omnius 1.0.162 → 1.0.163

package/dist/index.js

@@ -20504,7 +20504,6 @@ ${text}`,
 import { existsSync as existsSync23, readdirSync as readdirSync9, readFileSync as readFileSync17, mkdirSync as mkdirSync9, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join26 } from "node:path";
 import { homedir as homedir7 } from "node:os";
-import { spawn as spawn5 } from "node:child_process";
 function globalToolsDir() {
   return join26(homedir7(), ".omnius", "tools");
 }
@@ -20529,9 +20528,9 @@ function loadCustomTools(repoRoot) {
   }
   return Array.from(definitions.values());
 }
-function buildCustomTools(repoRoot) {
+function buildCustomTools(repoRoot, options2 = {}) {
   const definitions = loadCustomTools(repoRoot);
-  return definitions.map((def) => new CustomTool(def, repoRoot));
+  return definitions.map((def) => new CustomTool(def, repoRoot, [], { shellRunner: options2.shellRunner }));
 }
 function saveCustomToolDefinition(definition, scope, repoRoot) {
   const dir = scope === "project" && repoRoot ? projectToolsDir(repoRoot) : globalToolsDir();
@@ -20542,8 +20541,9 @@ function saveCustomToolDefinition(definition, scope, repoRoot) {
   const withDocsPath = { ...normalized, docsPath };
   const withDocs = withDocsPath.docs ? withDocsPath : { ...withDocsPath, docs: renderCustomToolDocs(withDocsPath) };
   const withProvenance = ensureCustomToolProvenance(withDocs);
-  writeFileSync10(filePath, JSON.stringify(withProvenance, null, 2), "utf-8");
-  writeCustomToolDocsFile(withProvenance, scope, repoRoot);
+  const finalDefinition = { ...withProvenance, docs: renderCustomToolDocs(withProvenance) };
+  writeFileSync10(filePath, JSON.stringify(finalDefinition, null, 2), "utf-8");
+  writeCustomToolDocsFile(finalDefinition, scope, repoRoot);
   if (scope === "project" && repoRoot)
     writeCustomToolRegistry(repoRoot);
   return filePath;
@@ -20578,7 +20578,8 @@ function listCustomToolFiles(repoRoot) {
       analytics: analytics[def.name],
       qualityGate: def.qualityGate,
       docsPath: def.docsPath,
-      examples: def.examples
+      examples: def.examples,
+      shareability: evaluateCustomToolShareability(def)
     });
     seen.add(def.name);
   }
@@ -20594,7 +20595,8 @@ function listCustomToolFiles(repoRoot) {
         analytics: analytics[def.name],
         qualityGate: def.qualityGate,
         docsPath: def.docsPath,
-        examples: def.examples
+        examples: def.examples,
+        shareability: evaluateCustomToolShareability(def)
       });
     }
   }
@@ -20621,6 +20623,9 @@ function validateCustomToolDefinition(definition) {
         errors.push(`steps[${index}].description is required`);
     });
   }
+  errors.push(...validateRawInterpolation(definition.steps ?? [], definition.parameters, "steps"));
+  errors.push(...validateRawInterpolation(definition.beforeEach ?? [], definition.parameters, "beforeEach"));
+  errors.push(...validateRawInterpolation(definition.afterAll ?? [], definition.parameters, "afterAll"));
   return errors;
 }
 function renderCustomToolDocs(definition) {
@@ -20673,12 +20678,16 @@ function renderCustomToolDocs(definition) {
     lines.push("", "## Quality Gate", `Process: ${def.qualityGate.process}`);
     if (last2) {
       lines.push(`Last test: ${last2.status}${last2.testedAt ? ` at ${last2.testedAt}` : ""}`);
+      if (last2.schemaValidation)
+        lines.push(`Schema validation: ${last2.schemaValidation.status}${last2.schemaValidation.error ? ` - ${last2.schemaValidation.error}` : ""}`);
       if (last2.args)
         lines.push(`Test args: \`${JSON.stringify(last2.args)}\``);
       if (last2.error)
         lines.push(`Last error: ${last2.error}`);
     }
   }
+  const shareability = evaluateCustomToolShareability(def);
+  lines.push("", "## Nexus Sharing Gate", `Shareable: ${shareability.shareable ? "true" : "false"} - ${shareability.reason}`);
   lines.push("", "## Maintenance", `Inspect: \`manage_tools(action="inspect", tool_name="${def.name}")\``, `Patch: \`manage_tools(action="patch", tool_name="${def.name}", patch={...}, test_args={...})\``, `Test: \`manage_tools(action="test", tool_name="${def.name}", test_args={...})\``);
   return `${lines.join("\n")}
 `;
@@ -20702,7 +20711,10 @@ function writeCustomToolRegistry(repoRoot) {
     } : void 0,
     qualityGate: tool.qualityGate,
     docsPath: tool.docsPath,
-    examples: tool.examples
+    examples: tool.examples,
+    shareability: tool.shareability,
+    shareable: tool.shareability?.shareable ?? false,
+    shareableReason: tool.shareability?.reason ?? "not evaluated"
   }));
   writeFileSync10(registryPath, JSON.stringify({
     schema: "omnius.custom-tool-registry.v1",
@@ -20738,7 +20750,7 @@ function writeCustomToolContextIndex(repoRoot, tools) {
     for (const tool of tools) {
       const last2 = tool.qualityGate?.lastTest;
       const example = tool.examples?.[0]?.args;
-      lines.push(`## ${tool.name}`, "", `${tool.description}`, "", `- Scope/version: ${tool.scope} v${tool.version}`, `- Steps: ${tool.stepsCount}`, `- Last test: ${last2?.status ?? "untested"}`);
+      lines.push(`## ${tool.name}`, "", `${tool.description}`, "", `- Scope/version: ${tool.scope} v${tool.version}`, `- Steps: ${tool.stepsCount}`, `- Last test: ${last2?.status ?? "untested"}`, `- Shareable: ${tool.shareability?.shareable ? "true" : "false"}${tool.shareability?.reason ? ` - ${tool.shareability.reason}` : ""}`);
       if (tool.docsPath)
         lines.push(`- Docs: ${tool.docsPath}`);
       if (example)
@@ -20849,6 +20861,131 @@ function valueMatchesJsonType(value2, type) {
     return value2 === null;
   return true;
 }
+function stringifyParameterValue(value2) {
+  if (typeof value2 === "string")
+    return value2;
+  if (typeof value2 === "number" || typeof value2 === "boolean" || value2 === null)
+    return String(value2);
+  return JSON.stringify(value2);
+}
+function escapeForExistingShellQuote(value2, quote) {
+  if (quote === "'")
+    return value2.replace(/'/g, `'\\''`);
+  return value2.replace(/[`$\\!"]/g, "\\$&");
+}
+function parameterAllowsUnsafeRaw(schema, name10) {
+  const props = schema["properties"];
+  if (!props || typeof props !== "object" || Array.isArray(props))
+    return false;
+  const prop = props[name10];
+  return prop?.["x-omnius-unsafeRaw"] === true;
+}
+function validateRawInterpolation(steps, schema, label) {
+  const errors = [];
+  for (let i2 = 0; i2 < steps.length; i2++) {
+    const command = steps[i2]?.command;
+    if (!command)
+      continue;
+    const matches = command.matchAll(/\{\{raw:([A-Za-z_][A-Za-z0-9_]*)\}\}/g);
+    for (const match of matches) {
+      const param = match[1];
+      if (!parameterAllowsUnsafeRaw(schema, param)) {
+        errors.push(`${label}[${i2}] uses {{raw:${param}}} but parameter ${param} does not declare x-omnius-unsafeRaw: true`);
+      }
+    }
+  }
+  return errors;
+}
+function validateOutputAgainstSchema(output, schema) {
+  if (!schema)
+    return { status: "not_applicable" };
+  let value2;
+  try {
+    value2 = JSON.parse(output.trim());
+  } catch {
+    return {
+      status: "failed",
+      error: "output_schema_validation_failed: expected JSON output"
+    };
+  }
+  const errors = validateJsonValueAgainstSchema(value2, schema, "$");
+  if (errors.length > 0) {
+    return {
+      status: "failed",
+      error: `output_schema_validation_failed: ${errors.join("; ")}`
+    };
+  }
+  return { status: "passed" };
+}
+function validateJsonValueAgainstSchema(value2, schema, path12) {
+  const errors = [];
+  const expected = schema["type"];
+  const allowed = Array.isArray(expected) ? expected.map(String) : expected ? [String(expected)] : [];
+  if (allowed.length > 0 && !allowed.some((type) => valueMatchesJsonType(value2, type))) {
+    errors.push(`${path12} expected ${allowed.join("|")}, got ${Array.isArray(value2) ? "array" : typeof value2}`);
+    return errors;
+  }
+  const enumValues = schema["enum"];
+  if (Array.isArray(enumValues) && !enumValues.includes(value2)) {
+    errors.push(`${path12} must be one of ${enumValues.map(String).join(", ")}`);
+  }
+  const required = Array.isArray(schema["required"]) ? schema["required"].map(String) : [];
+  const properties = schema["properties"] && typeof schema["properties"] === "object" && !Array.isArray(schema["properties"]) ? schema["properties"] : {};
+  if (required.length > 0 || Object.keys(properties).length > 0) {
+    if (!value2 || typeof value2 !== "object" || Array.isArray(value2)) {
+      errors.push(`${path12} expected object for declared properties`);
+      return errors;
+    }
+    const obj = value2;
+    for (const key of required) {
+      if (obj[key] === void 0)
+        errors.push(`${path12}.${key} is required`);
+    }
+    for (const [key, propSchema] of Object.entries(properties)) {
+      if (obj[key] !== void 0) {
+        errors.push(...validateJsonValueAgainstSchema(obj[key], propSchema, `${path12}.${key}`));
+      }
+    }
+  }
+  if (Array.isArray(value2)) {
+    const itemSchema = schema["items"];
+    if (itemSchema && typeof itemSchema === "object" && !Array.isArray(itemSchema)) {
+      value2.forEach((item, index) => {
+        errors.push(...validateJsonValueAgainstSchema(item, itemSchema, `${path12}[${index}]`));
+      });
+    }
+  }
+  return errors;
+}
+function evaluateCustomToolShareability(definition) {
+  const def = normalizeCustomToolDefinition(definition);
+  if (def.qualityGate?.lastTest?.status !== "passed") {
+    return { shareable: false, reason: "quality gate has not passed" };
+  }
+  if (!def.docsPath)
+    return { shareable: false, reason: "missing generated docs path" };
+  if (!def.examples || def.examples.length === 0)
+    return { shareable: false, reason: "missing examples" };
+  if (!def.provenance)
+    return { shareable: false, reason: "missing provenance" };
+  const deps = def.dependencies;
+  if (!deps || !(deps.tools?.length || deps.commands?.length || deps.files?.length)) {
+    return { shareable: false, reason: "missing dependency declaration" };
+  }
+  const props = def.parameters["properties"];
+  if (props && typeof props === "object" && !Array.isArray(props)) {
+    for (const [name10, prop] of Object.entries(props)) {
+      if (prop?.["x-omnius-unsafeRaw"] === true) {
+        return { shareable: false, reason: `unsafe raw parameter is not shareable: ${name10}` };
+      }
+    }
+  }
+  const allSteps = [...def.steps ?? [], ...def.beforeEach ?? [], ...def.afterAll ?? []];
+  if (allSteps.some((step) => /\{\{raw:[A-Za-z_][A-Za-z0-9_]*\}\}/.test(step.command ?? ""))) {
+    return { shareable: false, reason: "raw shell interpolation is not shareable" };
+  }
+  return { shareable: true, reason: "passed quality gate with docs, examples, dependencies, and provenance" };
+}
 function readProjectAnalytics(repoRoot) {
   try {
     const analyticsPath = join26(projectToolsDir(repoRoot), ".analytics.json");
@@ -20889,6 +21026,7 @@ var BUILTIN_TOOL_NAMES, CustomTool;
 var init_custom_tool = __esm({
   "packages/execution/dist/tools/custom-tool.js"() {
     "use strict";
+    init_shell();
     init_provenance();
     BUILTIN_TOOL_NAMES = /* @__PURE__ */ new Set([
       "file_read",
@@ -20930,11 +21068,13 @@ var init_custom_tool = __esm({
       name;
       description;
       parameters;
+      customToolMetadata;
       steps;
       workingDir;
       definition;
       executionStack;
       executionOptions;
+      shellRunner;
       constructor(definition, workingDir, executionStack = [], executionOptions = {}) {
         this.definition = normalizeCustomToolDefinition(definition);
         this.name = this.definition.name;
@@ -20944,20 +21084,37 @@ var init_custom_tool = __esm({
         this.workingDir = workingDir;
         this.executionStack = executionStack;
         this.executionOptions = executionOptions;
+        this.shellRunner = executionOptions.shellRunner ?? new ShellTool(workingDir);
+        const analytics = readProjectAnalytics(workingDir)[this.definition.name] ?? this.definition.analytics;
+        this.customToolMetadata = {
+          isCustomTool: true,
+          version: this.definition.version,
+          docsPath: this.definition.docsPath,
+          qualityGate: this.definition.qualityGate,
+          dependencies: this.definition.dependencies,
+          examples: this.definition.examples,
+          analytics,
+          shareability: evaluateCustomToolShareability(this.definition)
+        };
       }
       async execute(args) {
         const start2 = performance.now();
         const outputs = [];
         let allSuccess = true;
+        let lastRawOutput = "";
+        let failedStep;
         const validation = validateArgsAgainstSchema(args, this.parameters);
         if (!validation.valid) {
           const durationMs2 = performance.now() - start2;
           this.recordAnalytics(false, durationMs2);
+          const error = `Invalid arguments for ${this.name}:
+${validation.errors.map((e2) => `- ${e2}`).join("\n")}`;
+          const repair2 = this.buildRepairEnvelope(args, { label: "argument validation", error });
           return {
             success: false,
-            output: "",
-            error: `Invalid arguments for ${this.name}:
-${validation.errors.map((e2) => `- ${e2}`).join("\n")}`,
+            output: repair2,
+            llmContent: repair2,
+            error,
             durationMs: durationMs2
           };
         }
@@ -20965,11 +21122,14 @@ ${validation.errors.map((e2) => `- ${e2}`).join("\n")}`,
         if (dependencyErrors.length > 0) {
           const durationMs2 = performance.now() - start2;
           this.recordAnalytics(false, durationMs2);
+          const error = `Custom tool dependency check failed:
+${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`;
+          const repair2 = this.buildRepairEnvelope(args, { label: "dependency validation", error });
           return {
             success: false,
-            output: "",
-            error: `Custom tool dependency check failed:
-${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
+            output: repair2,
+            llmContent: repair2,
+            error,
             durationMs: durationMs2
           };
         }
@@ -20995,10 +21155,12 @@ ${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
           try {
             const result = step.tool ? await this.runNestedTool(step, args) : await this.runShellStep(step, args);
             outputs.push(result.output);
+            lastRawOutput = result.rawOutput ?? result.output;
             if (!result.success) {
               allSuccess = false;
               if (result.error)
                 outputs.push(`Error: ${result.error}`);
+              failedStep = { label, step, output: result.output, error: result.error };
               if (!step.continueOnError) {
                 outputs.push(`${label} failed. Stopping.`);
                 break;
@@ -21007,32 +21169,67 @@ ${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
             }
           } catch (err) {
             allSuccess = false;
-            outputs.push(`${label} error: ${err instanceof Error ? err.message : String(err)}`);
+            const error = err instanceof Error ? err.message : String(err);
+            outputs.push(`${label} error: ${error}`);
+            failedStep = { label, step, output: "", error };
             if (!step.continueOnError)
               break;
           }
         }
+        const schemaValidation = validateOutputAgainstSchema(lastRawOutput || outputs.join("\n"), this.definition.outputSchema);
+        if (schemaValidation.status === "passed") {
+          outputs.push("Output schema validation: passed");
+        }
+        if (schemaValidation.status === "failed") {
+          allSuccess = false;
