@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.3

package/dist/schemas/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/schemas/types.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,cAAc,uCAAuC,CAAC"}

package/dist/schemas/ui.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Tool UI Descriptor Schema
+ *
+ * Schema for `tools/ui` kind descriptors.
+ * Tool UI assets provide surface-specific rendering for tool calls
+ * (widgets, badges, approval views) co-located with tool implementations.
+ */
+import * as z from 'zod/v4';
+export declare const ToolUISurfaceSchema: z.ZodEnum<{
+    cli: "cli";
+    tui: "tui";
+    worker: "worker";
+    bridge: "bridge";
+    web: "web";
+}>;
+/**
+ * Roles a tool UI asset can fulfill.
+ */
+export declare const ToolUIRoleSchema: z.ZodEnum<{
+    approval: "approval";
+    badge: "badge";
+    widget: "widget";
+}>;
+export declare const ToolUIPlacementSchema: z.ZodEnum<{
+    inline: "inline";
+    top: "top";
+    bottom: "bottom";
+}>;
+/**
+ * Tool UI descriptor schema.
+ * Keeps the contract local to the tools package so it does not depend on the
+ * TUI package during extraction.
+ */
+export declare const ToolUIDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"tools/ui">;
+    surfaces: z.ZodArray<z.ZodEnum<{
+        cli: "cli";
+        tui: "tui";
+        worker: "worker";
+        bridge: "bridge";
+        web: "web";
+    }>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        consumer: "consumer";
+        cloud: "cloud";
+    }>>>;
+    targetId: z.ZodOptional<z.ZodString>;
+    role: z.ZodEnum<{
+        approval: "approval";
+        badge: "badge";
+        widget: "widget";
+    }>;
+    targetToolId: z.ZodString;
+    placement: z.ZodOptional<z.ZodEnum<{
+        inline: "inline";
+        top: "top";
+        bottom: "bottom";
+    }>>;
+}, z.core.$strip>;
+export type ToolUIDescriptor = z.infer<typeof ToolUIDescriptorSchema>;
+export type ToolUIRole = z.infer<typeof ToolUIRoleSchema>;
+export type ToolUIPlacement = z.infer<typeof ToolUIPlacementSchema>;
+/**
+ * Create a validated tools/ui descriptor.
+ * Follows the same pattern as createContextUIDescriptor.
+ */
+export declare function createToolUIDescriptor(input: Omit<ToolUIDescriptor, 'kind'> & {
+    kind?: 'tools/ui';
+}): ToolUIDescriptor;
+//# sourceMappingURL=ui.d.ts.map

package/dist/schemas/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../src/schemas/ui.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,eAAO,MAAM,mBAAmB;;;;;;EAAoD,CAAC;AAErF;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;EAA0C,CAAC;AACxE,eAAO,MAAM,qBAAqB;;;;EAAsC,CAAC;AAEzE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAcjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,UAAU,CAAA;CAAE,GAC3D,gBAAgB,CAclB"}

package/dist/schemas/ui.js

@@ -0,0 +1,52 @@
+/**
+ * Tool UI Descriptor Schema
+ *
+ * Schema for `tools/ui` kind descriptors.
+ * Tool UI assets provide surface-specific rendering for tool calls
+ * (widgets, badges, approval views) co-located with tool implementations.
+ */
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { RuntimeHardwareSchema } from '@vibesdotdev/kernel/schemas/scope';
+export const ToolUISurfaceSchema = z.enum(['cli', 'tui', 'web', 'worker', 'bridge']);
+/**
+ * Roles a tool UI asset can fulfill.
+ */
+export const ToolUIRoleSchema = z.enum(['badge', 'widget', 'approval']);
+export const ToolUIPlacementSchema = z.enum(['inline', 'top', 'bottom']);
+/**
+ * Tool UI descriptor schema.
+ * Keeps the contract local to the tools package so it does not depend on the
+ * TUI package during extraction.
+ */
+export const ToolUIDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('tools/ui'),
+    surfaces: z.array(ToolUISurfaceSchema),
+    hardware: z.array(RuntimeHardwareSchema).optional(),
+    targetId: z.string().min(1).optional(),
+    /** Role narrowed to tool-specific values */
+    role: ToolUIRoleSchema,
+    /** ID of the tool this UI renders for (aliases base targetId) */
+    targetToolId: z.string().min(1),
+    /** Message-layout placement shared by browser surfaces. */
+    placement: ToolUIPlacementSchema.optional()
+});
+/**
+ * Create a validated tools/ui descriptor.
+ * Follows the same pattern as createContextUIDescriptor.
+ */
+export function createToolUIDescriptor(input) {
+    // Sync targetId from targetToolId if not explicitly set
+    const normalized = {
+        ...input,
+        kind: 'tools/ui',
+        targetId: input.targetId ?? input.targetToolId
+    };
+    const result = ToolUIDescriptorSchema.safeParse(normalized);
+    if (!result.success) {
+        const issues = result.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join(', ');
+        throw new Error(`Invalid tools/ui descriptor '${input.id}': ${issues}`);
+    }
+    return result.data;
+}
+//# sourceMappingURL=ui.js.map

