indusagi-coding-agent 0.2.4 → 0.2.8

package/dist/types/capability-deck/cards/task-card.d.ts

@@ -1,106 +0,0 @@
-/**
- * Task capability — delegate a self-contained piece of work to a sub-agent.
- *
- * App-novel wiring. The `task` tool lets the primary agent hand off a bounded
- * objective (e.g. "find every call site of `foo` and summarize them") to a fresh
- * sub-agent that runs its own tool loop and reports back a single result, keeping
- * the parent's context window clean.
- *
- * The actual sub-agent runner is NOT owned by this card — it is a framework /
- * swarm concern injected through {@link DeckContext.framework} under the
- * {@link DELEGATE_HANDLE_KEY} key. When that handle is present the capability
- * delegates to it; when it is absent (tests, headless tooling, a host that has
- * not wired the swarm) the capability degrades gracefully to a clearly-typed
- * stub that reports delegation is unavailable rather than throwing. Either way
- * the card builds a valid {@link Capability} and the deck typechecks and runs.
- *
- * The card produces a framework `AgentTool`; parameters are a TypeBox schema and
- * the prose is original to this deck.
- */
-import { type Static } from "@sinclair/typebox";
-import type { Capability, CapabilityCard, DeckContext } from "../contract";
-/** Key under which a host wires a live delegate runner into the deck context. */
-export declare const DELEGATE_HANDLE_KEY: "delegate";
-/** A single delegated objective handed to the sub-agent runner. */
-export interface DelegateRequest {
-    /** Optional named agent profile to run as (e.g. "explorer", "reviewer"). */
-    readonly agent?: string;
-    /** The self-contained objective the sub-agent should accomplish. */
-    readonly objective: string;
-    /** Optional extra context the parent wants the sub-agent to start with. */
-    readonly context?: string;
-}
-/** The single result a sub-agent reports back to the parent. */
-export interface DelegateResult {
-    /** Whether the sub-agent considers the objective met. */
-    readonly ok: boolean;
-    /** The sub-agent's final report, surfaced to the parent agent verbatim. */
-    readonly report: string;
-}
-/** One line of a sub-agent's live activity stream (for the drill-in view). */
-export interface ActivityLine {
-    /** What kind of step this is, used to colour it. */
-    readonly tone: "reason" | "tool" | "result";
-    /** The display text (already shortened to a single line). */
-    readonly text: string;
-}
-/** Live progress a running sub-agent streams back while it works. */
-export interface DelegateProgress {
-    /** Cumulative tokens the sub-agent has spent so far (input + output). */
-    readonly tokens: number;
-    /** The sub-agent's recent activity (reasoning + tool steps), newest last. */
-    readonly activity: readonly ActivityLine[];
-}
-/**
- * The contract a host's sub-agent runner must satisfy to be wired in.
- *
- * Intentionally minimal: the deck only needs a way to run one objective under
- * cancellation and get one report back. How the runner spawns the sub-agent
- * (in-process loop, worktree, separate process) is entirely the host's concern.
- */
-export interface DelegateRunner {
-    /** Optional roster of named agent profiles, surfaced in the tool description. */
-    listAgents?(): readonly string[];
-    /**
-     * Run one delegated objective and resolve with the sub-agent's report.
-     *
-     * When an `onProgress` callback is supplied the runner streams live metrics
-     * (token spend) as the sub-agent works, so the host can surface them (the
-     * background-agents panel). Optional — a runner may ignore it.
-     */
-    run(request: DelegateRequest, signal?: AbortSignal, onProgress?: (progress: DelegateProgress) => void): Promise<DelegateResult>;
-}
-declare const TaskParams: import("@sinclair/typebox").TObject<{
-    objective: import("@sinclair/typebox").TString;
-    agent: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    context: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-}>;
-/** Statically-inferred parameter type the capability's `execute` receives. */
-export type TaskParamsType = Static<typeof TaskParams>;
-/** Structured detail returned alongside the model-facing content. */
-export interface TaskDetails {
-    /** True when a delegate runner handled the objective. */
-    readonly delegated: boolean;
-    /** True when the sub-agent (or stub) considers the objective met. */
-    readonly ok: boolean;
-    /** The agent profile that ran, if one was named. */
-    readonly agent?: string;
-    /** Cumulative tokens the sub-agent spent — streamed live on progress updates. */
-    readonly tokens?: number;
-    /** The sub-agent's recent activity — streamed live for the drill-in view. */
-    readonly activity?: readonly ActivityLine[];
-}
-/**
- * Build the task/delegate capability.
