@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.4

package/dist/execution/caller-invocation.js

@@ -0,0 +1,152 @@
+/**
+ * A tool run as a caller: the identity the caller is (explicit options, else
+ * the identity the launching harness declared, else the invocation's actor,
+ * else the session manager's bindings), the workspace bound for its session,
+ * and the invocation inside that caller's overlay. The CLI's `tools run` and
+ * in-process hosts (the Pi extension) run tools through this one path.
+ */
+import { CapabilityError, isCapabilityError } from '@vibesdotdev/kernel';
+import { invocationOverlayForCaller } from '@vibesdotdev/kernel/schemas';
+import { getLogger } from '@vibesdotdev/logging/contexts/logger';
+import { attempt } from "../shared/attempt.js";
+import { buildDirectToolCallContext } from "./direct-context.js";
+import { invokeTool } from "./invoke.js";
+/**
+ * Project the bound CLI session into the per-call identity envelope.  The
+ * workspace-lock tool uses this to keep custody tied to the current body; the
+ * old command path created a bare ToolCallContext and fell back to the literal
+ * workspace session id `cli`.
+ *
+ * Participant mapping wins over global defaults.
+ */
+export async function callerFromRuntimeScope(runtime, options) {
+    // Identity is per invocation: the active invocation's actor, and the
+    // session the invocation's workspace is bound for (its overlay's
+    // `workspace`, M-a), never a declared qualifier.
+    const actor = runtime.scope.actor;
+    const workspaceSessionId = runtime.invocationWorkspace?.sessionId;
+    const read = (key) => {
+        const value = key === 'workspaceSessionId' ? workspaceSessionId : actor?.[key];
+        const trimmed = value?.trim();
+        return trimmed ? trimmed : undefined;
+    };
+    // The flags win; else the identity the launching harness declared for this
+    // shell, a host fact the environment captured once.
+    const launch = runtime.localEnvironment.launchIdentity?.();
+    const explicitParticipant = options?.participant?.trim() || launch?.participantId?.trim();
+    const explicitSession = options?.session?.trim() || launch?.sessionId?.trim();
+    const explicitAgent = options?.agent?.trim() || launch?.agentId?.trim();
+    let participantId = explicitParticipant || read('participantId');
+    const rawSessionId = explicitSession || read('sessionId') || read('workspaceSessionId');
+    let sessionId = rawSessionId === 'cli' ? undefined : rawSessionId;
+    let agentId = explicitAgent || read('agentId');
+    const harness = options?.harness?.trim() || actor?.harness?.trim() || undefined;
+    const harnessSessionId = options?.harnessSessionId?.trim() || actor?.harnessSessionId?.trim() || undefined;
+    // A session the caller names must exist where a session owner is composed:
+    // a requested session that cannot bind fails closed, so the call never
+    // falls through to some other binding or records an identity no session holds.
+    if (explicitSession && explicitSession !== 'cli' && runtime.hasContext('session/manager')) {
+        const manager = await runtime.context('session/manager');
+        if (manager.getSession && !(await manager.getSession(explicitSession))) {
+            throw new CapabilityError('The session this call names does not exist.', 'NOT_FOUND', {
+                reason: 'caller-session-unknown',
+                retryable: false,
+                details: { kind: 'session', id: explicitSession },
+                recoveryHint: 'Pass an existing session id, or omit the session to use your bound one.'
+            });
+        }
+    }
+    // Participant mapping wins over global defaults:
+    // If participant is known but session is not, resolve the participant's active session.
+    // A session-manager failure fails the run: an unanswered lookup is not an
+    // absent session.
+    if (participantId && !sessionId && runtime.hasContext('session/manager')) {
+        const manager = await runtime.context('session/manager');
+        sessionId =
+            (await manager.getParticipantActiveSession?.(participantId)) ??
+                (await manager.ensureParticipantSession?.(participantId)) ??
+                undefined;
+    }
+    // If session is known but participant is not, resolve the session's owner or default binding.
+    if (sessionId && !participantId && runtime.hasContext('session/manager')) {
+        const manager = await runtime.context('session/manager');
+        const binding = await manager.getDefaultActiveBinding?.();
+        if (binding && binding.sessionId === sessionId && binding.participantId) {
+            participantId = binding.participantId;
+        }
+        else {
+            const s = await manager.getSession?.(sessionId);
+            if (s?.ownerParticipant) {
+                participantId = s.ownerParticipant;
+            }
+        }
+    }
+    // If neither explicit identity was provided, restore durable default binding if available.
+    // A harness conversation is its own seat and never adopts the workspace default
+    // (session SPEC: a harness seat never adopts the workspace default).
