OAAO;gBACX,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;YAC/I,KAAK,KAAK;gBACT,OAAO,aAAa,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACvE,KAAK,QAAQ;gBACZ,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;QAClH,CAAC;IACF,CAAC;CACD;AAED,eAAe,kBAAkB,CAAC"}

package/dist/runnable/executor.d.ts

@@ -0,0 +1,82 @@
+import { type KindContext, type RuntimeDescriptor, type VibesRuntime } from '@vibesdotdev/kernel';
+import { type RunnableExecutionInput, type RunnableExecutorImplementation, type RunHandle } from '@vibesdotdev/runnable';
+/** Runnable is an observer of the canonical invocation pipeline, including approval. */
+export default class ToolRunnableExecutor implements RunnableExecutorImplementation {
+    private readonly context;
+    constructor(_descriptor: RuntimeDescriptor, context: KindContext<VibesRuntime>);
+    execute(input: RunnableExecutionInput, handle?: RunHandle, options?: {
+        signal?: AbortSignal;
+    }): Promise<{
+        status: "done";
+        value: import("@vibesdotdev/kernel/bootstrap").JsonValue;
+    } | {
+        status: "not-done";
+        reason: string;
+        value?: import("@vibesdotdev/kernel/bootstrap").JsonValue | undefined;
+        failure?: {
+            code: string;
+            message: string;
+            name?: string | undefined;
+            reason?: string | undefined;
+            retryable?: boolean | undefined;
+            recoveryHint?: string | undefined;
+            details?: import("@vibesdotdev/kernel/bootstrap").JsonValue | undefined;
+        } | undefined;
+    } | {
+        status: "disputed";
+        why: string;
+        claims: {
+            id: string;
+            statement: string;
+            quote: {
+                link: {
+                    kind: string;
+                    id: string;
+                    source: string;
+                    role: string;
+                };
+                scope: string;
+                revision: {
+                    scheme: string;
+                    value: string;
+                };
+                text: string;
+                anchor?: {
+                    kind: "code";
+                    path: string;
+                    startLine: number;
+                    endLine: number;
+                } | {
+                    kind: "region";
+                    start: number;
+                    end: number;
+                } | {
+                    kind: "fragment";
+                    id: string;
+                } | {
+                    kind: "heading";
+                    slug: string;
+                } | undefined;
+                freshness?: {
+                    modifiedAt?: string | undefined;
+                    stale?: boolean | undefined;
+                } | undefined;
+            };
+            via: string[];
+            stale?: boolean | undefined;
+        }[];
+    } | {
+        status: "skipped";
+        reason: string;
+        cause: {
+            kind: "cancelled";
+            provenance: import("@vibesdotdev/kernel/bootstrap").JsonValue;
+        } | {
+            kind: "explicit";
+        } | {
+            kind: "dependency";
+            blockedBy: string[];
+        };
+    }>;
+}
+//# sourceMappingURL=executor.d.ts.map

package/dist/runnable/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/runnable/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,WAAW,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE1G,OAAO,EAA0E,KAAK,sBAAsB,EAAE,KAAK,8BAA8B,EAAE,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAMjM,wFAAwF;AACxF,MAAM,CAAC,OAAO,OAAO,oBAAqB,YAAW,8BAA8B;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAxD,WAAW,EAAE,iBAAiB,EAAmB,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC;IAEzF,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BnG"}