- *
- * If a {@link DelegateRunner} is present on the context it is bound and the tool
- * truly delegates; otherwise the tool builds anyway and returns a typed,
- * non-throwing stub result so the deck stays assemblable in every environment.
- *
- * @param ctx the deck context; an optional delegate runner is read from
- *            `ctx.framework[DELEGATE_HANDLE_KEY]`.
- */
-export declare function buildTaskCapability(ctx: DeckContext): Capability<typeof TaskParams, TaskDetails>;
-/** Catalog row for the task/delegate capability. */
-export declare const taskCard: CapabilityCard;
-export {};

package/dist/types/capability-deck/cards/todo-card.d.ts

@@ -1,78 +0,0 @@
-/**
- * Todo capability — an in-memory checklist the agent set/reads during a run.
- *
- * App-novel and framework-agnostic: the store is a plain in-process array of
- * items, owned by the card and closed over by the built capability. No file
- * persistence, no session-branch reconstruction, no framework store — just a
- * mutable list the agent rewrites wholesale (the model is expected to send the
- * complete desired list on every `set`, the same convention coding agents use so
- * the plan stays a single coherent snapshot rather than a diff stream).
- *
- * Two operations are folded into one tool keyed by an `action` discriminant:
- *   - `read` — return the current checklist as model-facing prose.
- *   - `set`  — replace the checklist with the supplied items (the authoritative
- *              new plan), then echo it back.
- *
- * The card produces a {@link Capability} (the framework `AgentTool` shape) so the
- * conductor consumes it verbatim as one of `options.tools`. Parameters are a
- * TypeBox schema; the prose below is original to this deck.
- */
-import { type Static } from "@sinclair/typebox";
-import type { Capability, CapabilityCard, DeckContext } from "../contract";
-/** Lifecycle state of one checklist item. */
-export type TodoState = "pending" | "active" | "done" | "dropped";
-/** Relative importance of one checklist item. */
-export type TodoWeight = "low" | "normal" | "high";
-/** One row of the in-memory checklist. */
-export interface TodoItem {
-    /** The work to be done, phrased as a short imperative. */
-    readonly task: string;
-    /** Where the item stands right now. */
-    readonly state: TodoState;
-    /** How much it matters relative to the rest of the list. */
-    readonly weight: TodoWeight;
-}
-/**
- * A minimal in-process checklist store.
- *
- * Deliberately tiny and synchronous: the whole list lives in one field, `set`
- * swaps it atomically, and `read` hands back a frozen copy so a caller cannot
- * mutate the store's backing array. One store is created per built capability,
- * so two sessions never share a checklist.
- */
-export declare class TodoLedger {
-    private items;
-    /** Replace the entire checklist with `next`; returns the stored snapshot. */
-    set(next: readonly TodoItem[]): readonly TodoItem[];
-    /** Return the current checklist as a frozen, read-only snapshot. */
-    read(): readonly TodoItem[];
-}
-declare const TodoParams: import("@sinclair/typebox").TObject<{
-    action: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"read">, import("@sinclair/typebox").TLiteral<"set">]>;
-    items: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        task: import("@sinclair/typebox").TString;
-        state: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pending">, import("@sinclair/typebox").TLiteral<"active">, import("@sinclair/typebox").TLiteral<"done">, import("@sinclair/typebox").TLiteral<"dropped">]>;
-        weight: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"normal">, import("@sinclair/typebox").TLiteral<"high">]>;
-    }>>>;
-}>;
-/** Statically-inferred parameter type the capability's `execute` receives. */
-export type TodoParamsType = Static<typeof TodoParams>;
-/** Structured detail returned alongside the model-facing content. */
-export interface TodoDetails {
-    /** The action that was performed. */
-    readonly action: "read" | "set";
-    /** The checklist as it stands after the call. */
-    readonly items: readonly TodoItem[];
-}
-/**
- * Build the todo capability, binding it to a freshly created in-memory ledger.
- *
- * The ledger is closed over by `execute`, so the checklist persists for the life
- * of this capability instance (i.e. the session) without any external store.