package/dist/schemas/ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.js","sourceRoot":"","sources":["../../src/schemas/ui.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAErF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACpE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEtC,4CAA4C;IAC5C,IAAI,EAAE,gBAAgB;IAEtB,iEAAiE;IACjE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/B,2DAA2D;IAC3D,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAMH;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACrC,KAA6D;IAE7D,wDAAwD;IACxD,MAAM,UAAU,GAAG;QAClB,GAAG,KAAK;QACR,IAAI,EAAE,UAAmB;QACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY;KAC9C,CAAC;IAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC"}

package/dist/shared/attempt.d.ts

@@ -0,0 +1,37 @@
+/**
+ * One attempt, captured once as an outcome: the value, or the failure that
+ * ended it. The caller reads the failure and decides (branch on its `code` /
+ * `reason`, report its value-free facts, or rethrow it); the capture itself
+ * never decides, drops or rewrites it. Package-wide: every Tools surface
+ * (CLI commands, codemod, webhooks, calculate) settles its work through it.
+ */
+import { type CaughtFailure } from '@vibesdotdev/kernel';
+export type Attempt<T> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly failure: CaughtFailure;
+};
+/** Run `work`; an async failure is the outcome, never thrown. */
+export declare function attempt<T>(work: () => Promise<T>): Promise<Attempt<T>>;
+/** Run `work`; a synchronous failure is the outcome, never thrown. */
+export declare function attemptSync<T>(work: () => T): Attempt<T>;
+/**
+ * The failure named by its value-free facts only (`CapabilityError NOT_FOUND
+ * tool-not-found`, `Error ENOENT`): safe in a message, never the failure's own text.
+ */
+export declare function failureLabel(failure: CaughtFailure): string;
+/**
+ * The failure as text for a reply: a typed failure's own message (value-free by
+ * the `CapabilityError` contract), else its facts only. An untyped failure's
+ * text is never copied.
+ */
+export declare function failureText(failure: CaughtFailure): string;
+/**
+ * The text a command prints for a failure it reports to its user: the thrown
+ * error's own message, or the description of a thrown non-error. For output
+ * the user reads, never for a log or a stored field.
+ */
+export declare function describeFailure(failure: CaughtFailure): string;
+//# sourceMappingURL=attempt.d.ts.map

package/dist/shared/attempt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt.d.ts","sourceRoot":"","sources":["../../src/shared/attempt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAA4D,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEnH,MAAM,MAAM,OAAO,CAAC,CAAC,IAClB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC;AAE3D,iEAAiE;AACjE,wBAAsB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAM5E;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAMxD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAG3D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAE9D"}