package/dist/runnable/executor.js

@@ -0,0 +1,48 @@
+import { settle } from '@vibesdotdev/kernel';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { done, OutcomeSchema, RUN_APPROVAL_EVENT, RUN_EXECUTION_REFERENCE_EVENT } from '@vibesdotdev/runnable';
+import { invokeToolAsCaller } from "../execution/caller-invocation.js";
+import { ToolRunnableSettingsSchema } from "./schemas.js";
+import { getVibesConfigClient } from '@vibesdotdev/config/client';
+import { ToolApprovalChannelDescriptorSchema } from '@vibesdotdev/ai-schemas/agents/approval/channel';
+/** Runnable is an observer of the canonical invocation pipeline, including approval. */
+export default class ToolRunnableExecutor {
+    context;
+    constructor(_descriptor, context) {
+        this.context = context;
+    }
+    async execute(input, handle, options) {
+        const settings = ToolRunnableSettingsSchema.parse(input.settings);
+        const callId = crypto.randomUUID();
+        const approval = settings.approval && 'config' in settings.approval
+            ? await (await getVibesConfigClient(this.context.runtime)).readField(settings.approval.config, ToolApprovalChannelDescriptorSchema.optional())
+            : settings.approval;
+        await handle?.event(RUN_EXECUTION_REFERENCE_EVENT, { executionReference: callId });
+        const progressWrites = [];
+        const result = await settle(() => invokeToolAsCaller(this.context.runtime, {
+            toolId: settings.tool,
+            input: { ...settings.input, ...input.config },
+            callId,
+            approval,
+            onApproval: async (approval) => { await handle?.event(RUN_APPROVAL_EVENT, { approval }); },
+            signal: options?.signal,
+            sendProgress: (progress) => {
+                progressWrites.push(settle(() => handle?.event('tool.progress', {
+                    progress: progress.progress ?? null, total: progress.total ?? null, message: progress.message ?? null
+                })));
+            }
+        }));
+        const observations = await Promise.all(progressWrites);
+        const failures = observations.flatMap((observation) => observation.ok ? [] : [observation.cause]);
+        if (!result.ok)
+            failures.unshift(result.cause);
+        if (failures.length === 1)
+            throw failures[0];
+        if (failures.length > 1)
+            throw new AggregateError(failures, 'Tool execution and progress reporting failed.');
+        if (!result.ok)
+            throw result.cause;
+        return settings.outputMode === 'outcome' ? OutcomeSchema.parse(result.value) : done(JsonValueSchema.parse(result.value));
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/runnable/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/runnable/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA+D,MAAM,qBAAqB,CAAC;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,kBAAkB,EAAE,6BAA6B,EAAoF,MAAM,uBAAuB,CAAC;AACjM,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,mCAAmC,EAAE,MAAM,iDAAiD,CAAC;AAEtG,wFAAwF;AACxF,MAAM,CAAC,OAAO,OAAO,oBAAoB;IACqB;IAA7D,YAAY,WAA8B,EAAmB,OAAkC;QAAlC,YAAO,GAAP,OAAO,CAA2B;IAAG,CAAC;IAEnG,KAAK,CAAC,OAAO,CAAC,KAA6B,EAAE,MAAkB,EAAE,OAAkC;QAClG,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ;YAClE,CAAC,CAAC,MAAM,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC,QAAQ,EAAE,CAAC;YAC9I,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrB,MAAM,MAAM,EAAE,KAAK,CAAC,6BAA6B,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,MAAM,cAAc,GAAqC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;YAC1E,MAAM,EAAE,QAAQ,CAAC,IAAI;YACrB,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;YAC7C,MAAM;YACN,QAAQ;YACR,UAAU,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE,GAAG,MAAM,MAAM,EAAE,KAAK,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACxF,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC1B,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE;oBAC/D,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI;iBACrG,CAAC,CAAC,CAAC,CAAC;YACN,CAAC;SACD,CAAC,CAAC,CAAC;QACJ,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAClG,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,+CAA+C,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,MAAM,CAAC,KAAK,CAAC;QACnC,OAAO,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1H,CAAC;CACD"}

package/dist/runnable/plugin.d.ts

@@ -0,0 +1,3 @@
+declare const toolsRunnablePlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default toolsRunnablePlugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/runnable/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/runnable/plugin.ts"],"names":[],"mappings":"AAGA,QAAA,MAAM,mBAAmB,6CASvB,CAAC;AAEH,eAAe,mBAAmB,CAAC"}