- *
- * @param _ctx the deck context (unused — the todo card needs no cwd/backends)
- */
-export declare function buildTodoCapability(_ctx: DeckContext): Capability<typeof TodoParams, TodoDetails>;
-/** Catalog row for the todo capability — registered in `CAPABILITY_CARDS`. */
-export declare const todoCard: CapabilityCard;
-export {};

package/dist/types/capability-deck/cards/workflow-card.d.ts

@@ -1,55 +0,0 @@
-/**
- * Workflow capability — orchestrate a deterministic fan-out of subagents.
- *
- * App-novel wiring, sibling to (and UNRELATED to) the {@link "./task-card"}
- * delegate card. The `workflow` tool runs a deterministic JavaScript workflow
- * script that calls `agent()`, `parallel()`, and `pipeline()` to fan work out
- * across many fresh subagents and fan their results back in, all under a live
- * `◆ Workflow:` progress tree streamed into the tool result.
- *
- * The actual subagent runner is NOT owned by this card — it is a framework /
- * boot concern injected through {@link DeckContext.framework} under the
- * {@link WORKFLOW_HANDLE_KEY} key. When that handle is present the capability
- * really runs the workflow (via the pure {@link runWorkflow} engine); when it is
- * absent (tests, headless tooling, a host that has not wired the runner) the
- * capability degrades gracefully to a clearly-typed {@link STUB_NOTE} result
- * rather than throwing, exactly like the task card's `readDelegateRunner` path.
- *
- * Recursion guard: this card is registered all-profile-only in
- * {@link "../cards/index"} (`APP_NOVEL_CARDS`), so the `'authoring'` deck a
- * workflow subagent runs against EXCLUDES it — a subagent cannot call `workflow`.
- *
- * Live UI: each engine lifecycle callback mutates a {@link WorkflowSnapshot} and
- * calls the framework `onUpdate` with the snapshot rendered through
- * {@link renderWorkflowText} (the v1 string renderer). Updates are coalesced to
- * status transitions (phase / agent start / agent end), not every log line, to
- * avoid render thrash. The conductor re-projects the framework
- * `tool_execution_update` event to a `tool_update` product signal (stage 3).
- */
-import { type Static } from "@sinclair/typebox";
-import type { Capability, CapabilityCard, DeckContext } from "../contract";
-import { type WorkflowSnapshot } from "../../workflow-engine";
-/** Key under which a host wires a live workflow agent runner into the context. */
-export declare const WORKFLOW_HANDLE_KEY: "workflow";
-declare const WorkflowParams: import("@sinclair/typebox").TObject<{
-    script: import("@sinclair/typebox").TString;
-    args: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TAny>;
-}>;
-/** Statically-inferred parameter type the capability's `execute` receives. */
-export type WorkflowParamsType = Static<typeof WorkflowParams>;
-/** Structured detail returned alongside the model-facing content (the snapshot). */
-export type WorkflowDetails = WorkflowSnapshot;
-/**
- * Build the workflow capability.
- *
- * If a {@link WorkflowAgentRunner} is present on the context it is bound and the
- * tool truly orchestrates; otherwise the tool builds anyway and returns a typed,
- * non-throwing stub so the deck stays assemblable in every environment.
- *
- * @param ctx the deck context; an optional runner is read from
- *            `ctx.framework[WORKFLOW_HANDLE_KEY]`.
- */
-export declare function buildWorkflowCapability(ctx: DeckContext): Capability<typeof WorkflowParams, WorkflowDetails>;
-/** Catalog row for the workflow capability. */
-export declare const workflowCard: CapabilityCard;
-export {};

package/dist/types/capability-deck/cards/workflow-card.test.d.ts

@@ -1,12 +0,0 @@
-/**
- * Workflow card — focused unit tests.
- *
- * The card is a pure capability builder over the pure {@link runWorkflow} engine
- * (an injected {@link WorkflowAgentRunner} does the spawning). These tests cover:
- *   - the STUB_NOTE degrade when no runner handle is wired (no throw),
- *   - a real run with an in-memory fake runner: lifecycle → snapshot,
- *   - abort flips running agents to skipped,
- *   - and the deck-assembly guarantee: workflow appears in the `all` profile but
- *     NOT in the `authoring` subagent profile (the recursion guard).