+    if (!sessionId && !participantId && !harnessSessionId && runtime.hasContext('session/manager')) {
+        const manager = await runtime.context('session/manager');
+        const binding = await manager.getDefaultActiveBinding?.();
+        if (binding) {
+            sessionId = binding.sessionId;
+            participantId = binding.participantId;
+        }
+    }
+    if (!sessionId && !participantId && !agentId && !harnessSessionId)
+        return undefined;
+    const caller = {};
+    if (sessionId)
+        caller.sessionId = sessionId;
+    if (participantId)
+        caller.participantId = participantId;
+    if (agentId)
+        caller.agentId = agentId;
+    if (harness)
+        caller.harness = harness;
+    if (harnessSessionId)
+        caller.harnessSessionId = harnessSessionId;
+    return caller;
+}
+/**
+ * Bind the host's workspace for the caller's session and return the call's
+ * workspace (M-a): the bound root, session, target and access, which ride the
+ * invocation overlay. The workspace package owns the binding and registers it
+ * as the `workspace/bind-caller` runtime context; a host bound to no workspace
+ * binds none and the call carries none, and a host that composes a workspace
+ * without that context fails the run with a typed capability error.
+ */
+async function bindCallerWorkspace(runtime, sessionId) {
+    const bound = await attempt(async () => runtime.context('runtime/workspace-path'));
+    if (!bound.ok) {
+        if (isCapabilityError(bound.failure) && bound.failure.reason === 'workspace-unbound')
+            return undefined;
+        throw bound.failure;
+    }
+    if (!runtime.hasContext('workspace/bind-caller')) {
+        throw new CapabilityError('The host has a workspace path but no workspace/bind-caller context is registered.', 'UNAVAILABLE', { reason: 'workspace-bind-caller-unavailable' });
+    }
+    const bind = await runtime.context('workspace/bind-caller');
+    return bind(runtime, sessionId);
+}
+/** Run `run.toolId` as the caller `run` names, through the runtime it is handed. */
+export async function invokeToolAsCaller(runtime, run) {
+    const caller = await callerFromRuntimeScope(runtime, run);
+    // The caller's session/participant/agent are identity: they travel on
+    // ToolCallContext.caller and the invocation overlay below, never in the
+    // declared scope. The workspace session rides the same overlay (M-a).
+    const workspace = caller?.sessionId && caller.sessionId !== 'cli' ? await bindCallerWorkspace(runtime, caller.sessionId) : undefined;
+    const ctxInput = { callId: run.callId, logger: getLogger(run.loggerId ?? 'tools:caller', runtime).child(run.toolId) };
+    if (caller)
+        ctxInput.caller = caller;
+    if (workspace)
+        ctxInput.workspace = workspace;
+    if (run.signal)
+        ctxInput.signal = run.signal;
+    if (run.sendProgress)
+        ctxInput.sendProgress = run.sendProgress;
+    if (run.metadata)
+        ctxInput.metadata = run.metadata;
+    const ctx = await buildDirectToolCallContext(runtime, ctxInput);
+    return runtime.runInvocation(() => invokeTool({ runtime, toolId: run.toolId, input: run.input, ctx, timeoutMs: run.timeoutMs, approval: run.approval, onApproval: run.onApproval }), invocationOverlayForCaller(caller, ctx.workspace));
+}
+//# sourceMappingURL=caller-invocation.js.map

package/dist/execution/caller-invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-invocation.js","sourceRoot":"","sources":["../../src/execution/caller-invocation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAkD,MAAM,qBAAqB,CAAC;AACzH,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AAEjE,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,OAAqB,EACrB,OAA+B;IAE/B,qEAAqE;IACrE,iEAAiE;IACjE,iDAAiD;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAClC,MAAM,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,EAAE,SAAS,CAAC;IAClE,MAAM,IAAI,GAAG,CAAC,GAAqE,EAAsB,EAAE;QAC1G,MAAM,KAAK,GAAG,GAAG,KAAK,oBAAoB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC,CAAC;IAEF,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAAE,CAAC;IAC3D,MAAM,mBAAmB,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1F,MAAM,eAAe,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9E,MAAM,aAAa,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAExE,IAAI,aAAa,GAAG,mBAAmB,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,eAAe,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACxF,IAAI,SAAS,GAAG,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