refactor(tools-handoff): move the coordinator hand-off tools into a package

CONTRIBUTING.md

@@ -143,11 +143,12 @@ change follows, whether a person or a coding agent writes it.
 
 Maintainers bump `version` in the root, `apps/hub`, `apps/web`,
 `packages/client`, `packages/schemas`, `packages/tools-artifacts`,
-`packages/tools-design` and `packages/tools-hub` package.json files, run
-`bun install`, and merge. Once the publish workflow for that commit on main has
-finished, `git tag -s vX.Y.Z && git push origin vX.Y.Z` retags its hub and
-sidecar images as `X.Y.Z` and publishes the GitHub release; a 0.x version or
-one with a `-` suffix is a pre-release tagged `rc`, any other is `latest`.
+`packages/tools-design`, `packages/tools-handoff` and `packages/tools-hub`
+package.json files, run `bun install`, and merge. Once the publish workflow for
+that commit on main has finished, `git tag -s vX.Y.Z && git push origin vX.Y.Z`
+retags its hub and sidecar images as `X.Y.Z` and publishes the GitHub release; a
+0.x version or one with a `-` suffix is a pre-release tagged `rc`, any other is
+`latest`.
 
 ## Security
 

apps/hub/package.json

@@ -22,6 +22,7 @@
     "@corbits-builder/schemas": "workspace:*",
     "@corbits-builder/tools-artifacts": "workspace:*",
     "@corbits-builder/tools-design": "workspace:*",
+    "@corbits-builder/tools-handoff": "workspace:*",
     "@corbits-builder/tools-hub": "workspace:*",
     "@corbits-builder/writer": "workspace:*",
     "@corbits/agent-token": "0.2.2",

apps/hub/src/artifacts/service.ts

@@ -129,10 +129,11 @@ import {
 import { designChosenNote } from "../config/design.ts";
 import { loadSettings } from "../settings/policy.ts";
 import {
+  agentDecidesApprovals,
   preferenceGuidance,
   resolvePreferences,
 } from "../config/preferences.ts";
-import { awaitingApproval } from "../projects/deploy-tools.ts";
+import { awaitingApproval } from "@corbits-builder/tools-handoff";
 import { frozenModelChoice, workflowBindings } from "../config/models.ts";
 import { materialsNote } from "../config/materials.ts";
 import { servingOffering } from "../workflows/install-for-tenant.ts";
@@ -733,9 +734,10 @@ export function createArtifactService(
         artifacts,
         inFlight,
         failed,
-        awaitingApproval: awaitingApproval(artifacts, preferences).map(
-          (item) => item.kind,
-        ),
+        awaitingApproval: awaitingApproval(
+          artifacts,
+          agentDecidesApprovals(preferences),
+        ).map((item) => item.kind),
         preferences,
         preferenceGuidance: preferenceGuidance(preferences, "coordinator"),
       };

apps/hub/src/auth/coordinator-run-grants.test.ts

@@ -4,7 +4,7 @@ import {
   evaluateMailAdmission,
   mailAcceptResource,
 } from "@intx/authz";
-import { DEPLOY_TOOLS } from "../projects/deploy-tools.ts";
+import { DEPLOY_TOOLS } from "@corbits-builder/tools-handoff/sidecar-bundle";
 import {
   planCoordinatorSpecialistGrants,
   type CoordinatorRunGrant,

apps/hub/src/projects/coordinator-resume.ts

@@ -8,7 +8,8 @@ import { resumeContext, resumeMessage } from "../config/resume.ts";
 import { projectCoordinator } from "../db/schema.ts";
 import { readDurableConversationTurns } from "../mail/conversation-turns.ts";
 import type { CoordinatorRepoDirSource } from "../mail/coordinator-question.ts";
-import { awaitingApproval } from "./deploy-tools.ts";
+import { awaitingApproval } from "@corbits-builder/tools-handoff";
+import { agentDecidesApprovals } from "../config/preferences.ts";
 import { getLogger } from "@intx/log";
 import { requestErrorMetadata } from "../request-error.ts";
 import { readJson } from "../lib/json.ts";
@@ -87,7 +88,7 @@ export function createCoordinatorResumeContext(deps: {
     );
     return resumeContext({
       turns,
-      awaiting: awaitingApproval(filed, preferences).map(
+      awaiting: awaitingApproval(filed, agentDecidesApprovals(preferences)).map(
         (artifact) => artifact.title,
       ),
       withApp: filed.some((artifact) => artifact.kind === "app"),

apps/hub/src/projects/deploy-tools.test.ts

@@ -1,6 +1,7 @@
 import { expect, test } from "bun:test";
 import type { RuntimeCapabilities } from "@intx/types/runtime-capabilities";
-import { createDeployTools } from "./deploy-tools.ts";
+import { createDeployTools } from "@corbits-builder/tools-handoff/sidecar-bundle";
+import { handoffConfig } from "./handoff-config.ts";
 
 const deployment = {
   source: {
@@ -61,7 +62,7 @@ function coderSpawn(changed: Record<string, Filed>) {
         ? { resolve: async () => ({ kind: "http", fetch }) }
         : { send: async () => undefined },
   } as unknown as RuntimeCapabilities;
-  const tools = createDeployTools({
+  const tools = createDeployTools(handoffConfig, {
     tenantId: "tenant",
     projectId: "project",
     domain: "example.invalid",
@@ -163,7 +164,7 @@ test("design_app starts one designer per concept within the person's limit, each
             },
           },
   } as unknown as RuntimeCapabilities;
-  const tools = createDeployTools({
+  const tools = createDeployTools(handoffConfig, {
     tenantId: "tenant",
     projectId: "project",
     domain: "example.invalid",
@@ -270,7 +271,7 @@ function writerTools(preferences: Record<string, string> = {}) {
         ? { resolve: async () => ({ kind: "http", fetch }) }
         : { send: async () => undefined },
   } as unknown as RuntimeCapabilities;
-  const tools = createDeployTools({
+  const tools = createDeployTools(handoffConfig, {
     tenantId: "tenant",
     projectId: "project",
     domain: "example.invalid",