- */
-export {};

package/dist/types/capability-deck/checkpoint.int.test.d.ts

@@ -1,25 +0,0 @@
-/**
- * File checkpoint / code rewind — PRODUCT integration test (rewind, #24).
- *
- * This proves the checkpoint records through the ACTUAL wired path the product
- * uses, NOT a hand-rolled harness:
- *
- *   1. We provision a real deck via {@link provisionDeck} with a `framework` bag
- *      carrying a real per-session {@link CheckpointStore} under the SAME
- *      `checkpoint` handle key `session.ts` injects (`CHECKPOINT_HANDLE_KEY`).
- *   2. We pull the WIRED `edit` capability out of that deck — the same `AgentTool`
- *      object the conductor would run — and edit a file through it.
- *
- * The framework's edit tool calls `ctx.framework['checkpoint'].record(absPath,
- * previous)` immediately before the write lands, with the file's OLD on-disk
- * content. If the bridge failed to thread the store into `createEditTool`, the
- * handle would be `undefined` and nothing would be recorded — so the assertions
- * below only pass when the store reaches the tool through the real wiring.
- *
- * We then call `store.restore(nodeId)` and assert the on-disk content reverts to
- * the pre-edit bytes, closing the loop end-to-end.
- *
- * Note: no `readState` handle is wired here, so the read-before-edit gate is OFF
- * and the edit proceeds without a prior read — isolating the checkpoint behavior.
- */
-export {};

package/dist/types/capability-deck/contract.d.ts

@@ -1,318 +0,0 @@
-/**
- * Capability-deck contract — the FROZEN type surface of the tooling layer.
- *
- * This module is the single typed seam between the coding-agent *product* and
- * the set of callable capabilities the agent runtime executes — file ops, the
- * shell, search, the web, the delegate/subagent action, the checklist, the
- * background-process proxy, SaaS connector actions, and dynamically-grafted MCP
- * server tools. It declares *only* shapes plus a handful of tiny inert helpers
- * (an id brand, a key minter, a fault factory, and a pure ledger reducer) — no
- * I/O, no provisioning, no orchestration. Every later deck module (the manifest
- * catalog, the builtin bridge, the per-concern provisioners, the bridge network,
- * and the assembled `ToolDeck`) is written against the names declared here, so
- * the file is intentionally small, append-mostly, and stable.
- *
- * Design stance:
- *   - A {@link Capability} is exactly the framework `AgentTool` shape. The deck
- *     does not invent a parallel descriptor type; it *manages* AgentTools so the
- *     conductor can consume the deck's output directly as `options.tools`.
- *   - The catalog is a single source of truth: {@link CapabilityCard} rows live
- *     in one `CAPABILITY_CARDS` array (built by the manifest module), and every
- *     index/lookup is derived *from* that array rather than hand-maintained in a
- *     second parallel map.
- *   - Profiles replace a trio of near-identical build functions: one
- *     data-driven provisioner walks a {@link DeckProfile} ("authoring" |
- *     "survey" | "all") to assemble the right capability set for a session.
- *   - MCP enrollment is **event-sourced**: a {@link BridgeLedger} is the fold of
- *     an append-only stream of {@link BridgeEntry} events (`enroll` / `retire`),
- *     keyed by a content-hash / ULID {@link BridgeKey} rather than a path digest.
- *     The current view is a {@link LedgerSnapshot} reduced from that stream.
- *
- * Framework anchors (all from the `indusagi` package — the sibling rebuilt
- * framework this app targets):
- *   - `AgentTool`, `AgentToolResult`     ← `indusagi/agent`
- *   - `ToolBox`                          ← `indusagi/runtime`
- *   - `TSchema`, `Static`                ← `@sinclair/typebox`
- *
- * The deck never re-declares these; it composes them.
- */
-import type { AgentTool, AgentToolResult } from "indusagi/agent";
-import type { ToolBox } from "indusagi/runtime";
-import type { Static, TSchema } from "@sinclair/typebox";
-/** Re-exported framework vocabulary that deck consumers routinely need. */
-export type { AgentTool, AgentToolResult, ToolBox, TSchema, Static };
-/**
- * A single callable tool the deck manages.