;IAClE,IAAI,OAAO,GAAG,aAAa,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChF,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAE3G,2EAA2E;IAC3E,uEAAuE;IACvE,+EAA+E;IAC/E,IAAI,eAAe,IAAI,eAAe,KAAK,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3F,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAElC,iBAAiB,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,eAAe,CAAC,6CAA6C,EAAE,WAAW,EAAE;gBACrF,MAAM,EAAE,wBAAwB;gBAChC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,EAAE;gBACjD,YAAY,EAAE,yEAAyE;aACvF,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,iDAAiD;IACjD,wFAAwF;IACxF,0EAA0E;IAC1E,kBAAkB;IAClB,IAAI,aAAa,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAGlC,iBAAiB,CAAC,CAAC;QACtB,SAAS;YACR,CAAC,MAAM,OAAO,CAAC,2BAA2B,EAAE,CAAC,aAAa,CAAC,CAAC;gBAC5D,CAAC,MAAM,OAAO,CAAC,wBAAwB,EAAE,CAAC,aAAa,CAAC,CAAC;gBACzD,SAAS,CAAC;IACZ,CAAC;IAED,8FAA8F;IAC9F,IAAI,SAAS,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAGlC,iBAAiB,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC1D,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YACzE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;gBACzB,aAAa,GAAG,CAAC,CAAC,gBAAgB,CAAC;YACpC,CAAC;QACF,CAAC;IACF,CAAC;IAED,2FAA2F;IAC3F,gFAAgF;IAChF,qEAAqE;IACrE,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAChG,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAElC,iBAAiB,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACb,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAC9B,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,CAAC;IACF,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,IAAI,CAAC,OAAO,IAAI,CAAC,gBAAgB;QAAE,OAAO,SAAS,CAAC;IACpF,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,IAAI,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5C,IAAI,aAAa;QAAE,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC;IACxD,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,IAAI,gBAAgB;QAAE,MAAM,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IACjE,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB,CACjC,OAAqB,EACrB,SAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAS,wBAAwB,CAAC,CAAC,CAAC;IAC3F,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,mBAAmB;YAAE,OAAO,SAAS,CAAC;QACvG,MAAM,KAAK,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CACxB,mFAAmF,EACnF,aAAa,EACb,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAC/C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAsB,uBAAuB,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACjC,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAc,OAAqB,EAAE,GAAkB;IAC9F,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrI,MAAM,QAAQ,GAAoB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,IAAI,cAAc,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACvI,IAAI,MAAM;QAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;IACrC,IAAI,SAAS;QAAE,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;IAC9C,IAAI,GAAG,CAAC,MAAM;QAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7C,IAAI,GAAG,CAAC,YAAY;QAAE,QAAQ,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IAC/D,IAAI,GAAG,CAAC,QAAQ;QAAE,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,aAAa,CAC3B,GAAG,EAAE,CAAC,UAAU,CAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,EACzJ,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CACjD,CAAC;AACH,CAAC"}

package/dist/execution/capability-tier.subscriber.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Capability-tier `beforeExecute` subscriber.
+ *
+ * Single chokepoint that enforces the tier model from
+ * AI-SURFACE-2026-05 §4.1, §4.3, §4.5 and VIBES-29 §3.
+ *
+ * Why this lives on the shared `runtime.hooks<ToolHookEvents>('tools/tool')`
+ * bus rather than inline in `invokeTool`:
+ *
+ *   - The tools-package invoker
+ *     (`tools/src/execution/invoke.ts`) and the daemon RPC
+ *     invoker (`runtime-plugin/src/daemon/commands/invoke.ts`)
+ *     both call `invokeToolCore`, which fires `beforeExecute` on the
+ *     same bus instance. One subscriber covers both paths permanently.
+ *   - VIBES-29 §1 explicitly required this layout. An inline check in
+ *     `tools/execution/invoke.ts` would be silently bypassed by the
+ *     daemon path until somebody noticed.
+ *
+ * The subscriber writes its denial onto
+ * `metadata.set(BEFORE_EXECUTE_REJECT_KEY, error)`. `invokeToolCore`
+ * checks that slot after `beforeExecute` and throws the error before
+ * the runner runs (and routes it through the standard `error` event so
+ * audit/recovery subscribers fire).