package/dist/runnable/plugin.js

@@ -0,0 +1,14 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import { RunnableTypeDescriptorSchema, RunnableExecutorDescriptorSchema } from '@vibesdotdev/runnable/schemas/descriptors';
+const toolsRunnablePlugin = createRuntimePlugin({
+    id: 'tools/runnable',
+    name: 'Tool runnable execution',
+    dependencies: ['tools', 'runnable'],
+    descriptors: [
+        RunnableTypeDescriptorSchema.parse({ id: 'tool', kind: 'runnable/type', name: 'Tool', category: 'test' }),
+        RunnableExecutorDescriptorSchema.parse({ id: 'tools.runnable', kind: 'runnable/executor', runnableType: 'tool' })
+    ],
+    loaders: [loader('tools.runnable', { kind: 'runnable/executor' }, () => import("./executor.js"))]
+});
+export default toolsRunnablePlugin;
+//# sourceMappingURL=plugin.js.map

package/dist/runnable/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/runnable/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAE3H,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;IAC/C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,yBAAyB;IAC/B,YAAY,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;IACnC,WAAW,EAAE;QACZ,4BAA4B,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACzG,gCAAgC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;KACjH;IACD,OAAO,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;CACjG,CAAC,CAAC;AAEH,eAAe,mBAAmB,CAAC"}

package/dist/runnable/schemas.d.ts

@@ -0,0 +1,26 @@
+import * as z from 'zod/v4';
+export declare const ToolRunnableSettingsSchema: z.ZodObject<{
+    tool: z.ZodString;
+    input: z.ZodDefault<z.ZodType<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject>>>;
+    approval: z.ZodOptional<z.ZodUnion<readonly [z.ZodPipe<z.ZodObject<{
+        channel: z.ZodString;
+        correlation: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodOptional<z.ZodString>>>;
+    }, z.core.$strict>, z.ZodTransform<{
+        channel: string;
+        correlation?: Record<string, string> | undefined;
+    }, {
+        channel: string;
+        correlation?: Record<string, string | undefined> | undefined;
+    }>>, z.ZodObject<{
+        config: z.ZodObject<{
+            id: z.ZodString;
+            field: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>]>>;
+    outputMode: z.ZodDefault<z.ZodEnum<{
+        value: "value";
+        outcome: "outcome";
+    }>>;
+}, z.core.$strip>;
+export type ToolRunnableSettings = z.infer<typeof ToolRunnableSettingsSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/runnable/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/runnable/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;iBAMrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/runnable/schemas.js

@@ -0,0 +1,11 @@
+import * as z from 'zod/v4';
+import { JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+import { ToolApprovalConfigurationSchema } from '@vibesdotdev/ai-schemas/agents/approval/channel';
+export const ToolRunnableSettingsSchema = z.object({
+    tool: z.string().min(1),
+    /** Fixed defaults; the invocation's owner-validated input wins. */
+    input: JsonObjectSchema.default({}),
+    approval: ToolApprovalConfigurationSchema.optional(),
+    outputMode: z.enum(['value', 'outcome']).default('value')
+});
+//# sourceMappingURL=schemas.js.map

package/dist/runnable/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/runnable/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAElG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,mEAAmE;IACnE,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IACpD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CACzD,CAAC,CAAC"}