- *
- * Deliberately an alias of the framework `AgentTool` rather than a fresh shape:
- * the conductor and the framework agent loop both expect `AgentTool` objects, so
- * the deck's whole job is to *assemble* them, not to wrap them in a parallel
- * descriptor. A `Capability` therefore carries the framework contract verbatim —
- * `name`, `label`, `description`, a TypeBox `parameters` schema, and an
- * async `execute` — while the deck owns only the catalog, profiles, and
- * dynamic-bridge layers around it.
- *
- * `TParameters` is left open (`TSchema`) so heterogeneous capabilities with
- * different parameter schemas coexist in one `Capability[]`.
- */
-export type Capability<TParameters extends TSchema = TSchema, TDetails = unknown> = AgentTool<TParameters, TDetails>;
-/**
- * A capability whose parameter/detail types are erased — the element type of a
- * heterogeneous deck.
- *
- * A `Capability[]` array of mixed schemas widens to `AnyCapability[]`; this is
- * the shape the conductor consumes as `options.tools` and the type the deck's
- * {@link ToolDeck.tools} / {@link ToolDeck.box} surface in.
- */
-export type AnyCapability = Capability<TSchema, unknown>;
-/**
- * String-branded stable identifier for a capability.
- *
- * The wire-facing tool `name` the model sees (e.g. `"read"`, `"bash"`,
- * `"composio_execute"`, a qualified `"<server>__<tool>"`); branded so an
- * arbitrary string cannot be passed where a vetted capability id is required.
- * Mint one with {@link capabilityId}.
- */
-export type CapabilityId = string & {
-    readonly __capability: unique symbol;
-};
-/**
- * Brand a raw string as a {@link CapabilityId}. The single sanctioned way to
- * produce one, so id provenance stays uniform across the catalog and bridge.
- *
- * @param raw the wire-facing tool name to brand
- */
-export declare function capabilityId(raw: string): CapabilityId;
-/**
- * One row of the static capability catalog — the deck's single source of truth.
- *
- * A card is *metadata plus a builder*: it advertises the capability's identity
- * (`id`, `title`, `summary`) for help/introspection and slash-command listings,
- * and carries a {@link CapabilityCard.build} factory that mints the live
- * {@link Capability} for a given {@link DeckContext}. The catalog array
- * (`CAPABILITY_CARDS`, owned by the manifest module) is the only hand-maintained
- * list; every index, profile membership, and lookup is derived from it.
- */
-export interface CapabilityCard {
-    /** Stable, wire-facing identifier of the capability this card builds. */
-    readonly id: CapabilityId;
-    /** Short human-facing title for catalogs and help text. */
-    readonly title: string;
-    /** One-line description of what the capability does, in the deck's own voice. */
-    readonly summary: string;
-    /**
-     * Build the live capability for a working context.
-     *
-     * Pure with respect to the deck: it reads the injected backends from `ctx`
-     * and returns a configured {@link Capability}; it performs no enrollment and
-     * mutates no shared state.
-     *
-     * @param ctx the working context (cwd + injectable backends) to bind to
-     */
-    build(ctx: DeckContext): Capability;
-}
-/**
- * The set of capabilities a card is eligible for, by profile.
- *
- * A card declares which {@link DeckProfile}s it participates in; the
- * data-driven provisioner intersects this with the requested profile instead of
- * branching through separate per-profile build functions. `"all"` is implied for
- * every card and need not be listed.
- */
-export type CardProfiles = readonly DeckProfile[];
-/**
- * The named capability sets a session can be provisioned with — the profile
- * table that replaces a trio of near-identical build functions.
- *
- *   - `authoring` — the READ-ONLY built-in subset: read/ls/search/web/
- *     checklist-read. No filesystem mutation, no shell, no app-novel cards —
- *     the deck sub-agents (task/workflow) are provisioned with (see
- *     {@link "./provision"}'s PROFILE_TABLE, the authoritative mapping).
- *   - `survey`    — every built-in (mutating ones included), no app-novel cards.
- *   - `all`       — every registered capability, nothing withheld. What an
- *     interactive coding session runs with.
- */
-export type DeckProfile = "authoring" | "survey" | "all";
-/**
- * The working context handed to {@link CapabilityCard.build}.
- *
- * Bundles the workspace root with the injectable backends a capability binds to,
- * so capabilities stay framework-agnostic and testable: a test passes fake
- * `fs` / `shell` ports, production passes the Node-backed ones. Every field
- * beyond `cwd` is optional — the manifest supplies framework defaults when a
- * backend is not injected.