+ *
+ * Open work tracked in child issues:
+ *   - approval token TTL/scope/revoke surface
+ *   - audit kind + retention
+ *   - MCP proxy default-T2b at registration
+ *   - per-tier eval template
+ *
+ * Until those land, this subscriber:
+ *   - rejects when `tool.capability.tier > effectiveCeiling`
+ *   - rejects T2b calls whose `target` is not on the descriptor's
+ *     egress allowlist
+ *   - logs (warn) when a tool descriptor omits `capability.tier` —
+ *     deprecation window before unset becomes a hard failure
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { ToolBeforeExecuteEvent, ToolHookEvents } from '../schemas/tool-events.ts';
+export declare const CAPABILITY_AUDIT_FAILURE_METADATA_KEY = "capabilityTier:auditFailure";
+export type JsonPrimitive = string | number | boolean | null;
+export type JsonValue = JsonPrimitive | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+type WarnFn = (message: string, context?: Record<string, JsonValue | undefined>) => void;
+/**
+ * Build the subscriber. The returned function is the actual
+ * `beforeExecute` handler. Registration happens at tools-plugin load
+ * time:
+ *
+ *     runtime
+ *       .hooks<ToolHookEvents>('tools/tool')
+ *       .on('beforeExecute', createCapabilityTierSubscriber(runtime));
+ *
+ * The subscriber holds a reference to the runtime so it can resolve
+ * the descriptor and (later, once the audit kind lands) emit audit
+ * events.
+ */
+export declare function createCapabilityTierSubscriber(runtime: VibesRuntime, options?: {
+    warn?: WarnFn;
+}): (event: ToolBeforeExecuteEvent) => Promise<void>;
+export type { ToolHookEvents };
+//# sourceMappingURL=capability-tier.subscriber.d.ts.map

package/dist/execution/capability-tier.subscriber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-tier.subscriber.d.ts","sourceRoot":"","sources":["../../src/execution/capability-tier.subscriber.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,EACN,KAAK,YAAY,EAGjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACX,sBAAsB,EACtB,cAAc,EACd,MAAM,2BAA2B,CAAC;AAyBnC,eAAO,MAAM,qCAAqC,gCAAgC,CAAC;AAEnF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEnF,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC,KAAK,IAAI,CAAC;AAqBzF;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC,IAAI,CAAC,CA+HlD;AAoID,YAAY,EAAE,cAAc,EAAE,CAAC"}

package/dist/execution/capability-tier.subscriber.js

@@ -0,0 +1,279 @@
+/**
+ * Capability-tier `beforeExecute` subscriber.
+ *
+ * Single chokepoint that enforces the tier model from
+ * AI-SURFACE-2026-05 §4.1, §4.3, §4.5 and VIBES-29 §3.
+ *
+ * Why this lives on the shared `runtime.hooks<ToolHookEvents>('tools/tool')`
+ * bus rather than inline in `invokeTool`:
+ *
+ *   - The tools-package invoker
+ *     (`tools/src/execution/invoke.ts`) and the daemon RPC
+ *     invoker (`runtime-plugin/src/daemon/commands/invoke.ts`)
+ *     both call `invokeToolCore`, which fires `beforeExecute` on the
+ *     same bus instance. One subscriber covers both paths permanently.
+ *   - VIBES-29 §1 explicitly required this layout. An inline check in
+ *     `tools/execution/invoke.ts` would be silently bypassed by the
+ *     daemon path until somebody noticed.
+ *
+ * The subscriber writes its denial onto
+ * `metadata.set(BEFORE_EXECUTE_REJECT_KEY, error)`. `invokeToolCore`
+ * checks that slot after `beforeExecute` and throws the error before
+ * the runner runs (and routes it through the standard `error` event so
+ * audit/recovery subscribers fire).
+ *
+ * Open work tracked in child issues:
+ *   - approval token TTL/scope/revoke surface
+ *   - audit kind + retention
+ *   - MCP proxy default-T2b at registration
+ *   - per-tier eval template
+ *
+ * Until those land, this subscriber:
+ *   - rejects when `tool.capability.tier > effectiveCeiling`
+ *   - rejects T2b calls whose `target` is not on the descriptor's
+ *     egress allowlist
+ *   - logs (warn) when a tool descriptor omits `capability.tier` —
+ *     deprecation window before unset becomes a hard failure
+ */
+import * as z from 'zod/v4';
+import { CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { BEFORE_EXECUTE_REJECT_KEY } from "./core.js";
+import { CAPABILITY_TIERS, DEFAULT_AGENT_CAPABILITY_CEILING, TOOL_AGENT_CONTEXT_METADATA_KEY, ToolCallAgentContextSchema } from "../schemas/runtime/capability-tier.js";
+/**
+ * Tiers in privilege order, lowest first. Never `CapabilityTierSchema.options`:
+ * zod orders integer-like members first ('0','1','3','2a','2b').