+          outputs.push(`Output schema validation failed: ${schemaValidation.error}`);
+          failedStep ??= {
+            label: "output schema validation",
+            step: { description: "Validate declared output schema" },
+            output: lastRawOutput || outputs.join("\n"),
+            error: schemaValidation.error
+          };
+        }
         const durationMs = performance.now() - start2;
         this.recordAnalytics(allSuccess, durationMs);
+        const output = outputs.join("\n");
+        const repair = !allSuccess ? this.buildRepairEnvelope(args, failedStep) : void 0;
         return {
           success: allSuccess,
-          output: outputs.join("\n"),
+          output: repair ? `${output}
+
+${repair}` : output,
+          llmContent: repair ? `${output}
+
+${repair}` : output,
           error: allSuccess ? void 0 : "One or more steps failed",
           durationMs
         };
       }
-      /** Replace {{param}} placeholders with actual argument values */
+      /** Replace {{param}} placeholders with shell-safe argument values. */
       interpolate(template, args) {
-        return template.replace(/\{\{(\w+)\}\}/g, (_, key) => {
+        return template.replace(/\{\{(?:(shell|json|raw):)?([A-Za-z_][A-Za-z0-9_]*)\}\}/g, (match, mode, key, offset, source) => {
           const val = args[key];
           if (val === void 0 || val === null)
             return "";
-          return String(val).replace(/[`$\\!"]/g, "\\$&");
+          const normalizedMode = mode ?? "shell";
+          const quote = source[offset - 1];
+          const closedBySameQuote = (quote === "'" || quote === '"') && source[offset + match.length] === quote;
+          if (normalizedMode === "raw") {
+            if (!parameterAllowsUnsafeRaw(this.parameters, key)) {
+              throw new Error(`Unsafe raw interpolation rejected for parameter "${key}". Add x-omnius-unsafeRaw: true to the parameter schema only when raw shell insertion is intentional.`);
+            }
+            return stringifyParameterValue(val);
+          }
+          const text = normalizedMode === "json" ? JSON.stringify(val) : stringifyParameterValue(val);
+          if (closedBySameQuote)
+            return escapeForExistingShellQuote(text, quote);
+          return this.shellQuote(text);
         });
       }
       interpolateValue(value2, args) {
         if (typeof value2 === "string")
-          return this.interpolate(value2, args);
+          return this.interpolateNestedValue(value2, args);
         if (Array.isArray(value2))
           return value2.map((item) => this.interpolateValue(item, args));
         if (value2 && typeof value2 === "object") {
@@ -21043,6 +21240,16 @@ ${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
         }
         return value2;
       }
+      interpolateNestedValue(template, args) {
+        return template.replace(/\{\{(?:(shell|json|raw):)?([A-Za-z_][A-Za-z0-9_]*)\}\}/g, (_, mode, key) => {
+          const val = args[key];
+          if (val === void 0 || val === null)
+            return "";
+          if (mode === "json")
+            return JSON.stringify(val);
+          return stringifyParameterValue(val);
+        });
+      }
       shouldRunStep(step, args) {
         if (!step.when)
           return true;
@@ -21057,10 +21264,14 @@ ${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
         const command = this.interpolate(step.command ?? "", args);
         if (!command)
           return { success: false, output: "", error: "Shell step is missing command" };
-        const result = await this.runCommand(command);
+        const result = await this.shellRunner.execute({ command, timeout: 6e4 });
+        const modelFacing = result.llmContent ?? result.output;
         return {
-          ...result,
-          output: [`$ ${command}`, result.output].filter(Boolean).join("\n")
+          success: result.success,
+          output: [`$ ${command}`, modelFacing].filter(Boolean).join("\n"),
+          rawOutput: result.output,
+          llmContent: modelFacing,
+          error: result.error
         };
       }
       async runNestedTool(step, args) {
@@ -21081,6 +21292,8 @@ ${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
         return {
           success: result.success,
           output: [`custom_tool ${toolName}(${JSON.stringify(nestedArgs)})`, result.output].join("\n"),
+          rawOutput: result.llmContent ?? result.output,
+          llmContent: result.llmContent,
           error: result.error
         };
       }
@@ -21100,7 +21313,7 @@ ${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
             errors.push(`file dependency not found: ${file}`);
         }
         for (const command of deps.commands ?? []) {
-          const check = await this.runCommand(`command -v ${this.shellQuote(command)}`);
+          const check = await this.shellRunner.execute({ command: `command -v ${this.shellQuote(command)}`, timeout: 3e4 });
           if (!check.success)
             errors.push(`command dependency not found on PATH: ${command}`);
         }
@@ -21109,6 +21322,25 @@ ${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
       shellQuote(value2) {
         return `'${value2.replace(/'/g, `'\\''`)}'`;
       }
+      buildRepairEnvelope(args, failure) {
+        return [
+          "[CUSTOM_TOOL_REPAIR_ENVELOPE]",
+          `tool: ${this.name}`,
+          `version: ${this.definition.version}`,
+          this.definition.docsPath ? `docs_path: ${this.definition.docsPath}` : "docs_path: [missing]",
+          `args: ${JSON.stringify(args)}`,
+          failure?.label ? `failed_step: ${failure.label}` : "failed_step: unknown",
+          failure?.step?.description ? `failed_step_description: ${failure.step.description}` : "",
+          failure?.error ? `error: ${failure.error}` : "",
+          failure?.output ? `output:
+${String(failure.output).slice(0, 4e3)}` : "",
+          `quality_gate: ${JSON.stringify(this.definition.qualityGate ?? { lastTest: { status: "untested" } })}`,
+          "repair_action: inspect the docs and patch the tool definition, then run its smoke test before relying on it again.",
+          `suggested_patch_call: manage_tools(action="patch", tool_name="${this.name}", patch={...}, test_args=${JSON.stringify(args)})`,
+          `suggested_test_call: manage_tools(action="test", tool_name="${this.name}", test_args=${JSON.stringify(args)})`,
+          "[/CUSTOM_TOOL_REPAIR_ENVELOPE]"
+        ].filter(Boolean).join("\n");
+      }
       recordAnalytics(success, durationMs) {
         if (this.executionOptions.recordAnalytics === false)
           return;
@@ -21138,51 +21370,6 @@ ${dependencyErrors.map((e2) => `- ${e2}`).join("\n")}`,
         } catch {
         }
       }
-      /** Execute a single shell command and return output */
-      runCommand(command) {
-        return new Promise((resolve57) => {
-          const child = spawn5("bash", ["-c", command], {
-            cwd: this.workingDir,
-            env: { ...process.env, CI: "true", NO_COLOR: "1" },
-            stdio: ["pipe", "pipe", "pipe"]
-          });
-          let stdout = "";
-          let stderr = "";
-          const maxBuf = 512 * 1024;
-          child.stdout.on("data", (data) => {
-            stdout += data.toString();
-            if (stdout.length > maxBuf)
-              stdout = stdout.slice(0, maxBuf);
-          });
-          child.stderr.on("data", (data) => {
-            stderr += data.toString();
-            if (stderr.length > maxBuf)
-              stderr = stderr.slice(0, maxBuf);
-          });
-          child.stdin.end();
-          const timer = setTimeout(() => {
-            try {
-              child.kill("SIGTERM");
-            } catch {
-            }
-            resolve57({ success: false, output: stdout, error: "Command timed out after 60s" });
-          }, 6e4);
-          child.on("close", (code8) => {
-            clearTimeout(timer);
-            resolve57({
-              success: code8 === 0,
-              output: stdout + (stderr && code8 === 0 ? `
-STDERR:
-${stderr}` : ""),
-              error: code8 !== 0 ? stderr || `Exit code ${code8}` : void 0
-            });
-          });
-          child.on("error", (err) => {
-            clearTimeout(timer);
-            resolve57({ success: false, output: stdout, error: err.message });
-          });
-        });
-      }
     };
   }
 });
@@ -21195,17 +21382,17 @@ function templateSteps(template) {
   switch (template) {
     case "build_test":
       return [
-        { command: "{{build_command}}", description: "Run build command" },
-        { command: "{{test_command}}", description: "Run test command" }
+        { command: "{{raw:build_command}}", description: "Run build command" },
+        { command: "{{raw:test_command}}", description: "Run test command" }
       ];
     case "test_only":
       return [
-        { command: "{{test_command}}", description: "Run test command" }
+        { command: "{{raw:test_command}}", description: "Run test command" }
       ];
     case "diagnostic":
       return [
         { command: "git status --short", description: "Inspect working tree" },
-        { command: "{{diagnostic_command}}", description: "Run diagnostic command" }
+        { command: "{{raw:diagnostic_command}}", description: "Run diagnostic command" }
       ];
     case "git_preflight":
       return [
@@ -21219,14 +21406,14 @@ function templateSteps(template) {
 function mergeTemplateParameters(template, provided) {
   const hasProperties = provided["properties"] && typeof provided["properties"] === "object" && Object.keys(provided["properties"]).length > 0;
   if (hasProperties)
-    return provided;
+    return applyTemplateRawOptIns(template, provided);
   switch (template) {
     case "build_test":
       return {
         type: "object",
         properties: {
-          build_command: { type: "string", description: "Build command to run" },
-          test_command: { type: "string", description: "Test command to run" }
+          build_command: { type: "string", description: "Build command to run", "x-omnius-unsafeRaw": true },
+          test_command: { type: "string", description: "Test command to run", "x-omnius-unsafeRaw": true }
         },
         required: ["build_command", "test_command"]
       };
@@ -21234,7 +21421,7 @@ function mergeTemplateParameters(template, provided) {
       return {
         type: "object",
         properties: {
-          test_command: { type: "string", description: "Test command to run" }
+          test_command: { type: "string", description: "Test command to run", "x-omnius-unsafeRaw": true }
         },
         required: ["test_command"]
       };
@@ -21242,7 +21429,7 @@ function mergeTemplateParameters(template, provided) {
       return {
         type: "object",
         properties: {
-          diagnostic_command: { type: "string", description: "Diagnostic command to run" }
+          diagnostic_command: { type: "string", description: "Diagnostic command to run", "x-omnius-unsafeRaw": true }
         },
         required: ["diagnostic_command"]
       };
@@ -21250,6 +21437,21 @@ function mergeTemplateParameters(template, provided) {
       return provided;
   }
 }
+function applyTemplateRawOptIns(template, provided) {
+  const rawParams = template === "build_test" ? ["build_command", "test_command"] : template === "test_only" ? ["test_command"] : template === "diagnostic" ? ["diagnostic_command"] : [];
+  if (rawParams.length === 0)
+    return provided;
+  const properties = provided["properties"];
+  if (!properties || typeof properties !== "object" || Array.isArray(properties))
+    return provided;
+  const nextProperties = { ...properties };
+  for (const param of rawParams) {
+    if (nextProperties[param]) {
+      nextProperties[param] = { ...nextProperties[param], "x-omnius-unsafeRaw": true };
+    }
+  }
+  return { ...provided, properties: nextProperties };
+}
 function parseStep(raw, index) {
   const command = String(raw["command"] ?? "").trim();
   const tool = String(raw["tool"] ?? "").trim();
@@ -21334,7 +21536,22 @@ async function runToolSmokeTest(definition, repoRoot, args) {
     testedAt: (/* @__PURE__ */ new Date()).toISOString(),
     durationMs: result.durationMs,
     outputPreview: truncateText(result.output, 2e3),
-    error: result.error
+    error: result.error,
+    schemaValidation: schemaValidationForTest(definition, result)
+  };
+}
+function schemaValidationForTest(definition, result) {
+  if (!definition.outputSchema)
+    return { status: "not_applicable" };
+  const combined = `${result.output}
+${result.llmContent ?? ""}
+${result.error ?? ""}`;
+  if (combined.includes("Output schema validation: passed"))
+    return { status: "passed" };
+  const failed = combined.match(/Output schema validation failed:\s*([^\n]+)/);
+  return {
+    status: "failed",
+    error: failed?.[1] ?? result.error ?? "output_schema_validation_failed"
   };
 }
 function truncateText(value2, max) {
@@ -21456,7 +21673,7 @@ var init_tool_creator = __esm({
     ]);
     CreateToolTool = class {
       name = "create_tool";
-      description = "Create a reusable custom tool from a multi-step workflow. Use this when you notice you're performing the same sequence of operations repeatedly (3+ times). The tool will be saved and available in future sessions. Parameters in step commands use {{param}} interpolation.";
+      description = "Create a reusable custom tool from a multi-step workflow. Use this when you notice you're performing the same sequence of operations repeatedly (3+ times). The tool will be saved and available in future sessions. Parameters in shell step commands use shell-safe {{param}} interpolation; use {{json:param}} for JSON and {{raw:param}} only when the parameter schema explicitly opts into x-omnius-unsafeRaw.";
       parameters = {
         type: "object",
         properties: {
@@ -21474,7 +21691,7 @@ var init_tool_creator = __esm({
           },
           steps: {
             type: "array",
-            description: "Ordered list of steps. Each step has either command (shell command with {{param}} placeholders) or tool (nested custom tool name) with args, plus description, continueOnError, and optional when condition.",
+            description: "Ordered list of steps. Each step has either command (shell command with {{param}} placeholders) or tool (nested custom tool name) with args, plus description, continueOnError, and optional when condition. {{param}} and {{shell:param}} are shell-escaped, {{json:param}} JSON-encodes, and {{raw:param}} requires x-omnius-unsafeRaw on that parameter.",
             items: {
               type: "object",
               properties: {
@@ -21819,6 +22036,8 @@ ${errors.map((err) => `- ${err}`).join("\n")}`,
                 lines.push(`    deps: ${JSON.stringify(t2.dependencies)}`);
               if (t2.qualityGate?.lastTest)
                 lines.push(`    last test: ${t2.qualityGate.lastTest.status}`);
+              if (t2.shareability)
+                lines.push(`    shareable: ${t2.shareability.shareable ? "true" : "false"} - ${t2.shareability.reason}`);
               if (t2.docsPath)
                 lines.push(`    docs: ${t2.docsPath}`);
               if (t2.analytics) {
@@ -21917,7 +22136,8 @@ ${errors.map((err) => `- ${err}`).join("\n")}`,
               testedAt: (/* @__PURE__ */ new Date()).toISOString(),
               durationMs: result.durationMs,
               outputPreview: truncateText(result.output, 2e3),
-              error: result.error
+              error: result.error,
+              schemaValidation: schemaValidationForTest(def, result)
             };
             saveCustomToolDefinition({
               ...def,
@@ -23921,13 +24141,13 @@ var init_structured_file = __esm({
 });
 