- */
-export interface DeckContext {
-    /** Absolute working directory the session's capabilities are scoped to. */
-    readonly cwd: string;
-    /** Injectable filesystem port; framework Node backend is the default. */
-    readonly fs?: DeckFsBackend;
-    /** Injectable shell port; framework Node backend is the default. */
-    readonly shell?: DeckShellBackend;
-    /** Opaque framework handles a capability may need (model registry, stores). */
-    readonly framework?: DeckFrameworkHandles;
-}
-/**
- * Filesystem backend port a capability may bind to.
- *
- * Intentionally opaque at the contract layer: the concrete port shape is owned
- * by the framework capabilities kernel. The deck only needs to *thread* it from
- * a host into a card's builder, so the contract treats it as a branded handle —
- * threaded, not interpreted, here.
- */
-export type DeckFsBackend = {
-    readonly __deckFsBackend: unique symbol;
-};
-/**
- * Shell backend port a capability may bind to. Opaque for the same reason as
- * {@link DeckFsBackend}: a branded handle the contract threads but never reads.
- */
-export type DeckShellBackend = {
-    readonly __deckShellBackend: unique symbol;
-};
-/**
- * A bag of opaque framework handles the novel capabilities wire to — the
- * subagent/delegate manager, the checklist ledger, the background-process
- * controller, the SaaS gateway. Each is optional and keyed by name; a card that
- * needs one reads it from here, and the manifest fills in defaults.
- */
-export interface DeckFrameworkHandles {
-    readonly [name: string]: unknown;
-}
-/**
- * The stable key of an enrolled bridge capability.
- *
- * Minted from the capability's identity rather than from a working-directory
- * digest, so the same external tool grafted from two sessions collapses to one
- * key and re-enrolling is idempotent. In practice a content hash of the
- * qualified `<server>__<tool>` name (and its schema) or a fresh ULID; branded so
- * a raw string cannot stand in for a vetted key.
- */
-export type BridgeKey = string & {
-    readonly __bridgeKey: unique symbol;
-};
-/** Brand a raw string as a {@link BridgeKey}. */
-export declare function bridgeKey(raw: string): BridgeKey;
-/**
- * The operations the MCP enrollment stream records.
- *
- *   - `enroll` — a bridge capability became available and was grafted in (an
- *     upsert: re-enrolling the same {@link BridgeKey} replaces its entry).
- *   - `retire` — a bridge capability (or a whole server's set) was withdrawn (a
- *     splice: the keyed entry is removed from the reduced view).
- */
-export type BridgeOp = "enroll" | "retire";
-/**
- * A single append-only event in the MCP enrollment stream.
- *
- * The ledger is never mutated in place; every change is one of these entries
- * appended to an ordered log, and the live view is the fold of that log. An
- * `enroll` entry carries the grafted {@link Capability} and the owning server;
- * a `retire` entry need only name the {@link BridgeKey} (and server) to remove.
- * Field names are the deck's own, not the framework's registry schema.
- */
-export interface BridgeEntry {
-    /** The operation this event records. */
-    readonly op: BridgeOp;
-    /** Stable key of the bridge capability the event concerns. */
-    readonly key: BridgeKey;
-    /** Id of the external MCP server that owns the capability. */
-    readonly server: string;
-    /** The grafted capability — present on `enroll`, omitted on `retire`. */
-    readonly capability?: AnyCapability;
-    /** Monotonic sequence number; the append order, used to break upsert ties. */
-    readonly seq: number;
-    /** ISO-8601 timestamp the event was appended. */
-    readonly at: string;
-}
-/**
- * The reduced, current view of the MCP enrollment ledger.
- *
- * A pure projection of the {@link BridgeEntry} stream: the set of bridge
- * capabilities live *right now*, keyed by {@link BridgeKey}, alongside the
- * highest sequence number folded and a per-server tool count for status
- * rendering. Produced by {@link reduceLedger}; consumers read it, never mutate.