+ */
+const TIER_ORDER = CAPABILITY_TIERS;
+import { getLogger } from '@vibesdotdev/logging';
+import { CapabilityCeilingError, EgressNotAllowedError } from "../errors/capability-ceiling.js";
+const LOGGER_ID = 'tools.execution.capability-tier';
+export const CAPABILITY_AUDIT_FAILURE_METADATA_KEY = 'capabilityTier:auditFailure';
+const AuditorServiceSchema = z.object({
+    emit: z.function()
+});
+const T2A_RANK = TIER_ORDER.indexOf('2a');
+/**
+ * Build the subscriber. The returned function is the actual
+ * `beforeExecute` handler. Registration happens at tools-plugin load
+ * time:
+ *
+ *     runtime
+ *       .hooks<ToolHookEvents>('tools/tool')
+ *       .on('beforeExecute', createCapabilityTierSubscriber(runtime));
+ *
+ * The subscriber holds a reference to the runtime so it can resolve
+ * the descriptor and (later, once the audit kind lands) emit audit
+ * events.
+ */
+export function createCapabilityTierSubscriber(runtime, options = {}) {
+    const warn = options.warn ?? runtimeWarn(runtime);
+    return async function capabilityTierBeforeExecute(event) {
+        // `runtime` ref captured at registration is the source of truth;
+        // the event-bound runtime is the same instance.
+        void runtime;
+        const descriptor = readDescriptor(event);
+        const agentContext = readAgentContext(event);
+        const tier = descriptor?.capability?.tier;
+        // Deprecation window: unset tier warns now, fails after the
+        // VIBES-39 cutover. Until then we treat it as the default ceiling
+        // so existing descriptors keep working.
+        if (!tier) {
+            warn(`Tool '${event.toolId}' has no capability.tier set — defaulting to '${DEFAULT_AGENT_CAPABILITY_CEILING}'. Set capability.tier on the descriptor; unset will become a hard failure once the deprecation window closes (tracked in VIBES-39).`, { toolId: event.toolId });
+            await emitCapabilityAudit(event, 'allow', agentContext, {
+                reason: 'missing-tier-default-allow'
+            }, warn);
+            return;
+        }
+        const ceiling = computeEffectiveCeiling(agentContext);
+        if (TIER_ORDER.indexOf(tier) > TIER_ORDER.indexOf(ceiling)) {
+            const error = new CapabilityCeilingError({
+                toolId: event.toolId,
+                requestedTier: tier,
+                effectiveCeiling: ceiling,
+                agentId: agentContext?.agentId,
+                callChain: agentContext?.callChain
+            });
+            await emitCapabilityAudit(event, 'deny', agentContext, {
+                reason: error.message,
+                tier,
+                ceiling
+            }, warn);
+            rejectCall(event, error);
+            return;
+        }
+        // Sampling tier inheritance — if the descriptor declares
+        // `samplingIntent: true`, raise the floor to T2a unless the
+        // caller is a T0/T1 tool that has itself been declared as
+        // sampling-intentful (handled at the tool surface, not here).
+        if (descriptor?.capability?.samplingIntent && TIER_ORDER.indexOf(tier) < T2A_RANK) {
+            const error = new CapabilityCeilingError({
+                toolId: event.toolId,
+                requestedTier: '2a',
+                effectiveCeiling: ceiling,
+                agentId: agentContext?.agentId,
+                callChain: agentContext?.callChain
+            });
+            await emitCapabilityAudit(event, 'deny', agentContext, {
+                reason: error.message,
+                tier,
+                ceiling
+            }, warn);
+            rejectCall(event, error);
+            return;
+        }
+        // T2b: enforce egress allowlist. The resolved `target` must
+        // either be on `capability.egress.hosts` or `anyHost: true`
+        // (which is itself a governance flag — `anyHost` registration
+        // is reviewed by Bedrock per AI-SURFACE-2026-05 §4.5).
+        if (tier === '2b') {
+            const target = agentContext?.target;
+            const egress = descriptor?.capability?.egress;
+            const anyHost = egress?.anyHost === true;
+            const hosts = egress?.hosts ?? [];
+            if (!anyHost && target && !hostMatches(target, hosts)) {
+                const error = new EgressNotAllowedError({
+                    toolId: event.toolId,
+                    target,
+                    allowedHosts: hosts
+                });
+                await emitCapabilityAudit(event, 'deny', agentContext, {
+                    reason: error.message,
+                    tier,
+                    ceiling,
+                    target
+                }, warn);
+                rejectCall(event, error);
+                return;
+            }
+        }
+        /*
+         * NOTE[work-item VIBES-35-followup]: approval-token check for T2a/2b/3
+         * remains unimplemented. The approval scope-key surface
+         * (toolId, target, sessionId, agentId) has not landed; until it does,
+         * the subscriber allows T2a/2b/3 calls after ceiling and egress checks.