package/dist/shared/attempt.js

@@ -0,0 +1,51 @@
+/**
+ * One attempt, captured once as an outcome: the value, or the failure that
+ * ended it. The caller reads the failure and decides (branch on its `code` /
+ * `reason`, report its value-free facts, or rethrow it); the capture itself
+ * never decides, drops or rewrites it. Package-wide: every Tools surface
+ * (CLI commands, codemod, webhooks, calculate) settles its work through it.
+ */
+import { CaughtFailureSchema, isCapabilityError, valueFreeFailure } from '@vibesdotdev/kernel';
+/** Run `work`; an async failure is the outcome, never thrown. */
+export async function attempt(work) {
+    try {
+        return { ok: true, value: await work() };
+    }
+    catch (error) {
+        return { ok: false, failure: CaughtFailureSchema.parse(error) };
+    }
+}
+/** Run `work`; a synchronous failure is the outcome, never thrown. */
+export function attemptSync(work) {
+    try {
+        return { ok: true, value: work() };
+    }
+    catch (error) {
+        return { ok: false, failure: CaughtFailureSchema.parse(error) };
+    }
+}
+/**
+ * The failure named by its value-free facts only (`CapabilityError NOT_FOUND
+ * tool-not-found`, `Error ENOENT`): safe in a message, never the failure's own text.
+ */
+export function failureLabel(failure) {
+    const facts = valueFreeFailure(failure);
+    return [facts.name, facts.code, facts.reason].filter((fact) => fact !== undefined).join(' ');
+}
+/**
+ * The failure as text for a reply: a typed failure's own message (value-free by
+ * the `CapabilityError` contract), else its facts only. An untyped failure's
+ * text is never copied.
+ */
+export function failureText(failure) {
+    return isCapabilityError(failure) ? failure.message : failureLabel(failure);
+}
+/**
+ * The text a command prints for a failure it reports to its user: the thrown
+ * error's own message, or the description of a thrown non-error. For output
+ * the user reads, never for a log or a stored field.
+ */
+export function describeFailure(failure) {
+    return failure instanceof Error ? failure.message : failure.description;
+}
+//# sourceMappingURL=attempt.js.map

package/dist/shared/attempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempt.js","sourceRoot":"","sources":["../../src/shared/attempt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAsB,MAAM,qBAAqB,CAAC;AAMnH,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,OAAO,CAAI,IAAsB;IACtD,IAAI,CAAC;QACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACjE,CAAC;AACF,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAI,IAAa;IAC3C,IAAI,CAAC;QACJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACjE,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAsB;IAClD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAsB;IACjD,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAsB;IACrD,OAAO,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;AACzE,CAAC"}

package/dist/shared/fresh-module.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Import a user-authored module (a tool descriptor file) as it is on disk now.
+ *
+ * The host's ESM cache keeps the first evaluation of a specifier, so
+ * re-importing an edited file by the same path returns the stale module. The
+ * specifier carries a generation key — a digest of the file's current bytes,
+ * read through the runtime filesystem adapter — so an edit loads the new
+ * module, while an unchanged file reuses its cached evaluation.
+ */
+import type { FileSystemAdapterInterface } from '@vibesdotdev/filesystem/interfaces/adapter';
+/** The module at absolute `filePath`, evaluated from its current content. */
+export declare function importCurrentModule(adapter: FileSystemAdapterInterface, filePath: string): Promise<object>;
+//# sourceMappingURL=fresh-module.d.ts.map

package/dist/shared/fresh-module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fresh-module.d.ts","sourceRoot":"","sources":["../../src/shared/fresh-module.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAS7F,6EAA6E;AAC7E,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIhH"}

package/dist/shared/fresh-module.js

@@ -0,0 +1,13 @@
+import { importModule } from '@vibesdotdev/kernel/services/import-relative-module';
+/** The first 16 hex digits of the SHA-256 of `bytes`. */
+async function generationKey(bytes) {
+    const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', new Uint8Array(bytes)));
+    return Array.from(digest.subarray(0, 8), (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+/** The module at absolute `filePath`, evaluated from its current content. */
+export async function importCurrentModule(adapter, filePath) {
+    const content = await adapter.readFile(filePath);
+    const bytes = content instanceof Uint8Array ? content : new TextEncoder().encode(content);
+    return importModule(`${filePath}?generation=${await generationKey(bytes)}`);
+}
+//# sourceMappingURL=fresh-module.js.map

package/dist/shared/fresh-module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fresh-module.js","sourceRoot":"","sources":["../../src/shared/fresh-module.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,YAAY,EAAE,MAAM,qDAAqD,CAAC;AAEnF,yDAAyD;AACzD,KAAK,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmC,EAAE,QAAgB;IAC9F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,YAAY,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1F,OAAO,YAAY,CAAC,GAAG,QAAQ,eAAe,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC"}