package/dist/schemas/access.d.ts

@@ -0,0 +1,60 @@
+import z from 'zod/v4';
+/**
+ * Context for tool access checks
+ */
+export declare const toolAccessContextSchema: z.ZodObject<{
+    userId: z.ZodString;
+    agentId: z.ZodString;
+    toolId: z.ZodString;
+    chatRoomId: z.ZodOptional<z.ZodUUID>;
+}, z.core.$strip>;
+export type ToolAccessContext = z.infer<typeof toolAccessContextSchema>;
+/**
+ * Result of an access check
+ */
+export declare const toolAccessResultSchema: z.ZodObject<{
+    allowed: z.ZodBoolean;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ToolAccessResult = z.infer<typeof toolAccessResultSchema>;
+/**
+ * Request to get available tools for an agent
+ */
+export declare const getAvailableToolsRequestSchema: z.ZodObject<{
+    userId: z.ZodString;
+    agentId: z.ZodString;
+    chatRoomId: z.ZodOptional<z.ZodUUID>;
+}, z.core.$strip>;
+export type GetAvailableToolsRequest = z.infer<typeof getAvailableToolsRequestSchema>;
+/**
+ * Request to check if user can see agent's tool configuration
+ */
+export declare const canUserSeeAgentToolRequestSchema: z.ZodObject<{
+    userId: z.ZodString;
+    agentId: z.ZodString;
+    toolId: z.ZodString;
+}, z.core.$strip>;
+export type CanUserSeeAgentToolRequest = z.infer<typeof canUserSeeAgentToolRequestSchema>;
+/**
+ * Request to check room-level tool configuration permissions
+ */
+export declare const canUserConfigureRoomToolsRequestSchema: z.ZodObject<{
+    userId: z.ZodString;
+    chatRoomId: z.ZodUUID;
+}, z.core.$strip>;
+export type CanUserConfigureRoomToolsRequest = z.infer<typeof canUserConfigureRoomToolsRequestSchema>;
+export declare const ORG_SCOPED_TOOL_TAG_PREFIX: "org:";
+export interface OrgScopedToolVisibilityPrincipal {
+    orgs?: readonly {
+        id: string;
+    }[];
+    staff?: boolean;
+    isSuperuser?: boolean;
+}
+export interface OrgScopedToolTaggedItem {
+    tags?: readonly string[];
+}
+export type OrgScopedToolSlugResolver = (slug: string) => string | null | undefined | Promise<string | null | undefined>;
+export declare function readOrgScopedToolTagSlugs(tags: readonly string[] | undefined): string[];
+export declare function filterOrgScopedToolDescriptors<T extends OrgScopedToolTaggedItem>(items: readonly T[], principal: OrgScopedToolVisibilityPrincipal | null | undefined, resolveOrgIdBySlug: OrgScopedToolSlugResolver): Promise<T[]>;
+//# sourceMappingURL=access.d.ts.map

package/dist/schemas/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/schemas/access.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,QAAQ,CAAC;AAIvB;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;iBAKlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,8BAA8B;;;;iBAIzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;iBAI3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F;;GAEG;AACH,eAAO,MAAM,sCAAsC;;;iBAGjD,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,sCAAsC,CAC7C,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAG,MAAe,CAAC;AAE1D,MAAM,WAAW,gCAAgC;IAChD,IAAI,CAAC,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,MAAM,yBAAyB,GAAG,CACvC,IAAI,EAAE,MAAM,KACR,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAEpE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAKvF;AAED,wBAAsB,8BAA8B,CAAC,CAAC,SAAS,uBAAuB,EACrF,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,SAAS,EAAE,gCAAgC,GAAG,IAAI,GAAG,SAAS,EAC9D,kBAAkB,EAAE,yBAAyB,GAC3C,OAAO,CAAC,CAAC,EAAE,CAAC,CAgCd"}

