feat(runtime): defer non-direct tools by default

packages/core/package.json

@@ -109,7 +109,6 @@
     "./usage-record-schema": "./dist/usage-record-schema.js",
     "./session-send-projection": "./dist/session-send-projection.js",
     "./session-name": "./dist/session-name.js",
-    "./tool-catalog": "./dist/tool-catalog.js",
     "./thread-search": "./dist/thread-search.js",
     "./agent-graph-timeline": "./dist/agent-graph-timeline.js",
     "./agent-swarm": "./dist/agent-swarm.js",

packages/runtime-host/src/__tests__/execution-model-composition.test.ts

@@ -1484,40 +1484,21 @@ test('production Host executes a canonical ai-sdk Session against a real provide
     assert.match(requestText, /HOSTED_MEMORY_SENTINEL/);
     assert.match(JSON.stringify(mainRequests[1]?.body), /HOSTED_SKILL_BODY_MUST_STAY_LAZY/);
     // Tavily is selected but no web-search credential exists, so the provider
-    // must never see WebSearch in the effective root tool surface.
+    // must never see WebSearch in the effective root tool surface. Non-direct
+    // bound tools stay deferred behind tool_search until activated.
     assert.deepEqual(toolNames(request?.body), [
       'ArchiveRead',
       'AskUserQuestion',
       'Bash',
       'Edit',
-      'ExploreAgent',
-      'FormatJson',
       'Glob',
-      'GoalClear',
-      'GoalPause',
-      'GoalResume',
-      'GoalSet',
-      'GoalStatus',
       'Grep',
-      'MakaSettingsGet',
-      'MakaSettingsUpdate',
       'Read',
-      'ReadHistory',
-      'ScheduledTask',
-      'SearchHistory',
       'Skill',
       'SkillSearch',
       'StopBackgroundTask',
       'WebFetch',
       'Write',
-      'WriteStdin',
-      'memory_extract',
-      'memory_remember',
-      'request_sandbox_boundary',
-      'task_create',
-      'task_get',
-      'task_list',
-      'task_update',
       'tool_search',
     ]);
     assert.match(JSON.stringify(compactRequests[0]?.body), /context summarization assistant/);
@@ -3257,7 +3238,7 @@ test('a bound tool ceiling excludes dynamic Client Capability tools', () => {
 
   assert.deepEqual(composition.tools, [boundTool]);
   assert.equal(
-    composition.toolAvailability.groups?.some((group) => group.id === 'client_fixture'),
+    composition.toolAvailability?.groups?.some((group) => group.id === 'client_fixture') ?? false,
     false,
   );
 });
@@ -3291,7 +3272,7 @@ test('the headless coding profile freezes the Eval prompt and tool ceiling', asy
     composition.tools.map(({ name }) => name),
     ['Bash', 'Read', 'Write', 'Edit', 'Glob', 'Grep', 'apply_patch'],
   );
-  assert.deepEqual(composition.toolAvailability.groups, []);
+  assert.equal(composition.toolAvailability, undefined);
   assert.equal(
     (
       await composition.resolveSystemPrompt({

packages/runtime-host/src/server/execution-composition.ts

@@ -41,10 +41,10 @@ import {
   type BackendFactory,
 } from '@maka/runtime/session-manager';
 import { buildToolsForAgentDefinition } from '@maka/runtime/agent-catalog';
-import { buildHostCapabilitiesFromBinding } from '@maka/runtime/tool-catalog-derive';
 import { buildHistoryTools } from '@maka/runtime/history-tools';
 import { createLocalContinuationSafetyInspector } from '@maka/runtime/continuation-safety';
 import { createConfiguredSubagentCatalog } from '@maka/runtime/configured-subagent-catalog';
+import { buildHostCapabilitiesFromBinding } from '@maka/runtime/skills';
 import {
   createBuiltinSandboxManager,
   createSandboxDiagnosticsProvider,

packages/runtime-host/src/server/host-run-composer.ts

@@ -46,7 +46,7 @@ export interface HostRunComposer {
   readonly composerId: string;
   readonly composerRevision: string;
   readonly tools: readonly MakaTool[];
-  readonly toolAvailability: ToolAvailabilityConfig;
+  readonly toolAvailability?: ToolAvailabilityConfig;
   readonly resolveSystemPrompt: (context: HostModelPromptContext) => Promise<ResolvedRunPrompt>;
   readonly turnTailPrompt: (context: HostModelPromptContext) => Promise<string>;
   readonly planTraceContext?: AiSdkBackendInput['planTraceContext'];