package/dist/shared/http-failure.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Remote HTTP answers and transport failures as typed, credential-free
+ * failures — the one place Tools turns a remote service's status, body or
+ * fetch error into what a caller, a log line or the model context may see.
+ *
+ * - A body is read through {@link readBoundedText}: at most `maxBytes` bytes
+ *   are ever buffered, so a hostile or huge answer cannot exhaust memory.
+ * - A non-2xx answer becomes {@link httpStatusFailure}: a `CapabilityError`
+ *   whose message names only the service and the status; the body rides only
+ *   as a `redactedExcerpt` detail with the request's own credentials and URL
+ *   parts (`urlRedactions`) removed by value.
+ * - A thrown fetch failure becomes {@link transportFailure}: its message,
+ *   stack and cause text are never read (they echo URLs and headers); only
+ *   the value-free facts (`valueFreeFailure`) are kept.
+ */
+import { CapabilityError, type CaughtFailure } from '@vibesdotdev/kernel';
+/** What a bounded read produced: the decoded text and whether the body was longer than the cap. */
+export interface BoundedText {
+    readonly text: string;
+    readonly truncated: boolean;
+}
+/** The body of `response` as UTF-8 text, never buffering more than `maxBytes` bytes; the rest is cancelled unread. */
+export declare function readBoundedText(response: Response, maxBytes: number): Promise<BoundedText>;
+/** The secrets a failure about a request to `url` with `credentials` must not repeat. */
+export declare function requestSecrets(url: string, credentials?: readonly string[]): string[];
+/** What names a failed remote answer. */
+export interface HttpStatusFailureInput {
+    /** The service, as the message names it (`The AI service`). */
+    readonly service: string;
+    /** The kebab-case reason (`agent-run-rejected`). */
+    readonly reason: string;
+    readonly status: number;
+    /** The (bounded) body text the service answered. */
+    readonly body: string;
+    /** Values removed from the excerpt wherever they appear (the request's credential, URL parts). */
+    readonly secrets: readonly string[];
+}
+/** A non-2xx answer as a typed failure: service and status in the message, the body only as a redacted excerpt detail. */
+export declare function httpStatusFailure(input: HttpStatusFailureInput): CapabilityError;
+/** What reading a rejected answer needs besides the response. */
+export interface RejectedResponseInput {
+    readonly service: string;
+    readonly reason: string;
+    readonly secrets: readonly string[];
+    /** The most body bytes read; default {@link DEFAULT_FAILURE_BODY_BYTES}. */
+    readonly maxBytes?: number;
+}
+/** The most bytes of a failed answer read before it is reduced to an excerpt. */
+export declare const DEFAULT_FAILURE_BODY_BYTES: number;
+/**
+ * A non-2xx `response` as its typed failure, reading at most `maxBytes` of the
+ * body. A body that cannot be read is carried as the `bodyUnreadable` detail
+ * (value-free) rather than dropped.
+ */
+export declare function rejectedResponse(response: Response, input: RejectedResponseInput): Promise<CapabilityError>;
+/** Remote text (a service's own error message) as a bounded, credential-free excerpt. */
+export declare function remoteTextExcerpt(text: string, secrets: readonly string[]): string;
+/** A thrown fetch failure as a typed failure carrying only its value-free facts; an abort or timeout is `TIMEOUT`. */
+export declare function transportFailure(caught: CaughtFailure, service: string, reason: string): CapabilityError;
+//# sourceMappingURL=http-failure.d.ts.map

package/dist/shared/http-failure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-failure.d.ts","sourceRoot":"","sources":["../../src/shared/http-failure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,eAAe,EAAgG,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGxK,mGAAmG;AACnG,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC5B;AAED,sHAAsH;AACtH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAmBhG;AAED,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,EAAE,CAEzF;AAcD,yCAAyC;AACzC,MAAM,WAAW,sBAAsB;IACtC,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,0HAA0H;AAC1H,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,eAAe,CAOhF;AAED,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,iFAAiF;AACjF,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAejH;AAED,yFAAyF;AACzF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAElF;AAED,sHAAsH;AACtH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAUxG"}