 // packages/execution/dist/tools/code-sandbox.js
-import { spawn as spawn6 } from "node:child_process";
+import { spawn as spawn5 } from "node:child_process";
 import { writeFile as writeFile9, mkdtemp, rm as rm2, readdir as readdir4, stat as stat3 } from "node:fs/promises";
 import { join as join31 } from "node:path";
 import { tmpdir as tmpdir4 } from "node:os";
 function runProcess(cmd, args, options2) {
   return new Promise((resolve57) => {
-    const proc = spawn6(cmd, args, {
+    const proc = spawn5(cmd, args, {
       cwd: options2.cwd,
       timeout: options2.timeout,
       env: {
@@ -254977,7 +255197,7 @@ New: ${newNarrative.slice(0, 200)}...`,
 });
 
 // packages/execution/dist/tools/repl.js
-import { spawn as spawn7 } from "node:child_process";
+import { spawn as spawn6 } from "node:child_process";
 import { createServer as createServer2 } from "node:net";
 import { join as join34 } from "node:path";
 import { tmpdir as tmpdir5 } from "node:os";
@@ -255110,7 +255330,7 @@ except NameError:
       // ── Process lifecycle ────────────────────────────────────────────────────
       async startProcess() {
         await this.startIpcServer();
-        this.proc = spawn7("python3", ["-u", "-i", "-q"], {
+        this.proc = spawn6("python3", ["-u", "-i", "-q"], {
           cwd: this.cwd,
           stdio: ["pipe", "pipe", "pipe"],
           env: {
@@ -257281,7 +257501,7 @@ var init_model_store = __esm({
 });
 