- */
-export interface LedgerSnapshot {
-    /** Currently-enrolled bridge capabilities, keyed by their stable key. */
-    readonly live: ReadonlyMap<BridgeKey, AnyCapability>;
-    /** Number of live capabilities grafted from each server, keyed by server id. */
-    readonly byServer: ReadonlyMap<string, number>;
-    /** The highest {@link BridgeEntry.seq} folded into this snapshot. */
-    readonly highWater: number;
-}
-/**
- * Fold an append-only {@link BridgeEntry} stream into its current
- * {@link LedgerSnapshot}.
- *
- * Pure and total: `enroll` upserts the keyed capability (later `seq` wins on a
- * repeated key), `retire` removes it, and entries are applied in `seq` order so
- * the result is independent of array order. This is the single sanctioned
- * reducer, so the event-sourced view stays consistent across every producer.
- *
- * @param entries the enrollment events to fold, in any order
- */
-export declare function reduceLedger(entries: readonly BridgeEntry[]): LedgerSnapshot;
-/**
- * The assembled capability deck a session runs against.
- *
- * The product of provisioning a {@link DeckProfile} against a
- * {@link DeckContext}, optionally with bridge capabilities grafted on. It
- * exposes exactly two reads: the flat capability list (for inspection, naming,
- * and `--tools` style selection) and the consumable box the conductor wires in.
- *
- * `box()` returns an `AnyCapability[]` — the same `AgentTool[]` the conductor's
- * session options accept directly — so a deck drops straight into
- * `SessionConductorOptions.tools`. The {@link DeckBox} alias also admits the
- * framework `ToolBox` for hosts that drive the lower-level runtime contract
- * instead of the conductor.
- */
-export interface ToolDeck {
-    /** The flat list of live capabilities, for inspection and selection. */
-    tools(): AnyCapability[];
-    /** The consumable surface the conductor (or runtime) wires in as its tools. */
-    box(): DeckBox;
-}
-/**
- * What {@link ToolDeck.box} hands to a consumer.
- *
- * Primarily an `AnyCapability[]` (= `AgentTool[]`), which the conductor accepts
- * verbatim as `options.tools`. Also admits the framework {@link ToolBox} so a
- * host wiring the raw runtime contract — or grafting MCP tools through the
- * protocol bridge, which yields a `ToolBox` — can consume the deck the same way.
- */
-export type DeckBox = AnyCapability[] | ToolBox;
-/**
- * The closed set of failure categories the deck can surface during
- * provisioning or bridge enrollment.
- *
- *   - `unknown_capability` — a requested id is not in the catalog.
- *   - `build_failed`       — a card's `build` threw while minting a capability.
- *   - `bridge`             — connecting/listing/grafting an MCP server failed.
- *   - `backend`            — a required injected backend was missing or invalid.
- */
-export type DeckFaultKind = "unknown_capability" | "build_failed" | "bridge" | "backend";
-/**
- * A typed, discriminated failure raised by the deck.
- *
- * `kind` selects the category; `message` is a human-readable summary; the
- * optional `cause` carries the underlying error for logging without forcing
- * consumers to parse the message. Construct one with {@link deckFault}.
- */
-export interface DeckFault {
-    /** Failure category — the discriminant consumers switch on. */
-    readonly kind: DeckFaultKind;
-    /** Human-readable, single-line summary of what went wrong. */
-    readonly message: string;
-    /** Underlying error or structured detail, if any. */
-    readonly cause?: unknown;
-}
-/**
- * Construct a {@link DeckFault}. The single sanctioned way to mint one, so the
- * shape stays uniform across every producer.
- *
- * @param kind    the failure category
- * @param message a human-readable, single-line summary
- * @param cause   optional underlying error or structured detail
- */
-export declare function deckFault(kind: DeckFaultKind, message: string, cause?: unknown): DeckFault;

package/dist/types/capability-deck/index.d.ts

@@ -1,46 +0,0 @@
-/**
- * Capability-deck subsystem — public barrel.
- *
- * Re-exports the FROZEN tooling-layer contract: the {@link Capability} alias
- * over the framework `AgentTool`, the branded {@link CapabilityId}, the
- * catalog row ({@link CapabilityCard}) that is the deck's single source of
- * truth, the {@link DeckProfile} table and {@link DeckContext} injection bag,
- * the event-sourced MCP enrollment model ({@link BridgeEntry}, {@link BridgeOp},
- * {@link LedgerSnapshot} + the pure {@link reduceLedger} fold), the assembled
- * {@link ToolDeck} the conductor consumes, and the typed {@link DeckFault}.