package/dist/shared/http-failure.js

@@ -0,0 +1,113 @@
+/**
+ * Remote HTTP answers and transport failures as typed, credential-free
+ * failures — the one place Tools turns a remote service's status, body or
+ * fetch error into what a caller, a log line or the model context may see.
+ *
+ * - A body is read through {@link readBoundedText}: at most `maxBytes` bytes
+ *   are ever buffered, so a hostile or huge answer cannot exhaust memory.
+ * - A non-2xx answer becomes {@link httpStatusFailure}: a `CapabilityError`
+ *   whose message names only the service and the status; the body rides only
+ *   as a `redactedExcerpt` detail with the request's own credentials and URL
+ *   parts (`urlRedactions`) removed by value.
+ * - A thrown fetch failure becomes {@link transportFailure}: its message,
+ *   stack and cause text are never read (they echo URLs and headers); only
+ *   the value-free facts (`valueFreeFailure`) are kept.
+ */
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { redactedExcerpt, urlRedactions } from '@vibesdotdev/shared/utils';
+/** The body of `response` as UTF-8 text, never buffering more than `maxBytes` bytes; the rest is cancelled unread. */
+export async function readBoundedText(response, maxBytes) {
+    const body = response.body;
+    if (!body)
+        return { text: '', truncated: false };
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let text = '';
+    let read = 0;
+    for (;;) {
+        const chunk = await reader.read();
+        if (chunk.done)
+            return { text: text + decoder.decode(), truncated: false };
+        const room = maxBytes - read;
+        if (chunk.value.byteLength > room) {
+            text += decoder.decode(chunk.value.subarray(0, Math.max(room, 0)));
+            await reader.cancel();
+            return { text, truncated: true };
+        }
+        read += chunk.value.byteLength;
+        text += decoder.decode(chunk.value, { stream: true });
+    }
+}
+/** The secrets a failure about a request to `url` with `credentials` must not repeat. */
+export function requestSecrets(url, credentials = []) {
+    return [...credentials.filter((value) => value.length > 0), ...urlRedactions(url)];
+}
+/** The taxonomy code an HTTP status maps to. */
+function codeForStatus(status) {
+    if (status === 401)
+        return 'AUTH_REQUIRED';
+    if (status === 403)
+        return 'PERMISSION_DENIED';
+    if (status === 404)
+        return 'NOT_FOUND';
+    if (status === 408 || status === 504)
+        return 'TIMEOUT';
+    if (status === 409)
+        return 'CONFLICT';
+    if (status === 429)
+        return 'RATE_LIMITED';
+    if (status >= 500)
+        return 'UNAVAILABLE';
+    return 'INVALID_INPUT';
+}
+/** A non-2xx answer as a typed failure: service and status in the message, the body only as a redacted excerpt detail. */
+export function httpStatusFailure(input) {
+    const code = codeForStatus(input.status);
+    return new CapabilityError(`${input.service} answered HTTP ${input.status}.`, code, {
+        reason: input.reason,
+        retryable: code === 'UNAVAILABLE' || code === 'RATE_LIMITED' || code === 'TIMEOUT',
+        details: { status: input.status, excerpt: redactedExcerpt(input.body, { secrets: input.secrets }) }
+    });
+}
+/** The most bytes of a failed answer read before it is reduced to an excerpt. */
+export const DEFAULT_FAILURE_BODY_BYTES = 64 * 1024;
+/**
+ * A non-2xx `response` as its typed failure, reading at most `maxBytes` of the
+ * body. A body that cannot be read is carried as the `bodyUnreadable` detail
+ * (value-free) rather than dropped.
+ */
+export async function rejectedResponse(response, input) {
+    let body;
+    try {
+        body = (await readBoundedText(response, input.maxBytes ?? DEFAULT_FAILURE_BODY_BYTES)).text;
+    }
+    catch (error) {
+        // The status is still the answer; the unreadable body is carried value-free.
+        const status = httpStatusFailure({ service: input.service, reason: input.reason, status: response.status, body: '', secrets: input.secrets });
+        return new CapabilityError(status.message, status.code, {
+            reason: input.reason,
+            retryable: status.retryable,
+            details: { status: response.status, bodyUnreadable: true },
+            cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+        });
+    }
+    return httpStatusFailure({ service: input.service, reason: input.reason, status: response.status, body, secrets: input.secrets });
+}
+/** Remote text (a service's own error message) as a bounded, credential-free excerpt. */
+export function remoteTextExcerpt(text, secrets) {
+    return redactedExcerpt(text, { secrets });
+}
+/** A thrown fetch failure as a typed failure carrying only its value-free facts; an abort or timeout is `TIMEOUT`. */
+export function transportFailure(caught, service, reason) {
+    const facts = valueFreeFailure(caught);
+    const timedOut = facts.name === 'TimeoutError' || facts.name === 'AbortError';
+    const details = { failure: facts.name };
+    if (facts.code !== undefined)
+        details.failureCode = facts.code;
+    return new CapabilityError(`${service} could not be reached.`, timedOut ? 'TIMEOUT' : 'UNAVAILABLE', {
+        reason: timedOut ? `${reason}-timeout` : reason,
+        retryable: true,
+        details
+    });
+}
+//# sourceMappingURL=http-failure.js.map