+         */
+        await emitCapabilityAudit(event, 'allow', agentContext, { tier, ceiling }, warn);
+    };
+}
+async function emitCapabilityAudit(event, outcome, agentContext, metadata, warn) {
+    if (!event.runtime.hasKind('security/auditor'))
+        return;
+    const auditorQuery = event.runtime.query('security/auditor').enabled();
+    if (!(await auditorQuery.existsAsync()))
+        return;
+    const auditor = await auditorQuery.resolve();
+    const parsed = AuditorServiceSchema.safeParse(auditor);
+    if (!parsed.success) {
+        throw new Error('Resolved security/auditor has no emit(event) method');
+    }
+    const auditEvent = {
+        id: createAuditId(),
+        timestamp: new Date().toISOString(),
+        actor: agentContext?.agentId ?? 'unknown-agent',
+        action: event.toolId,
+        resource: `tools/tool:${event.toolId}`,
+        outcome,
+        metadata: {
+            callId: event.callId,
+            ...metadata
+        }
+    };
+    const auditOutcome = await (async () => {
+        try {
+            // SAFETY: AuditorServiceSchema safeParse checked that emit is a function on auditor.
+            await auditor.emit(auditEvent);
+            return { ok: true };
+        }
+        catch (error) {
+            return {
+                ok: false,
+                failure: valueFreeFailure(CaughtFailureSchema.parse(error)),
+                message: error instanceof Error ? error.message : String(error)
+            };
+        }
+    })();
+    if (!auditOutcome.ok) {
+        const failure = {
+            toolId: event.toolId,
+            outcome,
+            message: auditOutcome.message
+        };
+        event.metadata.set(CAPABILITY_AUDIT_FAILURE_METADATA_KEY, failure);
+        warn('Capability-tier audit emission failed', failure);
+    }
+}
+function createAuditId() {
+    return globalThis.crypto?.randomUUID?.() ?? `audit-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+}
+function readDescriptor(event) {
+    if (!event.runtime.hasKind('tools/tool'))
+        return undefined;
+    const accessor = event.runtime.assets('tools/tool');
+    // SAFETY: assets('tools/tool').descriptor returns the registered ToolAssetDescriptor or undefined.
+    return accessor.descriptor(event.toolId);
+}
+function readAgentContext(event) {
+    const raw = event.metadata.get(TOOL_AGENT_CONTEXT_METADATA_KEY);
+    const parsed = ToolCallAgentContextSchema.partial().safeParse(raw);
+    if (!parsed.success)
+        return undefined;
+    const candidate = parsed.data;
+    const ceiling = candidate.ceiling ?? DEFAULT_AGENT_CAPABILITY_CEILING;
+    return {
+        agentId: candidate.agentId,
+        ceiling,
+        callChain: candidate.callChain,
+        sessionId: candidate.sessionId,
+        target: candidate.target
+    };
+}
+function computeEffectiveCeiling(agentContext) {
+    if (!agentContext)
+        return DEFAULT_AGENT_CAPABILITY_CEILING;
+    const chain = agentContext.callChain ?? [];
+    if (chain.length === 0)
+        return agentContext.ceiling;
+    // Direct ceiling participates in the min so a sub-agent invoking a
+    // stricter parent never exceeds the parent.
+    return [{ ceiling: agentContext.ceiling }, ...chain].reduce((lowest, link) => (TIER_ORDER.indexOf(link.ceiling) < TIER_ORDER.indexOf(lowest) ? link.ceiling : lowest), agentContext.ceiling);
+}
+function rejectCall(event, error) {
+    event.metadata.set(BEFORE_EXECUTE_REJECT_KEY, error);
+}
+/**
+ * Match a target (host or URL) against an allowlist. Hosts may be
+ * exact (`api.example.com`) or wildcard-prefixed (`*.example.com`).