 // packages/execution/dist/tools/image-generate.js
-import { spawn as spawn8 } from "node:child_process";
+import { spawn as spawn7 } from "node:child_process";
 import { existsSync as existsSync29, statSync as statSync11 } from "node:fs";
 import { chmod as chmod3, mkdir as mkdir12, writeFile as writeFile17 } from "node:fs/promises";
 import { join as join40, resolve as resolve19 } from "node:path";
@@ -257522,7 +257742,7 @@ function imageGenerationSetupPlan(backend, repoRoot = ".", model) {
 async function runProcess2(command, args, options2) {
   return new Promise((resolveProcess) => {
     const startedAt2 = Date.now();
-    const child = spawn8(command, args, {
+    const child = spawn7(command, args, {
       cwd: options2.cwd,
       env: { ...process.env, ...options2.env },
       stdio: ["ignore", "pipe", "pipe"]
@@ -259325,7 +259545,7 @@ __export(audio_generate_exports, {
   inferAudioGenerationBackend: () => inferAudioGenerationBackend,
   isAudioPresetGated: () => isAudioPresetGated
 });
-import { execFileSync as execFileSync4, spawn as spawn9 } from "node:child_process";
+import { execFileSync as execFileSync4, spawn as spawn8 } from "node:child_process";
 import { existsSync as existsSync30, readdirSync as readdirSync13, statSync as statSync12 } from "node:fs";
 import { chmod as chmod4, mkdir as mkdir13, writeFile as writeFile18 } from "node:fs/promises";
 import { join as join41 } from "node:path";
@@ -259469,7 +259689,7 @@ function directorySizeBytes(path12) {
 async function runProcess3(command, args, options2) {
   return new Promise((resolveProcess) => {
     const startedAt2 = Date.now();
-    const child = spawn9(command, args, {
+    const child = spawn8(command, args, {
       cwd: options2.cwd,
       env: { ...process.env, ...options2.env },
       stdio: ["ignore", "pipe", "pipe"]
@@ -261259,7 +261479,7 @@ if __name__ == "__main__":
 });
 
 // packages/execution/dist/tools/video-generate.js
-import { spawn as spawn10 } from "node:child_process";
+import { spawn as spawn9 } from "node:child_process";
 import { existsSync as existsSync31, readFileSync as readFileSync22, statSync as statSync13 } from "node:fs";
 import { chmod as chmod5, mkdir as mkdir14, writeFile as writeFile19 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
@@ -261513,7 +261733,7 @@ function videoGenerationSetupPlan(backend, repoRoot = ".", model) {
 async function runProcess4(command, args, options2) {
   return new Promise((resolveProcess) => {
     const startedAt2 = Date.now();
-    const child = spawn10(command, args, {
+    const child = spawn9(command, args, {
       cwd: options2.cwd,
       env: { ...process.env, ...options2.env },
       stdio: ["ignore", "pipe", "pipe"]
@@ -261749,7 +261969,7 @@ async function probeComfyAvailable(baseUrl) {
 }
 async function launchComfyBackground(args) {
   const env2 = { ...process.env, PYTHONUNBUFFERED: "1" };
-  const child = spawn10("python3", [
+  const child = spawn9("python3", [
     args.bootstrap,
     "--dir",
     args.installDir,
@@ -261882,7 +262102,7 @@ async function muxAudioIntoVideo(args) {
     args.outputPath
   ];
   return await new Promise((resolve57) => {
-    const child = spawn10(ffmpegBin(), argv, { stdio: ["ignore", "pipe", "pipe"] });
+    const child = spawn9(ffmpegBin(), argv, { stdio: ["ignore", "pipe", "pipe"] });
     let stderr = "";
     child.stderr?.on("data", (chunk) => {
       stderr += chunk.toString();
@@ -261898,7 +262118,7 @@ async function muxAudioIntoVideo(args) {
 }
 async function ffmpegExtractFirstFrame(videoPath, thumbnailPath) {
   return await new Promise((resolve57) => {
-    const child = spawn10(ffmpegBin(), [
+    const child = spawn9(ffmpegBin(), [
       "-hide_banner",
       "-loglevel",
       "error",
@@ -264951,7 +265171,7 @@ __export(vision_exports, {
   resetMoondreamClient: () => resetMoondreamClient
 });
 import { readFileSync as readFileSync23, existsSync as existsSync32, statSync as statSync14, unlinkSync as unlinkSync5, writeFileSync as writeFileSync14 } from "node:fs";
-import { execSync as execSync16, spawn as spawn11, spawnSync as spawnSync4 } from "node:child_process";
+import { execSync as execSync16, spawn as spawn10, spawnSync as spawnSync4 } from "node:child_process";
 import { resolve as resolve22, extname as extname6, basename as basename7, dirname as dirname9, join as join43 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 async function probeStation(endpoint) {
@@ -265023,7 +265243,7 @@ async function autoLaunchStation(port = 2020) {
   if (!existsSync32(launcherScript))
     return false;
   return new Promise((resolvePromise) => {
-    const child = spawn11(pythonBin, [launcherScript, "--port", String(port)], {
+    const child = spawn10(pythonBin, [launcherScript, "--port", String(port)], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     stationProcess = child;
@@ -266908,7 +267128,7 @@ Note: Advanced Python pipeline not available — install pytesseract, opencv-pyt
 });
 
 // packages/execution/dist/tools/browser-action.js
-import { execSync as execSync21, spawn as spawn12 } from "node:child_process";
+import { execSync as execSync21, spawn as spawn11 } from "node:child_process";
 import { copyFileSync, existsSync as existsSync36, mkdirSync as mkdirSync13, readFileSync as readFileSync26 } from "node:fs";
 import { basename as basename11, dirname as dirname11, join as join47, resolve as resolve26 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
@@ -266956,7 +267176,7 @@ async function launchService() {
   if (!existsSync36(SCRAPE_SCRIPT)) {
     return `Scrape service script not found at ${SCRAPE_SCRIPT}`;
   }
-  serviceProcess = spawn12(python, [SCRAPE_SCRIPT], {
+  serviceProcess = spawn11(python, [SCRAPE_SCRIPT], {
     stdio: "ignore",
     env: {
       ...process.env,
@@ -267425,7 +267645,7 @@ var init_browser_action = __esm({
 });
 
 // packages/execution/dist/tools/autoresearch.js
-import { execSync as execSync22, spawn as spawn13 } from "node:child_process";
+import { execSync as execSync22, spawn as spawn12 } from "node:child_process";
 import { existsSync as existsSync37, readFileSync as readFileSync27, writeFileSync as writeFileSync15, mkdirSync as mkdirSync14, appendFileSync, copyFileSync as copyFileSync2 } from "node:fs";
 import { join as join48, resolve as resolve27, dirname as dirname12 } from "node:path";
 import { fileURLToPath as fileURLToPath7 } from "node:url";
@@ -267685,7 +267905,7 @@ Next steps:
         const timeoutMs = timeoutMin * 60 * 1e3;
         const logPath3 = join48(workspace, "run.log");
         return new Promise((resolveResult) => {
-          const proc = spawn13("uv", ["run", "train.py"], {
+          const proc = spawn12("uv", ["run", "train.py"], {
             cwd: workspace,
             timeout: timeoutMs,
             stdio: ["pipe", "pipe", "pipe"],
@@ -269708,7 +269928,7 @@ var init_tool_alias = __esm({
 });
 
 // packages/execution/dist/tools/opencode.js
-import { execSync as execSync24, spawn as spawn14 } from "node:child_process";
+import { execSync as execSync24, spawn as spawn13 } from "node:child_process";
 import { existsSync as existsSync38 } from "node:fs";
 import { join as join52, resolve as resolve31 } from "node:path";
 function findOpencode() {
@@ -269896,7 +270116,7 @@ var init_opencode = __esm({
           let output = "";
           const maxOutput = 5e5;
           let timedOut = false;
-          const child = spawn14(binary, cmdArgs, {
+          const child = spawn13(binary, cmdArgs, {
             cwd: dir,
             env: { ...process.env, CI: "true", NONINTERACTIVE: "1" },
             stdio: ["ignore", "pipe", "pipe"]
@@ -269982,7 +270202,7 @@ var init_opencode = __esm({
 });
 
 // packages/execution/dist/tools/factory.js
-import { execSync as execSync25, spawn as spawn15 } from "node:child_process";
+import { execSync as execSync25, spawn as spawn14 } from "node:child_process";
 import { existsSync as existsSync39 } from "node:fs";
 import { join as join53 } from "node:path";
 function findDroid() {
@@ -270201,7 +270421,7 @@ var init_factory = __esm({
           let output = "";
           const maxOutput = 5e5;
           let timedOut = false;
-          const child = spawn15(binary, cmdArgs, {
+          const child = spawn14(binary, cmdArgs, {
             cwd: dir,
             env: { ...process.env },
             stdio: ["ignore", "pipe", "pipe"]
@@ -518845,7 +519065,7 @@ Saved to: ${tempFile}`,
 });
 
 // packages/execution/dist/tools/audio-playback.js
-import { execFileSync as execFileSync5, execSync as execSync30, spawn as spawn16 } from "node:child_process";
+import { execFileSync as execFileSync5, execSync as execSync30, spawn as spawn15 } from "node:child_process";
 import { copyFileSync as copyFileSync3, existsSync as existsSync45, statSync as statSync22, writeFileSync as writeFileSync18, mkdirSync as mkdirSync19, readdirSync as readdirSync17, writeSync } from "node:fs";
 import { basename as basename14, extname as extname10, isAbsolute as isAbsolute2, join as join62 } from "node:path";
 import { homedir as homedir16, tmpdir as tmpdir11 } from "node:os";
@@ -519413,7 +519633,7 @@ function ensureLuxttsDaemon() {
       }
       finish(false);
     }, 12e4);
-    const daemon = spawn16(venvPy, [inferScript], {
+    const daemon = spawn15(venvPy, [inferScript], {
       stdio: ["pipe", "pipe", "pipe"],
       cwd: tmpdir11(),
       env: { ...process.env, LUXTTS_REPO_PATH: repoDir }
@@ -523985,7 +524205,7 @@ print(json.dumps({"ok": False, "error": "No whisper backend available"}))
 });
 