package/dist/shared/http-failure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-failure.js","sourceRoot":"","sources":["../../src/shared/http-failure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAA6E,MAAM,qBAAqB,CAAC;AACxK,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAQ3E,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,QAAgB;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACT,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC;QAC7B,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACnE,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAC/B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACF,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,cAAiC,EAAE;IAC9E,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,gDAAgD;AAChD,SAAS,aAAa,CAAC,MAAc;IACpC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,aAAa,CAAC;IACxC,OAAO,eAAe,CAAC;AACxB,CAAC;AAeD,0HAA0H;AAC1H,MAAM,UAAU,iBAAiB,CAAC,KAA6B;IAC9D,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,IAAI,eAAe,CAAC,GAAG,KAAK,CAAC,OAAO,kBAAkB,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE;QACnF,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,SAAS;QAClF,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE;KACnG,CAAC,CAAC;AACJ,CAAC;AAWD,iFAAiF;AACjF,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,KAA4B;IACtF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,6EAA6E;QAC7E,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9I,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YACvD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE;YAC1D,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACzD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACnI,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAA0B;IACzE,OAAO,eAAe,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,gBAAgB,CAAC,MAAqB,EAAE,OAAe,EAAE,MAAc;IACtF,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;IAC9E,MAAM,OAAO,GAA2B,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC;IAC/D,OAAO,IAAI,eAAe,CAAC,GAAG,OAAO,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE;QACpG,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,MAAM;QAC/C,SAAS,EAAE,IAAI;QACf,OAAO;KACP,CAAC,CAAC;AACJ,CAAC"}

package/dist/shared/root-state.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Per-root state for Tools: every cache, registry or pending table that
+ * belongs to a runtime root keys on `rootIdentityOf(runtime)`, so the root,
+ * its plugin views, reload generations and registry forks share one entry
+ * while two independent roots never see each other's. A runtime the kernel
+ * neither constructed nor viewed (a double, a Proxy) names no root and is
+ * refused typed rather than given a private, forked entry.
+ */
+import { type RuntimeRef, type RuntimeRootIdentity } from '@vibesdotdev/kernel';
+/** The root `runtime` belongs to, or the typed `INVALID_INPUT tools-runtime-unrooted` refusal naming `owner`. */
+export declare function toolsRootOf(runtime: RuntimeRef, owner: string): RuntimeRootIdentity;
+/** One value per runtime root, created on first read and collected with the root. */
+export interface RootScopedState<T> {
+    /** The root's value, created by the factory on first read; refuses an unrooted runtime. */
+    of(runtime: RuntimeRef): T;
+    /** The root's value when one was created, without creating it; refuses an unrooted runtime. */
+    peek(runtime: RuntimeRef): T | undefined;
+    /** Forget the root's value (the next `of` creates a fresh one). */
+    clear(runtime: RuntimeRef): void;
+}
+/** A per-root state cell named `owner` (carried in the refusal), built by `create` once per root. */
+export declare function rootScopedState<T>(owner: string, create: () => T): RootScopedState<T>;
+//# sourceMappingURL=root-state.d.ts.map