+ */
+function hostMatches(target, hosts) {
+    const host = extractHost(target);
+    if (!host)
+        return false;
+    for (const entry of hosts) {
+        if (entry === host)
+            return true;
+        if (entry.startsWith('*.')) {
+            const suffix = entry.slice(1);
+            if (host.endsWith(suffix) && host.length > suffix.length)
+                return true;
+        }
+    }
+    return false;
+}
+function extractHost(target) {
+    const parsed = URL.parse(target);
+    if (parsed?.hostname) {
+        return parsed.hostname;
+    }
+    return target.includes('/') ? undefined : target;
+}
+/** The default warn sink: the handed runtime's Logging. */
+function runtimeWarn(runtime) {
+    const log = getLogger(LOGGER_ID, runtime);
+    return (message, context) => {
+        if (context)
+            log.warn(message, context);
+        else
+            log.warn(message);
+    };
+}
+//# sourceMappingURL=capability-tier.subscriber.js.map

package/dist/execution/capability-tier.subscriber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-tier.subscriber.js","sourceRoot":"","sources":["../../src/execution/capability-tier.subscriber.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAEN,mBAAmB,EACnB,gBAAgB,EAChB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EACN,gBAAgB,EAChB,gCAAgC,EAChC,+BAA+B,EAC/B,0BAA0B,EAG1B,MAAM,uCAAuC,CAAC;AAE/C;;;GAGG;AACH,MAAM,UAAU,GAA8B,gBAAgB,CAAC;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACN,sBAAsB,EACtB,qBAAqB,EACrB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,SAAS,GAAG,iCAAiC,CAAC;AAEpD,MAAM,CAAC,MAAM,qCAAqC,GAAG,6BAA6B,CAAC;AAgBnF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClB,CAAC,CAAC;AAMH,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1C;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B,CAC7C,OAAqB,EACrB,UAA6B,EAAE;IAE/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IAElD,OAAO,KAAK,UAAU,2BAA2B,CAAC,KAA6B;QAC9E,iEAAiE;QACjE,gDAAgD;QAChD,KAAK,OAAO,CAAC;QAEb,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,IAAI,GAAG,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC;QAE1C,4DAA4D;QAC5D,kEAAkE;QAClE,wCAAwC;QACxC,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,IAAI,CACH,SAAS,KAAK,CAAC,MAAM,iDAAiD,gCAAgC,sIAAsI,EAC5O,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CACxB,CAAC;YACF,MAAM,mBAAmB,CACxB,KAAK,EACL,OAAO,EACP,YAAY,EACZ;gBACC,MAAM,EAAE,4BAA4B;aACpC,EACD,IAAI,CACJ,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAEtD,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,OAAO;gBACzB,OAAO,EAAE,YAAY,EAAE,OAAO;gBAC9B,SAAS,EAAE,YAAY,EAAE,SAAS;aAClC,CAAC,CAAC;YACH,MAAM,mBAAmB,CACxB,KAAK,EACL,MAAM,EACN,YAAY,EACZ;gBACC,MAAM,EAAE,KAAK,CAAC,OAAO;gBACrB,IAAI;gBACJ,OAAO;aACP,EACD,IAAI,CACJ,CAAC;YACF,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzB,OAAO;QACR,CAAC;QAED,yDAAyD;QACzD,4DAA4D;QAC5D,0DAA0D;QAC1D,8DAA8D;QAC9D,IAAI,UAAU,EAAE,UAAU,EAAE,cAAc,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;YACnF,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,OAAO;gBACzB,OAAO,EAAE,YAAY,EAAE,OAAO;gBAC9B,SAAS,EAAE,YAAY,EAAE,SAAS;aAClC,CAAC,CAAC;YACH,MAAM,mBAAmB,CACxB,KAAK,EACL,MAAM,EACN,YAAY,EACZ;gBACC,MAAM,EAAE,KAAK,CAAC,OAAO;gBACrB,IAAI;gBACJ,OAAO;aACP,EACD,IAAI,CACJ,CAAC;YACF,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACzB,OAAO;QACR,CAAC;QAED,4DAA4D;QAC5D,4DAA4D;QAC5D,8DAA8D;QAC9D,uDAAuD;QACvD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,YAAY,EAAE,MAAM,CAAC;YACpC,MAAM,MAAM,GAAG,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC;YAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;YACzC,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;YAElC,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;gBACvD,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC;oBACvC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM;oBACN,YAAY,EAAE,KAAK;iBACnB,CAAC,CAAC;gBACH,MAAM,mBAAmB,CACxB,KAAK,EACL,MAAM,EACN,YAAY,EACZ;oBACC,MAAM,EAAE,KAAK,CAAC,OAAO;oBACrB,IAAI;oBACJ,OAAO;oBACP,MAAM;iBACN,EACD,IAAI,CACJ,CAAC;gBACF,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACzB,OAAO;YACR,CAAC;QACF,CAAC;QAED;;;;;WAKG;QAEH,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CACjC,KAA6B,EAC7B,OAAyB,EACzB,YAA8C,EAC9C,QAA+C,EAC/C,IAAY;IAEZ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO;IACvD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO;IAChD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,UAAU,GAAe;QAC9B,EAAE,EAAE,aAAa,EAAE;QACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,YAAY,EAAE,OAAO,IAAI,eAAe;QAC/C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,cAAc,KAAK,CAAC,MAAM,EAAE;QACtC,OAAO;QACP,QAAQ,EAAE;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,QAAQ;SACX;KACD,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QACtC,IAAI,CAAC;YACJ,qFAAqF;YACrF,MAAO,OAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,EAAE,EAAE,KAAc;gBAClB,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC3D,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC/D,CAAC;QACH,CAAC;IACF,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG;YACf,