 // packages/execution/dist/tools/full-sub-agent.js
-import { spawn as spawn17, ChildProcess } from "node:child_process";
+import { spawn as spawn16, ChildProcess } from "node:child_process";
 import { randomBytes as randomBytes17 } from "node:crypto";
 function buildSubProcessArgs(opts) {
   const args = [];
@@ -524026,7 +524246,7 @@ function spawnFullSubAgent(task, opts, onOutput, onComplete) {
     timeoutMs: opts.timeoutMs,
     offline: opts.offline
   });
-  const child = spawn17("node", [omniusBin, ...cliArgs], {
+  const child = spawn16("node", [omniusBin, ...cliArgs], {
     cwd: opts.workingDir || process.cwd(),
     env: {
       ...process.env,
@@ -524468,7 +524688,7 @@ var init_agent_tool = __esm({
         })();
         if (isolation === "worktree") {
           this.callbacks.onViewRegister?.(agentId, label);
-          const spawn34 = this.callbacks.spawnSubprocess({
+          const spawn33 = this.callbacks.spawnSubprocess({
             id: agentId,
             task: composedPrompt,
             model,
@@ -524478,7 +524698,7 @@ var init_agent_tool = __esm({
             success: true,
             output: `Agent spawned (subprocess, worktree): ${agentId}
   Type: ${subagentType}
-  PID: ${spawn34.pid}
+  PID: ${spawn33.pid}
   Task: ${prompt.slice(0, 100)}
   Use task_status("${agentId}") to check progress.`,
             durationMs: performance.now() - start2
@@ -524916,7 +525136,7 @@ var init_send_message = __esm({
 });
 
 // packages/execution/dist/mcp/transport.js
-import { spawn as spawn18 } from "node:child_process";
+import { spawn as spawn17 } from "node:child_process";
 async function createTransport(config) {
   if (!config.type || config.type === "stdio") {
     const transport = new StdioTransport();
@@ -524948,7 +525168,7 @@ var init_transport5 = __esm({
       async connect(config) {
         const env2 = { ...process.env, ...config.env };
         const args = config.args ?? [];
-        this.process = spawn18(config.command, args, {
+        this.process = spawn17(config.command, args, {
           env: env2,
           stdio: ["pipe", "pipe", "pipe"]
         });
@@ -527573,7 +527793,7 @@ Topic: ${segments.slice(0, 5).map((s2) => s2.text).join(" ").slice(0, 300)}`,
 
 // packages/execution/dist/tools/video-scan.js
 import { existsSync as existsSync59, readFileSync as readFileSync44, statSync as statSync25 } from "node:fs";
-import { spawn as spawn19 } from "node:child_process";
+import { spawn as spawn18 } from "node:child_process";
 import { resolve as resolve36, dirname as dirname18, join as join74, basename as basename16 } from "node:path";
 import { fileURLToPath as fileURLToPath9 } from "node:url";
 import { homedir as homedir25 } from "node:os";
@@ -527618,7 +527838,7 @@ async function autoLaunchSidecar(cfg) {
   if (!launcher)
     return false;
   sidecarLaunchPromise = new Promise((resolveLaunch) => {
-    const child = spawn19(venvPython2, [launcher, "--port", String(cfg.sidecar_port)], {
+    const child = spawn18(venvPython2, [launcher, "--port", String(cfg.sidecar_port)], {
       stdio: ["ignore", "pipe", "pipe"],
       env: {
         ...process.env,
@@ -527824,7 +528044,7 @@ Format OK: ${r2.format_ok}`;
 
 // packages/execution/dist/tools/lance.js
 import { existsSync as existsSync60, readFileSync as readFileSync45 } from "node:fs";
-import { spawn as spawn20 } from "node:child_process";
+import { spawn as spawn19 } from "node:child_process";
 import { resolve as resolve37, dirname as dirname19, join as join75, basename as basename17 } from "node:path";
 import { fileURLToPath as fileURLToPath10 } from "node:url";
 import { homedir as homedir26 } from "node:os";
@@ -527869,7 +528089,7 @@ async function autoLaunchSidecar2(cfg) {
   if (!launcher)
     return false;
   sidecarLaunchPromise2 = new Promise((resolveLaunch) => {
-    const child = spawn20(venvPython2, [launcher, "--port", String(cfg.sidecar_port)], {
+    const child = spawn19(venvPython2, [launcher, "--port", String(cfg.sidecar_port)], {
       stdio: ["ignore", "pipe", "pipe"],
       env: {
         ...process.env,
@@ -528204,14 +528424,14 @@ var init_fortemi_bridge = __esm({
 });
 
 // packages/execution/dist/shellRunner.js
-import { spawn as spawn21 } from "node:child_process";
+import { spawn as spawn20 } from "node:child_process";
 async function runShell(options2) {
   const { command, args = [], cwd: cwd4, env: env2, timeoutMs = DEFAULT_TIMEOUT_MS2 } = options2;
   const mergedEnv = env2 ? { ...process.env, ...env2 } : process.env;
   return new Promise((resolve57) => {
     const start2 = Date.now();
     let timedOut = false;
-    const child = spawn21(command, args, {
+    const child = spawn20(command, args, {
       cwd: cwd4,
       env: mergedEnv
       // Do NOT use shell:true — we pass command + args separately
@@ -528310,7 +528530,7 @@ var init_gitWorktree = __esm({
 // packages/execution/dist/patchApplier.js
 import { readFileSync as readFileSync47, writeFileSync as writeFileSync28, existsSync as existsSync62, mkdirSync as mkdirSync30 } from "node:fs";
 import { dirname as dirname20 } from "node:path";
-import { spawn as spawn22 } from "node:child_process";
+import { spawn as spawn21 } from "node:child_process";
 async function applyPatch(patch) {
   switch (patch.type) {
     case "block-replace":
@@ -528360,7 +528580,7 @@ async function applyUnifiedDiff(patch) {
 function runWithStdin(options2) {
   const { command, args, cwd: cwd4, stdin } = options2;
   return new Promise((resolve57) => {
-    const child = spawn22(command, args, {
+    const child = spawn21(command, args, {
       cwd: cwd4,
       stdio: ["pipe", "pipe", "pipe"]
     });
@@ -529087,6 +529307,7 @@ __export(dist_exports, {
   ensureDepsForGroup: () => ensureDepsForGroup,
   ensureDiskSpaceForDownload: () => ensureDiskSpaceForDownload,
   ensureUnifiedCacheDirs: () => ensureUnifiedCacheDirs,
+  evaluateCustomToolShareability: () => evaluateCustomToolShareability,
   evictModelsToFreeSpace: () => evictModelsToFreeSpace,
   extractSkillForQuery: () => extractSkillForQuery,
   fetchWithNetworkEgressPolicy: () => fetchWithNetworkEgressPolicy,
@@ -532057,7 +532278,7 @@ var init_ollama_pool_cleanup = __esm({
 });
 
 // packages/orchestrator/dist/ollama-pool.js
-import { spawn as spawn23, exec as exec2 } from "node:child_process";
+import { spawn as spawn22, exec as exec2 } from "node:child_process";
 import { existsSync as existsSync65, readFileSync as readFileSync50, readdirSync as readdirSync21, statfsSync as statfsSync3, statSync as statSync26 } from "node:fs";
 import { homedir as homedir28 } from "node:os";
 import { join as join79 } from "node:path";
@@ -532530,7 +532751,7 @@ var init_ollama_pool = __esm({
         env2["CUDA_VISIBLE_DEVICES"] = gpuUuid;
         env2["GPU_DEVICE_ORDINAL"] = gpuIndex === null ? "" : String(gpuIndex);
       }
-      const child = spawn23(config.ollamaBinary, ["serve"], {
+      const child = spawn22(config.ollamaBinary, ["serve"], {
         env: env2,
         stdio: ["ignore", "pipe", "pipe"],
         detached: true
@@ -557918,6 +558139,17 @@ ${taskStateStr}
         if (mcpToolNames.length > 0) {
           postCompactRestore.push(`Available MCP tools: ${mcpToolNames.join(", ")}`);
         }
+        const activeCustomTools = [...this.tools.values()].map((tool) => ({ tool, meta: tool.customToolMetadata })).filter(({ tool, meta }) => meta?.isCustomTool === true && (this._activatedTools.has(tool.name) || meta.qualityGate?.lastTest?.status === "passed")).slice(0, 8);
+        if (activeCustomTools.length > 0) {
+          postCompactRestore.push([
+            "Active custom tools:",
+            ...activeCustomTools.map(({ tool, meta }) => {
+              const last2 = meta.qualityGate?.lastTest;
+              const failure = last2?.status === "failed" && last2.error ? `, last failure=${String(last2.error).slice(0, 120)}` : "";
+              return `- ${tool.name} v${meta.version ?? 1}: docs=${meta.docsPath ?? "missing"}, lastTest=${last2?.status ?? "untested"}${failure}, patch=manage_tools(action="patch", tool_name="${tool.name}", patch={...}, test_args={...}), test=manage_tools(action="test", tool_name="${tool.name}", test_args={...})`;
+            })
+          ].join("\n"));
+        }
         if (postCompactRestore.length > 0) {
           enrichments.push(`[Post-compaction context restore]
 ${postCompactRestore.join("\n")}`);
@@ -559347,10 +559579,49 @@ ${transcript}`
           }
         }
         const getDesc = (tool) => dynamicDescs.get(tool.name) ?? tool.description;
+        const getCustomToolMetadata = (tool) => {
+          const meta = tool.customToolMetadata;
+          return meta?.isCustomTool === true ? meta : void 0;
+        };
+        const customToolSearchText = (tool) => {
+          const meta = getCustomToolMetadata(tool);
+          if (!meta)
+            return "";
+          return JSON.stringify({
+            docsPath: meta.docsPath,
+            qualityGate: meta.qualityGate,
+            dependencies: meta.dependencies,
+            examples: meta.examples,
+            analytics: meta.analytics,
+            shareability: meta.shareability
+          });
+        };
+        const customToolDetails = (tool) => {
+          const meta = getCustomToolMetadata(tool);
+          if (!meta)
+            return "";
+          const last2 = meta.qualityGate?.lastTest;
+          const example = Array.isArray(meta.examples) && meta.examples[0] ? `
+Example: ${tool.name}(${JSON.stringify(meta.examples[0].args ?? {})})` : "";
+          return [
+            "",
+            `Custom tool: v${meta.version ?? 1}`,
+            `Quality gate: ${last2?.status ?? "untested"}${last2?.schemaValidation?.status ? `, schema=${last2.schemaValidation.status}` : ""}`,
+            meta.docsPath ? `Docs: ${meta.docsPath}` : "Docs: [missing]",
+            meta.analytics?.runs ? `Usage: ${meta.analytics.runs} run(s), ${Math.round(meta.analytics.successes / Math.max(1, meta.analytics.runs) * 100)}% success` : "",
+            meta.shareability ? `Shareable: ${meta.shareability.shareable ? "true" : "false"} - ${meta.shareability.reason ?? ""}` : "",
+            example
+          ].filter(Boolean).join("\n");
+        };
         const getIndexLabel = (tool) => {
-          const desc = getDesc(tool).toLowerCase().replace(/[`"'()[\]{}:;,.!?/\\|-]+/g, " ");
+          const meta = getCustomToolMetadata(tool);
+          const desc = `${getDesc(tool)} ${customToolSearchText(tool)}`.toLowerCase().replace(/[`"'()[\]{}:;,.!?/\\|-]+/g, " ");
           const keywords2 = Array.from(new Set(desc.split(/\s+/).filter((word2) => word2.length > 2 && !STOPWORDS3.has(word2) && !tool.name.toLowerCase().includes(word2)))).slice(0, 4);
-          return keywords2.length > 0 ? `${tool.name}(${keywords2.join(",")})` : tool.name;
+          const base3 = keywords2.length > 0 ? `${tool.name}(${keywords2.join(",")})` : tool.name;
+          if (!meta)
+            return base3;
+          const status = meta.qualityGate?.lastTest?.status ?? "untested";
+          return `${base3}:custom:${status}`;
         };
         const CORE_TOOLS3 = /* @__PURE__ */ new Set([
           "file_read",
@@ -559375,7 +559646,8 @@ ${transcript}`
         for (const tool of allTools) {
           if (CORE_TOOLS3.has(tool.name))
             continue;
-          const toolText = `${tool.name} ${getDesc(tool)}`.toLowerCase();
+          const customMeta = getCustomToolMetadata(tool);
+          const toolText = `${tool.name} ${getDesc(tool)} ${customToolSearchText(tool)}`.toLowerCase();
           const toolWords = toolText.split(/\s+/).filter((w) => w.length > 2);
           let score = 0;
           for (const tw of toolWords) {
@@ -559387,7 +559659,26 @@ ${transcript}`
             }
           }
           if (taskText.includes(tool.name.replace(/_/g, " ")) || taskText.includes(tool.name)) {
-            score += 10;
+            score += customMeta ? 16 : 10;
+          }
+          if (customMeta) {
+            const lastStatus = customMeta.qualityGate?.lastTest?.status;
+            if (lastStatus === "passed")
+              score += 6;
+            else if (lastStatus)
+              score -= 4;
+            if (customMeta.analytics?.runs > 0) {
+              score += Math.round(customMeta.analytics.successes / Math.max(1, customMeta.analytics.runs) * 4);
+              if (customMeta.analytics.lastRunAt)
+                score += 1;
+            }
+            if (customMeta.shareability?.shareable)
+              score += 2;
+            const docsExamplesDeps = customToolSearchText(tool).toLowerCase();
+            for (const word2 of taskWords) {
+              if (docsExamplesDeps.includes(word2))
+                score += 2;
+            }
           }
           if ([
             "explore_tools",
@@ -559511,7 +559802,7 @@ ${catalog}`,
                       continue;
                     lines.push("");
                     lines.push(`## ${tool.name}`);
-                    lines.push(getDesc(tool));
+                    lines.push(`${getDesc(tool)}${customToolDetails(tool)}`);
                     lines.push(`Parameters: ${JSON.stringify(tool.parameters)}`);
                   }
                 }
@@ -559523,7 +559814,32 @@ ${catalog}`,
                 }
                 return { success: true, output: lines.join("\n") };
               }
-              const matches = deferred.filter((t2) => t2.name.toLowerCase().includes(query) || getDesc(t2).toLowerCase().includes(query)).slice(0, 5);
+              const matches = deferred.filter((t2) => t2.name.toLowerCase().includes(query) || getDesc(t2).toLowerCase().includes(query) || customToolSearchText(t2).toLowerCase().includes(query)).sort((a2, b) => {
+                const scoreTool = (tool) => {
+                  const meta = getCustomToolMetadata(tool);
+                  let score = 0;
+                  if (tool.name.toLowerCase() === query)
+                    score += 30;
+                  if (tool.name.toLowerCase().includes(query))
+                    score += 10;
+                  if (getDesc(tool).toLowerCase().includes(query))
+                    score += 4;
+                  if (customToolSearchText(tool).toLowerCase().includes(query))
+                    score += 6;
+                  if (meta?.qualityGate?.lastTest?.status === "passed")
+                    score += 6;
+                  else if (meta)
+                    score -= 4;
+                  const analytics = meta?.analytics;
+                  if (analytics?.runs > 0) {
+                    score += Math.round(analytics.successes / Math.max(1, analytics.runs) * 4);
+                    if (analytics.lastRunAt)
+                      score += 1;
+                  }
+                  return score;
+                };
+                return scoreTool(b) - scoreTool(a2);
+              }).slice(0, 5);
               if (matches.length === 0) {
                 const subsetHint = Object.keys(subsetCatalog).join(", ");
                 return {
@@ -559537,7 +559853,7 @@ ${catalog}`,
               const result = matches.map((t2) => {
                 const paramsStr = JSON.stringify(t2.parameters, null, 2);
                 return `## ${t2.name}
-${getDesc(t2)}
+${getDesc(t2)}${customToolDetails(t2)}
 