package/dist/schemas/access.js

@@ -0,0 +1,77 @@
+import z from 'zod/v4';
+// Tool Access Control Schemas
+/**
+ * Context for tool access checks
+ */
+export const toolAccessContextSchema = z.object({
+    userId: z.string(),
+    agentId: z.string().min(1),
+    toolId: z.string(), // Can be UUID (custom) or string (system)
+    chatRoomId: z.uuid().optional()
+});
+/**
+ * Result of an access check
+ */
+export const toolAccessResultSchema = z.object({
+    allowed: z.boolean(),
+    reason: z.string().optional()
+});
+/**
+ * Request to get available tools for an agent
+ */
+export const getAvailableToolsRequestSchema = z.object({
+    userId: z.string(),
+    agentId: z.string().min(1),
+    chatRoomId: z.uuid().optional()
+});
+/**
+ * Request to check if user can see agent's tool configuration
+ */
+export const canUserSeeAgentToolRequestSchema = z.object({
+    userId: z.string(),
+    agentId: z.string().min(1),
+    toolId: z.string()
+});
+/**
+ * Request to check room-level tool configuration permissions
+ */
+export const canUserConfigureRoomToolsRequestSchema = z.object({
+    userId: z.string(),
+    chatRoomId: z.uuid()
+});
+export const ORG_SCOPED_TOOL_TAG_PREFIX = 'org:';
+export function readOrgScopedToolTagSlugs(tags) {
+    return (tags ?? [])
+        .filter((tag) => tag.startsWith(ORG_SCOPED_TOOL_TAG_PREFIX))
+        .map((tag) => tag.slice(ORG_SCOPED_TOOL_TAG_PREFIX.length))
+        .filter((slug) => slug.length > 0);
+}
+export async function filterOrgScopedToolDescriptors(items, principal, resolveOrgIdBySlug) {
+    const slugsByItem = new Map();
+    const scopedSlugs = new Set();
+    for (const item of items) {
+        const slugs = readOrgScopedToolTagSlugs(item.tags);
+        slugsByItem.set(item, slugs);
+        for (const slug of slugs)
+            scopedSlugs.add(slug);
+    }
+    if (scopedSlugs.size === 0)
+        return [...items];
+    if (principal?.staff === true || principal?.isSuperuser === true)
+        return [...items];
+    const memberOrgIds = new Set((principal?.orgs ?? []).map((org) => org.id));
+    if (memberOrgIds.size === 0) {
+        return items.filter((item) => (slugsByItem.get(item) ?? []).length === 0);
+    }
+    const resolvedOrgIds = new Map(await Promise.all(Array.from(scopedSlugs).map(async (slug) => [slug, await resolveOrgIdBySlug(slug)])));
+    return items.filter((item) => {
+        const slugs = slugsByItem.get(item) ?? [];
+        if (slugs.length === 0)
+            return true;
+        return slugs.some((slug) => {
+            const orgId = resolvedOrgIds.get(slug);
+            return orgId != null && memberOrgIds.has(orgId);
+        });
+    });
+}
+//# sourceMappingURL=access.js.map

package/dist/schemas/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/schemas/access.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,QAAQ,CAAC;AAEvB,8BAA8B;AAE9B;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,0CAA0C;IAC9D,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;CACpB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAe,CAAC;AAgB1D,MAAM,UAAU,yBAAyB,CAAC,IAAmC;IAC5E,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;SACjB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC;SAC3D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;SAC1D,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,KAAmB,EACnB,SAA8D,EAC9D,kBAA6C;IAE7C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAe,CAAC;IAC3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IAC9C,IAAI,SAAS,EAAE,KAAK,KAAK,IAAI,IAAI,SAAS,EAAE,WAAW,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IAEpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAC7B,MAAM,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAU,CAAC,CAC5F,CACD,CAAC;IAEF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,KAAK,IAAI,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/schemas/adapter.d.ts

@@ -0,0 +1,2 @@
+export * from '@vibesdotdev/ai-schemas/schemas/adapter';
+//# sourceMappingURL=adapter.d.ts.map

package/dist/schemas/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/schemas/adapter.ts"],"names":[],"mappings":"AACA,cAAc,yCAAyC,CAAC"}

package/dist/schemas/adapter.js

@@ -0,0 +1,3 @@
+// Re-export shim — moved to @vibesdotdev/ai-schemas (contract floor).
+export * from '@vibesdotdev/ai-schemas/schemas/adapter';
+//# sourceMappingURL=adapter.js.map

package/dist/schemas/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/schemas/adapter.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,cAAc,yCAAyC,CAAC"}