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,OAAO,EAAE,YAAY,CAAC,OAAO;SAC7B,CAAC;QACF,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,uCAAuC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;AACF,CAAC;AAED,SAAS,aAAa;IACrB,OAAO,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACpD,mGAAmG;IACnG,OAAO,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAoC,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA6B;IACtD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,gCAAgC,CAAC;IACtE,OAAO;QACN,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,OAAO;QACP,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;KACxB,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC/B,YAA8C;IAE9C,IAAI,CAAC,YAAY;QAAE,OAAO,gCAAgC,CAAC;IAC3D,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,OAAO,CAAC;IACpD,mEAAmE;IACnE,4CAA4C;IAC5C,OAAO,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAC1D,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EACzG,YAAY,CAAC,OAAO,CACpB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAA6B,EAAE,KAAY;IAC9D,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,MAAc,EAAE,KAA4B;IAChE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;QACvE,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IAClC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,QAAQ,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAClD,CAAC;AAED,2DAA2D;AAC3D,SAAS,WAAW,CAAC,OAAqB;IACzC,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC3B,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;;YACnC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC,CAAC;AACH,CAAC"}

package/dist/execution/core.d.ts

@@ -0,0 +1,49 @@
+/**
+ * invokeToolCore — single source of truth for invoking a universal tool.
+ *
+ * This owns the cross-cutting concerns shared by every tool invocation path:
+ * hook-bus emission, descriptor-driven input validation, timeout handling,
+ * beforeExecute rejections, and recovery-hint enrichment.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel/api/runtime';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+import type { ToolApprovalChannelDescriptor } from '@vibesdotdev/ai-schemas/agents/approval/channel';
+export { ToolInputValidationError, validateToolInput, validateToolInputForRuntime, type ToolInputValidationIssue, type ToolInputValidationResult } from './input-validation.ts';
+/** Metadata key used by beforeExecute subscribers to deny a call. */
+export declare const BEFORE_EXECUTE_REJECT_KEY = "beforeExecute:reject";
+/** Optional metadata attached to errors thrown out of a tool invocation. */
+export interface ToolInvocationErrorMetadata {
+    /** Human-readable hint for recovering from this failure. */
+    recoveryHint?: string;
+    /** Whether the caller can safely retry the same call. */
+    retryable?: boolean;
+}
+export interface ToolRecoveryHints {
+    hint?: string;
+    retryable?: boolean;
+}
+export interface InvokeToolCoreOptions<TInput = unknown, TOutput = unknown> {
+    /**
+     * Closure that performs the actual tool execution. Receives the
+     * host-bridge-coerced, descriptor-validated input. The wrapper is
+     * responsible for resolving the implementation before invoking `execute`.
+     */
+    runner: (input: TInput, ctx: ToolCallContext) => Promise<TOutput>;
+    /**
+     * Per-call execution timeout in milliseconds. Omit (or pass <= 0) to disable
+     * timeout enforcement for this call.
+     */
+    timeoutMs?: number;
+    /**
+     * Skip the descriptor-driven input validation pass.
+     *
+     * Reserved for callers that have already validated the input upstream
+     * against the same descriptor. Defaults to `false`.
+     */
+    skipInputValidation?: boolean;
+    /** Runs after descriptor validation and owner preflight, before any execution side effect. */
+    approval?: ToolApprovalChannelDescriptor;
+    onApproval?: (approval: 'approved' | 'assumed') => Promise<void>;
+}
+export declare function invokeToolCore<TInput = unknown, TOutput = unknown>(runtime: VibesRuntime, toolId: string, input: TInput, ctx: ToolCallContext, options: InvokeToolCoreOptions<TInput, TOutput>): Promise<TOutput>;
+//# sourceMappingURL=core.d.ts.map

package/dist/execution/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/execution/core.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAK7E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iDAAiD,CAAC;AAMrG,OAAO,EACN,wBAAwB,EACxB,iBAAiB,EACjB,2BAA2B,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,MAAM,uBAAuB,CAAC;AAE/B,qEAAqE;AACrE,eAAO,MAAM,yBAAyB,yBAAyB,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,WAAW,2BAA2B;IAC3C,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB;AAOD,MAAM,WAAW,qBAAqB,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IACzE;;;;OAIG;IACH,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,6BAA6B,CAAC;IACzC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAED,wBAAsB,cAAc,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EACvE,OAAO,EAAE,YAAY,EACrB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7C,OAAO,CAAC,OAAO,CAAC,CA2HlB"}