 Parameters:
 ${paramsStr}`;
@@ -565552,7 +565868,7 @@ __export(listen_exports, {
   isVideoPath: () => isVideoPath,
   waitForTranscribeCli: () => waitForTranscribeCli
 });
-import { spawn as spawn24, execSync as execSync47 } from "node:child_process";
+import { spawn as spawn23, execSync as execSync47 } from "node:child_process";
 import { accessSync, constants, existsSync as existsSync88, mkdirSync as mkdirSync48, writeFileSync as writeFileSync43, readdirSync as readdirSync28 } from "node:fs";
 import { join as join103, dirname as dirname27 } from "node:path";
 import { homedir as homedir32 } from "node:os";
@@ -565674,7 +565990,7 @@ async function transcribeFileViaWhisper(filePath, model) {
   const venvPython2 = join103(homedir32(), ".omnius", "venv", bin, exe);
   if (!existsSync88(venvPython2)) return null;
   return new Promise((resolve57) => {
-    const child = spawn24(venvPython2, [script], {
+    const child = spawn23(venvPython2, [script], {
       stdio: ["pipe", "pipe", "pipe"],
       env: process.env
     });
@@ -565811,7 +566127,7 @@ function ensureTranscribeCliBackground() {
       const command = terminalElevation && needsSudo ? "sudo" : "npm";
       const args = terminalElevation && needsSudo ? ["npm", "i", "-g", "transcribe-cli"] : ["i", "-g", "transcribe-cli"];
       return new Promise((resolve57) => {
-        const child = spawn24(command, args, {
+        const child = spawn23(command, args, {
           stdio: terminalElevation ? "inherit" : "ignore",
           timeout: 18e4
         });
@@ -565907,7 +566223,7 @@ var init_listen = __esm({
           }
         } catch {
         }
-        this.process = spawn24(pyPath, [
+        this.process = spawn23(pyPath, [
           this.scriptPath,
           "--model",
           this.model,
@@ -566238,7 +566554,7 @@ transcribe-cli error: ${transcribeCliError}` : "";
             return `Failed to start live transcription: ${msg}${tcHint}`;
           }
         }
-        this.micProcess = spawn24(micCmd.cmd, micCmd.args, {
+        this.micProcess = spawn23(micCmd.cmd, micCmd.args, {
           stdio: ["pipe", "pipe", "pipe"],
           env: { ...process.env }
         });
@@ -566351,7 +566667,7 @@ transcribe-cli error: ${transcribeCliError}` : "";
         if (!micCmd) {
           return "No microphone capture tool found.";
         }
-        this.micProcess = spawn24(micCmd.cmd, micCmd.args, {
+        this.micProcess = spawn23(micCmd.cmd, micCmd.args, {
           stdio: ["pipe", "pipe", "pipe"],
           env: { ...process.env }
         });
@@ -573737,7 +574053,7 @@ var init_render = __esm({
 