package/dist/shared/root-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-state.d.ts","sourceRoot":"","sources":["../../src/shared/root-state.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAmC,KAAK,UAAU,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEjH,iHAAiH;AACjH,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAWnF;AAED,qFAAqF;AACrF,MAAM,WAAW,eAAe,CAAC,CAAC;IACjC,2FAA2F;IAC3F,EAAE,CAAC,OAAO,EAAE,UAAU,GAAG,CAAC,CAAC;IAC3B,+FAA+F;IAC/F,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,CAAC,GAAG,SAAS,CAAC;IACzC,mEAAmE;IACnE,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;CACjC;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAmBrF"}

package/dist/shared/root-state.js

@@ -0,0 +1,45 @@
+/**
+ * Per-root state for Tools: every cache, registry or pending table that
+ * belongs to a runtime root keys on `rootIdentityOf(runtime)`, so the root,
+ * its plugin views, reload generations and registry forks share one entry
+ * while two independent roots never see each other's. A runtime the kernel
+ * neither constructed nor viewed (a double, a Proxy) names no root and is
+ * refused typed rather than given a private, forked entry.
+ */
+import { CapabilityError, rootIdentityOf } from '@vibesdotdev/kernel';
+/** The root `runtime` belongs to, or the typed `INVALID_INPUT tools-runtime-unrooted` refusal naming `owner`. */
+export function toolsRootOf(runtime, owner) {
+    const root = rootIdentityOf(runtime);
+    if (!root) {
+        throw new CapabilityError(`${owner} state is root-scoped; this runtime names no kernel root.`, 'INVALID_INPUT', {
+            reason: 'tools-runtime-unrooted',
+            retryable: false,
+            details: { owner },
+            recoveryHint: 'Hand the booted root, a plugin view or a reload generation; a runtime double or Proxy cannot stand in.'
+        });
+    }
+    return root;
+}
+/** A per-root state cell named `owner` (carried in the refusal), built by `create` once per root. */
+export function rootScopedState(owner, create) {
+    // Boxed so a stored `undefined` T is told apart from no entry without a cast.
+    const values = new WeakMap();
+    return {
+        of(runtime) {
+            const root = toolsRootOf(runtime, owner);
+            const held = values.get(root);
+            if (held)
+                return held.value;
+            const box = { value: create() };
+            values.set(root, box);
+            return box.value;
+        },
+        peek(runtime) {
+            return values.get(toolsRootOf(runtime, owner))?.value;
+        },
+        clear(runtime) {
+            values.delete(toolsRootOf(runtime, owner));
+        }
+    };
+}
+//# sourceMappingURL=root-state.js.map

package/dist/shared/root-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-state.js","sourceRoot":"","sources":["../../src/shared/root-state.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,eAAe,EAAE,cAAc,EAA6C,MAAM,qBAAqB,CAAC;AAEjH,iHAAiH;AACjH,MAAM,UAAU,WAAW,CAAC,OAAmB,EAAE,KAAa;IAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,2DAA2D,EAAE,eAAe,EAAE;YAC/G,MAAM,EAAE,wBAAwB;YAChC,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,KAAK,EAAE;YAClB,YAAY,EAAE,wGAAwG;SACtH,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAYD,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAAI,KAAa,EAAE,MAAe;IAChE,8EAA8E;IAC9E,MAAM,MAAM,GAAG,IAAI,OAAO,EAA8C,CAAC;IACzE,OAAO;QACN,EAAE,CAAC,OAAO;YACT,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC;YAC5B,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtB,OAAO,GAAG,CAAC,KAAK,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,OAAO;YACX,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;QACvD,CAAC;QACD,KAAK,CAAC,OAAO;YACZ,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/shared/schemas/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Shared Schemas
+ */
+export interface StorageErrorContext {
+    operation: string;
+    namespace?: string;
+    adapterType?: string;
+    tier?: string;
+    surface?: string;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/shared/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/schemas/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,mBAAmB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/shared/schemas/index.js

@@ -0,0 +1,5 @@
+/**
+ * Shared Schemas
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/shared/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/shared/schemas/index.ts"],"names":[],"mappings":"AAAA;;GAEG"}