- *
- * Behavior modules (the manifest catalog, the builtin bridge, the per-concern
- * provisioners, the bridge network, and the deck assembler) are added to this
- * barrel as they land; consumers import the deck surface from
- * `src/capability-deck` rather than reaching into individual modules.
- */
-export type { Capability, AnyCapability, CapabilityId, CapabilityCard, CardProfiles, DeckProfile, DeckContext, DeckFsBackend, DeckShellBackend, DeckFrameworkHandles, BridgeKey, BridgeOp, BridgeEntry, LedgerSnapshot, ToolDeck, DeckBox, DeckFaultKind, DeckFault, AgentTool, AgentToolResult, ToolBox, TSchema, Static, } from "./contract";
-export { capabilityId, bridgeKey, reduceLedger, deckFault, } from "./contract";
-/**
- * Built-in bridge — the single seam re-exposing the framework's native tools
- * (read/write/edit/ls/grep/find/bash/process/checklist/web) as capabilities.
- */
-export { BUILTIN_BRIDGE, BUILTIN_IDS, BUILTIN_PROFILES, builtinDescriptors, buildBuiltin, buildBuiltinsForProfile, type BridgeBuilder, type BuiltinDescriptor, } from "./builtin-bridge";
-/**
- * Capability catalog — the single `CAPABILITY_CARDS` source of truth plus the
- * lookups/profile filters derived from it.
- */
-export { CAPABILITY_CARDS, CAPABILITY_INDEX, CARD_PROFILES, capabilityIds, hasCapability, findCard, cardsForProfile, } from "./manifest";
-/**
- * App-novel capability cards — the in-house tools the deck builds itself
- * (checklist, background-process proxy, delegate/sub-agent, SaaS connector,
- * working memory) plus their builders, stores, and injection-handle types.
- */
-export { APP_NOVEL_CARDS, todoCard, buildTodoCapability, TodoLedger, type TodoItem, type TodoState, type TodoWeight, type TodoParamsType, type TodoDetails, daemonCard, buildDaemonCapability, DaemonTable, type DaemonState, type DaemonParamsType, type DaemonDetails, taskCard, buildTaskCapability, DELEGATE_HANDLE_KEY, type DelegateRunner, type DelegateRequest, type DelegateResult, type TaskParamsType, type TaskDetails, workflowCard, buildWorkflowCapability, WORKFLOW_HANDLE_KEY, type WorkflowParamsType, type WorkflowDetails, saasCard, buildSaasCapability, SAAS_GATEWAY_KEY, type SaasGatewayPort, type RemoteToolSummary, type RemoteExecution, type SaasParamsType, type SaasDetails, memoryCard, buildMemoryCapability, InMemoryStore, MEMORY_HANDLE_KEY, type MemoryStore, type MemoryParamsType, type MemoryDetails, enterPlanModeCard, exitPlanModeCard, buildEnterPlanModeCapability, buildExitPlanModeCapability, PLAN_HANDLE_KEY, planSlug, planFilePath, writePlan, readPlan, PLANS_DIRNAME, type PlanController, type EnterPlanParamsType, type EnterPlanDetails, type ExitPlanParamsType, type ExitPlanDetails, } from "./cards/index";
-/**
- * Bridge ledger — event-sourced enrollment of dynamically grafted MCP tools:
- * content-hash / ULID key minting, the immutable {@link BridgeLedger} value with
- * its pure enroll/retire/withdraw transitions and live projections, and the
- * side-effecting mount/adapt/detach network operations.
- */
-export { qualifyBridgeName, bridgeContentKey, bridgeUlidKey, emptyBridgeLedger, bridgeLedgerFromLog, enrollBridgeCard, retire, withdrawServer, liveCapabilities, liveCapabilitiesForServer, type BridgeLedger, type EnrollRequest, attachBridgeCapabilities, detachBridge, bridgeBoxToCapabilities, bridgeCapabilityCard, bridgeConfig, type AttachResult, } from "./bridge-ledger/index";
-/**
- * Deck provisioning — the single data-driven {@link provisionDeck} assembler over
- * the profile table, plus the profile-to-cards selection it walks.
- */
-export { provisionDeck, cardsForDeckProfile, } from "./provision";