 // packages/cli/src/tui/voice-session.ts
 import { createServer as createServer4 } from "node:http";
-import { spawn as spawn25, execSync as execSync49 } from "node:child_process";
+import { spawn as spawn24, execSync as execSync49 } from "node:child_process";
 import { EventEmitter as EventEmitter7 } from "node:events";
 function generateFrontendHTML() {
   return `<!DOCTYPE html>
@@ -574782,7 +575098,7 @@ var init_voice_session = __esm({
           const timeout2 = setTimeout(() => {
             reject(new Error("Cloudflared tunnel start timeout (30s)"));
           }, 3e4);
-          this.cloudflaredProcess = spawn25("cloudflared", [
+          this.cloudflaredProcess = spawn24("cloudflared", [
             "tunnel",
             "--url",
             `http://127.0.0.1:${port}`
@@ -575659,7 +575975,7 @@ var init_usage_bars = __esm({
 // packages/cli/src/tui/expose.ts
 import { createServer as createServer5, request as httpRequest } from "node:http";
 import { request as httpsRequest } from "node:https";
-import { spawn as spawn26, exec as exec3 } from "node:child_process";
+import { spawn as spawn25, exec as exec3 } from "node:child_process";
 import { EventEmitter as EventEmitter8 } from "node:events";
 import { randomBytes as randomBytes20, timingSafeEqual } from "node:crypto";
 import { URL as URL2 } from "node:url";
@@ -576819,7 +577135,7 @@ var init_expose = __esm({
             clearTimeout(timeout2);
             clearInterval(progressInterval);
           };
-          this.cloudflaredProcess = spawn26("cloudflared", [
+          this.cloudflaredProcess = spawn25("cloudflared", [
             "tunnel",
             "--url",
             `http://127.0.0.1:${port}`,
@@ -586814,11 +587130,11 @@ __export(personaplex_exports, {
 import { existsSync as existsSync97, writeFileSync as writeFileSync49, readFileSync as readFileSync78, mkdirSync as mkdirSync54, copyFileSync as copyFileSync4, readdirSync as readdirSync32, statSync as statSync37 } from "node:fs";
 import { join as join113, dirname as dirname32 } from "node:path";
 import { homedir as homedir36 } from "node:os";
-import { execSync as execSync50, spawn as spawn27 } from "node:child_process";
+import { execSync as execSync50, spawn as spawn26 } from "node:child_process";
 import { fileURLToPath as fileURLToPath15 } from "node:url";
 function execAsync(cmd, opts = {}) {
   return new Promise((resolve57, reject) => {
-    const child = spawn27("bash", ["-c", cmd], {
+    const child = spawn26("bash", ["-c", cmd], {
       stdio: ["ignore", "pipe", "pipe"],
       timeout: opts.timeout ?? 3e5,
       env: opts.env ?? process.env
@@ -587454,7 +587770,7 @@ print('Converted')
     serverEnv["HYBRID_LLM_MODEL"] = ollamaModel;
     serverEnv["HYBRID_MODEL_FAST"] = "qwen3.5:4b";
   }
-  const child = spawn27(venvPython2, serverArgs, {
+  const child = spawn26(venvPython2, serverArgs, {
     stdio: ["ignore", "pipe", "pipe"],
     detached: true,
     env: serverEnv,
@@ -587583,7 +587899,7 @@ async function clonePersonaPlexVoice(inputWav, voiceName, onInfo) {
   log22(`Cloning voice "${voiceName}" from ${inputWav}...`);
   log22("This requires loading the full 7B model — may take 30-60s...");
   return new Promise((resolve57) => {
-    const child = spawn27(venvPython2, [
+    const child = spawn26(venvPython2, [
       cloneScript,
       "--input",
       inputWav,
@@ -587820,7 +588136,7 @@ __export(setup_exports, {
   updateOllama: () => updateOllama
 });
 import * as readline from "node:readline";
-import { execSync as execSync51, spawn as spawn28, exec as exec5 } from "node:child_process";
+import { execSync as execSync51, spawn as spawn27, exec as exec5 } from "node:child_process";
 import { promisify as promisify6 } from "node:util";
 import { existsSync as existsSync98, writeFileSync as writeFileSync50, readFileSync as readFileSync79, appendFileSync as appendFileSync7, mkdirSync as mkdirSync55 } from "node:fs";
 import { join as join114 } from "node:path";
@@ -588679,7 +588995,7 @@ async function ensureOllamaRunning(backendUrl2, rl) {
   process.stdout.write(`  ${c3.cyan("●")} Starting ollama serve...
 `);
   try {
-    const child = spawn28("ollama", ["serve"], { stdio: "ignore", detached: true });
+    const child = spawn27("ollama", ["serve"], { stdio: "ignore", detached: true });
     child.unref();
   } catch {
     process.stdout.write(`  ${c3.cyan("⚠")} Could not start ollama serve.
@@ -589360,7 +589676,7 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
   ${c3.cyan("●")} Ollama is installed but not running. Starting automatically...
 `);
         try {
-          const child = spawn28("ollama", ["serve"], { stdio: "ignore", detached: true });
+          const child = spawn27("ollama", ["serve"], { stdio: "ignore", detached: true });
           child.unref();
           await new Promise((resolve57) => setTimeout(resolve57, 3e3));
           try {
@@ -589388,7 +589704,7 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
   ${c3.cyan("●")} Starting ollama serve...
 `);
             try {
-              const child = spawn28("ollama", ["serve"], { stdio: "ignore", detached: true });
+              const child = spawn27("ollama", ["serve"], { stdio: "ignore", detached: true });
               child.unref();
               await new Promise((resolve57) => setTimeout(resolve57, 3e3));
               try {
@@ -594546,7 +594862,7 @@ __export(daemon_exports, {
   startDaemon: () => startDaemon,
   stopDaemon: () => stopDaemon
 });
-import { spawn as spawn29 } from "node:child_process";
+import { spawn as spawn28 } from "node:child_process";
 import { existsSync as existsSync104, readFileSync as readFileSync82, writeFileSync as writeFileSync51, mkdirSync as mkdirSync56, unlinkSync as unlinkSync19, openSync as openSync3, closeSync as closeSync3 } from "node:fs";
 import { join as join118 } from "node:path";
 import { homedir as homedir39 } from "node:os";
@@ -594637,7 +594953,7 @@ async function startDaemon() {
   try {
     outFd = openSync3(join118(OMNIUS_DIR2, "daemon.log"), "a");
     errFd = openSync3(join118(OMNIUS_DIR2, "daemon.err.log"), "a");
-    const child = spawn29(daemonCommand.command, daemonCommand.args, {
+    const child = spawn28(daemonCommand.command, daemonCommand.args, {
       detached: true,
       stdio: ["ignore", outFd, errFd],
       env: {
@@ -600418,7 +600734,7 @@ async function acquireSudoCredentials(ctx3, reason) {
 }
 async function runSudoScript(ctx3, script) {
   try {
-    const { spawn: spawn34 } = await import("node:child_process");
+    const { spawn: spawn33 } = await import("node:child_process");
     const full = `set -e; ${script}`;
     await withTransientTerminalPrivilegePrompt(
       ctx3,
@@ -600430,7 +600746,7 @@ async function runSudoScript(ctx3, script) {
         );
         const cmd = isRoot ? "bash" : "sudo";
         const args = isRoot ? ["-lc", full] : hasInteractiveTty ? ["bash", "-lc", full] : ["-n", "bash", "-lc", full];
-        const child = spawn34(cmd, args, {
+        const child = spawn33(cmd, args, {
           stdio: hasInteractiveTty ? "inherit" : ["ignore", "pipe", "pipe"],
           env: { ...process.env, DEBIAN_FRONTEND: "noninteractive" }
         });
@@ -602871,8 +603187,8 @@ async function handleSlashCommand(input, ctx3) {
         writeFileSync54(jwtFile, JSON.stringify(jwtPayload, null, 2));
         renderInfo(`Launching fortemi-react from ${fDir}...`);
         try {
-          const { spawn: spawn34 } = __require("node:child_process");
-          const child = spawn34(
+          const { spawn: spawn33 } = __require("node:child_process");
+          const child = spawn33(
             "npx",
             ["vite", "dev", "--host", "0.0.0.0", "--port", "3000"],
             {
@@ -603878,9 +604194,9 @@ systemctl --user daemon-reload || true
 systemctl --user enable --now omnius-daemon.service || true
 sleep 1
 `;
-          const { spawn: spawn34 } = await import("node:child_process");
+          const { spawn: spawn33 } = await import("node:child_process");
           await new Promise((resolve57) => {
-            const child = spawn34("bash", ["-lc", takeover], {
+            const child = spawn33("bash", ["-lc", takeover], {
               stdio: "inherit"
             });
             onChildExit(child, () => resolve57());
@@ -611367,8 +611683,8 @@ ${escapedContent}EOF'`, {
       }
       await new Promise((r2) => setTimeout(r2, 1e3));
       process.env.OLLAMA_NUM_PARALLEL = String(n2);
-      const { spawn: spawn34 } = await import("node:child_process");
-      const child = spawn34("ollama", ["serve"], {
+      const { spawn: spawn33 } = await import("node:child_process");
+      const child = spawn33("ollama", ["serve"], {
         stdio: "ignore",
         detached: true,
         env: { ...process.env, OLLAMA_NUM_PARALLEL: String(n2) }
@@ -612248,7 +612564,7 @@ async function handleUpdate(subcommand, ctx3) {
       }
     };
   }
-  const { exec: exec6, spawn: spawn34, execSync: es2 } = await import("node:child_process");
+  const { exec: exec6, spawn: spawn33, execSync: es2 } = await import("node:child_process");
   const execA = (cmd, opts) => new Promise(
     (res, rej) => exec6(
       cmd,
@@ -612663,7 +612979,7 @@ async function handleUpdate(subcommand, ctx3) {
       }
     }, 1e3);
     heartbeat.unref?.();
-    const child = spawn34(cmd, {
+    const child = spawn33(cmd, {
       shell: true,
       stdio: ["ignore", "pipe", "pipe"],
       env: {
@@ -614121,12 +614437,74 @@ function loadPatternSuggestions(repoRoot, store2) {
     for (const p2 of all2.slice(0, 3)) {
       const steps = p2.pattern.map((e2) => e2.tool).join(" → ");
       lines.push(`- [${p2.occurrences}x, ${p2.scope}] ${steps}`);
+      const candidate = buildToolCreationCandidate(p2);
+      if (candidate) {
+        lines.push(`  Candidate: ${candidate}`);
+      }
     }
     return lines.join("\n");
   } catch {
     return "";
   }
 }
+function buildToolCreationCandidate(pattern) {
+  const tools = pattern.pattern.map((entry) => entry.tool);
+  const toolName = sanitizeToolName(`auto_${tools.join("_")}`).slice(0, 64).replace(/_+$/g, "") || "auto_workflow";
+  const params = Array.from(new Set(pattern.pattern.flatMap((entry) => entry.argKeys))).filter(Boolean).slice(0, 8);
+  const properties = Object.fromEntries(params.map((param) => [param, { type: "string", description: `Value observed for ${param}` }]));
+  const steps = pattern.pattern.map((entry, index) => ({
+    description: `Run observed ${entry.tool} step ${index + 1}`,
+    tool: entry.tool,
+    args: Object.fromEntries(entry.argKeys.map((key) => [key, `{{${key}}}`]))
+  }));
+  const testArgs = Object.fromEntries(params.map((param) => [param, `<${param}>`]));
+  return [
+    `create_tool(tool_name="${toolName}", scope="${pattern.scope}", `,
+    `tool_parameters=${JSON.stringify({ type: "object", properties, required: params })}, `,
+    `steps=${JSON.stringify(steps)}, test_args=${JSON.stringify(testArgs)})`
+  ].join("");
+}
+function sanitizeToolName(value2) {
+  const cleaned = value2.toLowerCase().replace(/[^a-z0-9_]+/g, "_").replace(/_+/g, "_").replace(/^_+/, "");
+  return /^[a-z]/.test(cleaned) ? cleaned : `tool_${cleaned}`;
+}
+function loadCustomToolsContext(repoRoot) {
+  try {
+    const registryPath = join122(repoRoot, ".omnius", "tools", "registry.json");
+    const indexPath = join122(repoRoot, ".omnius", "tools", "README.md");
+    if (!existsSync109(registryPath)) return "";
+    const registry4 = JSON.parse(readFileSync87(registryPath, "utf-8"));
+    const tools = (registry4.tools ?? []).filter((tool) => tool.qualityGate?.lastTest?.status === "passed").sort((a2, b) => {
+      const byRate = (b.analytics?.successRate ?? 0) - (a2.analytics?.successRate ?? 0);
+      if (byRate !== 0) return byRate;
+      return String(b.analytics?.lastRunAt ?? "").localeCompare(String(a2.analytics?.lastRunAt ?? ""));
+    });
+    if (tools.length === 0) return "";
+    return tools.map((tool) => {
+      const example = tool.examples?.[0];
+      const successRate = tool.analytics?.successRate !== void 0 ? `${Math.round(tool.analytics.successRate * 100)}%` : "n/a";
+      const tested = tool.qualityGate?.lastTest?.testedAt?.split("T")[0] ?? "passed";
+      const schema = tool.qualityGate?.lastTest?.schemaValidation?.status;
+      const bits = [
+        `- ${tool.name} v${tool.version ?? 1}: ${String(tool.description ?? "").slice(0, 140)}`,
+        `docs=${tool.docsPath ?? "missing"}`,
+        existsSync109(indexPath) ? `index=${indexPath}` : "",
+        `test=${tested}${schema ? `, schema=${schema}` : ""}`,
+        `success=${successRate}`,
+        example?.args ? `example=${tool.name}(${JSON.stringify(example.args)})` : "",
+        tool.shareability ? `shareable=${tool.shareability.shareable ? "true" : "false"}:${tool.shareability.reason ?? ""}` : ""
+      ].filter(Boolean);
+      return bits.join(" | ");
+    }).join("\n");
+  } catch {
+    return "";
+  }
+}
+function limitCustomToolsContext(context2, modelTier) {
+  if (!context2) return "";
+  const limit = modelTier === "small" ? 5 : modelTier === "medium" ? 10 : 20;
+  return context2.split("\n").filter(Boolean).slice(0, limit).join("\n");
+}
 function buildProjectContext(repoRoot, stores) {
   const skills = discoverSkills(repoRoot);
   writeCompressedSkillsArtifact(repoRoot, skills);
@@ -614140,6 +614518,7 @@ function buildProjectContext(repoRoot, stores) {
     taskMemories: stores?.taskMemoryStore ? loadTaskMemories(repoRoot, stores.taskMemoryStore) : "",
     failurePatterns: stores?.failureStore ? loadFailurePatterns(stores.failureStore) : "",
     patternSuggestions: stores?.toolPatternStore ? loadPatternSuggestions(repoRoot, stores.toolPatternStore) : "",
+    customToolsContext: loadCustomToolsContext(repoRoot),
     skillsSummary: buildSkillsSummary(skills)
   };
 }
@@ -614227,6 +614606,14 @@ ${ctx3.sessionHistory}`);
 ${ctx3.failurePatterns}
 
 Avoid approaches that led to these failures. If you encounter these errors, try a different strategy.`);
+  }
+  const customTools = limitCustomToolsContext(ctx3.customToolsContext, modelTier);
+  if (customTools) {
+    sections.push(`## Tested Custom Tools
+
+${customTools}
+
+These tools have passed their smoke test and are available as normal function tools. Use tool_search by tool name for full schema if deferred.`);
   }
   if (modelTier === "large" && ctx3.patternSuggestions) {
     sections.push(`## Tool Creation Suggestions
@@ -641705,7 +642092,7 @@ __export(graphical_sudo_exports, {
   detectSudoHelper: () => detectSudoHelper,
   runGraphicalSudo: () => runGraphicalSudo
 });
-import { spawn as spawn30 } from "node:child_process";
+import { spawn as spawn29 } from "node:child_process";
 import { existsSync as existsSync130, mkdirSync as mkdirSync76, writeFileSync as writeFileSync68, chmodSync as chmodSync4 } from "node:fs";
 import { join as join143 } from "node:path";
 import { tmpdir as tmpdir21 } from "node:os";
@@ -641775,7 +642162,7 @@ async function runGraphicalSudo(opts) {
     args = ["/bin/bash", opts.scriptPath, ...opts.args ?? []];
   }
   return new Promise((resolve57, reject) => {
-    const child = spawn30(cmd, args, {
+    const child = spawn29(cmd, args, {
       env: { ...process.env, ...opts.env || {}, ...extraEnv },
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -654499,7 +654886,7 @@ var init_profiles = __esm({
 });
 
 // packages/cli/src/docker.ts
-import { execSync as execSync57, spawn as spawn31 } from "node:child_process";
+import { execSync as execSync57, spawn as spawn30 } from "node:child_process";
 import { existsSync as existsSync134, mkdirSync as mkdirSync79, writeFileSync as writeFileSync71 } from "node:fs";
 import { join as join147, resolve as resolve51, dirname as dirname40 } from "node:path";
 import { homedir as homedir52 } from "node:os";
@@ -654780,7 +655167,7 @@ function runInContainer(opts) {
   if (opts.maxTurns) omniusArgs.push("--max-turns", String(opts.maxTurns));
   if (opts.timeoutS) omniusArgs.push("--timeout", String(opts.timeoutS));
   args.push(...omniusArgs);
-  return spawn31("docker", args, {
+  return spawn30("docker", args, {
     stdio: ["ignore", "pipe", "pipe"]
   });
 }
@@ -654983,7 +655370,7 @@ import { createRequire as createRequire7 } from "node:module";
 import { fileURLToPath as fileURLToPath19 } from "node:url";
 import { dirname as dirname41, join as join149, resolve as resolve52 } from "node:path";
 import { homedir as homedir53 } from "node:os";
-import { spawn as spawn32, execSync as execSync58 } from "node:child_process";
+import { spawn as spawn31, execSync as execSync58 } from "node:child_process";
 import { mkdirSync as mkdirSync80, writeFileSync as writeFileSync72, readFileSync as readFileSync109, readdirSync as readdirSync48, existsSync as existsSync135, watch as fsWatch4, renameSync as renameSync9, unlinkSync as unlinkSync28 } from "node:fs";
 import { randomBytes as randomBytes27, randomUUID as randomUUID17 } from "node:crypto";
 import { createHash as createHash34 } from "node:crypto";
@@ -657357,7 +657744,7 @@ ${task}` : task;
   runEnv["OMNIUS_RUN_SCOPE"] = req2._authScope || "admin";
   runEnv["OLLAMA_HOST"] = currentCfg.backendUrl || process.env["OLLAMA_HOST"] || "http://127.0.0.1:11434";
   if (currentCfg.apiKey) runEnv["OMNIUS_API_KEY_INHERIT"] = currentCfg.apiKey;
-  const child = spawn32(process.execPath, [omniusBin, ...args], {
+  const child = spawn31(process.execPath, [omniusBin, ...args], {
     cwd: resolve52(process.cwd()),
     env: runEnv,
     stdio: ["ignore", "pipe", "pipe"]
@@ -657686,7 +658073,7 @@ async function handleV1Update(req2, res, requestId) {
     cleanEnv.PATH = pathParts.join(":");
     let child;
     if (isWin2) {
-      child = spawn32(npmBin, ["install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
+      child = spawn31(npmBin, ["install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
         detached: true,
         stdio: ["ignore", logFd, logFd],
         windowsHide: true,
@@ -657708,13 +658095,13 @@ async function handleV1Update(req2, res, requestId) {
         }
       }
       if (npmCli) {
-        child = spawn32(nodeBin, [npmCli, "install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
+        child = spawn31(nodeBin, [npmCli, "install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
           detached: true,
           stdio: ["ignore", logFd, logFd],
           env: cleanEnv
         });
       } else {
-        child = spawn32(npmBin, ["install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
+        child = spawn31(npmBin, ["install", "-g", pkgSpec, "--no-audit", "--no-fund", "--no-progress"], {
           detached: true,
           stdio: ["ignore", logFd, logFd],
           env: cleanEnv
@@ -657725,7 +658112,7 @@ async function handleV1Update(req2, res, requestId) {
     const installPid = child.pid ?? 0;
     if (installPid > 0 && !isWin2) {
       try {
-        const follower = spawn32("bash", ["-c", `while kill -0 ${installPid} 2>/dev/null; do sleep 1; done; echo "__EXIT_CODE=0" >> "${logPath3}"`], {
+        const follower = spawn31("bash", ["-c", `while kill -0 ${installPid} 2>/dev/null; do sleep 1; done; echo "__EXIT_CODE=0" >> "${logPath3}"`], {
           detached: true,
           stdio: "ignore"
         });
@@ -657748,7 +658135,7 @@ async function handleV1Update(req2, res, requestId) {
           hasSystemdUnit ? `systemctl --user restart omnius-daemon.service >/dev/null 2>&1 || true` : `${JSON.stringify(omniusAbs)} serve --quiet --daemon >/dev/null 2>&1 & disown`,
           `kill -TERM ${process.pid} >/dev/null 2>&1 || true`
         ].join("; ");
-        const relauncher = spawn32("bash", ["-c", relaunchScript], {
+        const relauncher = spawn31("bash", ["-c", relaunchScript], {
           detached: true,
           stdio: "ignore",
           env: cleanEnv
@@ -657970,7 +658357,7 @@ async function handleV1Run(req2, res) {
     });
     job.sandbox = "container";
   } else {
-    child = spawn32(process.execPath, [omniusBin, ...args], {
+    child = spawn31(process.execPath, [omniusBin, ...args], {
       cwd: cwd4,
       env: runEnv,
       stdio: ["ignore", "pipe", "pipe"],
@@ -660109,7 +660496,7 @@ ${historyLines}
       }
       runEnv["OLLAMA_HOST"] = currentCfg.backendUrl || process.env["OLLAMA_HOST"] || "http://127.0.0.1:11434";
       if (currentCfg.apiKey) runEnv["OMNIUS_API_KEY_INHERIT"] = currentCfg.apiKey;
-      const child = spawn32(process.execPath, [omniusBin, ...args], {
+      const child = spawn31(process.execPath, [omniusBin, ...args], {
         cwd: cwdPath,
         env: runEnv,
         stdio: ["ignore", "pipe", "pipe"],
@@ -663345,7 +663732,7 @@ function buildTools(repoRoot, config, contextWindowSize, modelTier) {
     new CreateToolTool(repoRoot),
     new ManageToolsTool(repoRoot),
     // Load agent-created custom tools from .omnius/tools/ and ~/.omnius/tools/
-    ...buildCustomTools(repoRoot),
+    ...buildCustomTools(repoRoot, { shellRunner: shellTool }),
     // Skill system (AIWG skills — discovery and execution)
     new SkillListTool(repoRoot),
     new SkillExecuteTool(repoRoot),
@@ -671876,7 +672263,7 @@ __export(run_exports, {
   statusCommand: () => statusCommand
 });
 import { resolve as resolve54 } from "node:path";
-import { spawn as spawn33 } from "node:child_process";
+import { spawn as spawn32 } from "node:child_process";
 import { mkdirSync as mkdirSync83, writeFileSync as writeFileSync75, readFileSync as readFileSync112, readdirSync as readdirSync50, existsSync as existsSync137 } from "node:fs";
 import { randomBytes as randomBytes28 } from "node:crypto";
 import { join as join152 } from "node:path";
@@ -671989,7 +672376,7 @@ async function runBackground(task, config, opts) {
   const omniusBin = process.argv[1] || "omnius";
   const args = [task, "--json"];
   if (config.model) args.push("--model", config.model);
-  const child = spawn33(process.execPath, [omniusBin, ...args], {
+  const child = spawn32(process.execPath, [omniusBin, ...args], {
     cwd: repoRoot,
     env: { ...process.env, OMNIUS_JOB_ID: id },
     stdio: ["ignore", "pipe", "pipe"],
@@ -673189,9 +673576,9 @@ async function main() {
           const mode = process.argv[process.argv.indexOf("--self-test") + 1] || "crossmodal";
           if (mode === "crossmodal") {
             process.stdout.write("Running crossmodal smoke tests...\n");
-            const { spawn: spawn34 } = await import("node:child_process");
+            const { spawn: spawn33 } = await import("node:child_process");
             const run2 = (file) => new Promise((resolve57, reject) => {
-              const p2 = spawn34(process.execPath, [file], { stdio: ["ignore", "pipe", "pipe"] });
+              const p2 = spawn33(process.execPath, [file], { stdio: ["ignore", "pipe", "pipe"] });
               p2.stdout.on("data", (d2) => process.stdout.write(d2));
               p2.stderr.on("data", (d2) => process.stdout.write(d2));
               onChildExit(p2, (code8) => code8 === 0 ? resolve57() : reject(new Error(`${file} exited ${code8}`)));