feat(FN-3332): add droid runtime plugin with event bridge and process manag

The merge delivers a new `fusion-plugin-droid-runtime` plugin providing a full MCP server and runtime adapter for droid-based agents, with event bridging, process management, tool mapping, and a prompt builder. It also adds agent delegation and org hierarchy tools to the pi extension, while fixing a

Fusion-Task-Id: FN-3332

packages/dashboard/src/droid-cli-probe.ts

@@ -1,148 +1,7 @@
-/**
- * Probe for the locally-installed Droid CLI binary.
- *
- * Used by GET /api/providers/droid-cli/status to power the "Factory AI —
- * via Droid CLI" provider card. The card shows `authenticated=true` only
- * when the binary is on PATH *and* the user has flipped on `useDroidCli`.
- *
- * Intentional design choices:
- *
- * - No caching. The user's PATH can change between requests (nvm switches,
- *   fresh terminal, etc.) — we'd rather pay one `spawn()` per poll than
- *   serve a stale "droid not installed" response. Droid's `--version`
- *   flag exits in ~40ms, so cost is negligible.
- *
- * - Short timeout. A misbehaving `droid` shim could hang indefinitely;
- *   we cap the probe at 2s and report `available: false` with a timeout
- *   reason rather than blocking the HTTP request.
- *
- * - No authorization. We never shell-interpolate PATH or user input.
- *   We spawn `droid --version` directly with argv, no shell.
- */
+import { probeDroidBinary } from "@fusion-plugin-examples/droid-runtime/probe";
 
-import { spawn } from "node:child_process";
+export type DroidCliBinaryStatus = Awaited<ReturnType<typeof probeDroidBinary>>;
 
-/** Result shape returned to the dashboard status endpoint. */
-export interface DroidCliBinaryStatus {
-  /** True if the `droid` binary was found on PATH and ran to completion. */
-  available: boolean;
-  /** Trimmed stdout from `droid --version`, if available. */
-  version?: string;
-  /** Absolute path, if we could resolve it via `which`. */
-  binaryPath?: string;
-  /** Human-readable failure reason when `available === false`. */
-  reason?: string;
-  /** Wall-clock duration of the probe, useful for debugging slow paths. */
-  probeDurationMs: number;
-}
-
-/** Default probe timeout. Droid's --version is fast; 2s is generous. */
-const PROBE_TIMEOUT_MS = 2000;
-
-/**
- * Spawn `droid --version` and return a structured status result.
- *
- * Never throws — any failure is captured as `available: false` with a reason
- * so the caller (an HTTP handler) can render the provider card without
- * try/catch.
- */
-export async function probeDroidCli(
-  options: { timeoutMs?: number } = {},
-): Promise<DroidCliBinaryStatus> {
-  const startedAt = Date.now();
-  const timeoutMs = options.timeoutMs ?? PROBE_TIMEOUT_MS;
-
-  const binaryPath = await tryResolveBinaryPath("droid");
-
-  return new Promise<DroidCliBinaryStatus>((resolvePromise) => {
-    const finish = (result: Omit<DroidCliBinaryStatus, "probeDurationMs">): void => {
-      resolvePromise({ ...result, probeDurationMs: Date.now() - startedAt });
-    };
-
-    let settled = false;
-    const child = spawn(binaryPath ?? "droid", ["--version"], {
-      stdio: ["ignore", "pipe", "pipe"],
-    });
-
-    const timer = setTimeout(() => {
-      if (settled) return;
-      settled = true;
-      try {
-        child.kill("SIGKILL");
-      } catch {
-        // Process already gone — nothing to do.
-      }
-      finish({
-        available: false,
-        binaryPath,
-        reason: `Probe timed out after ${timeoutMs}ms`,
-      });
-    }, timeoutMs);
-
-    let stdout = "";
-    let stderr = "";
-    child.stdout?.on("data", (chunk) => {
-      stdout += chunk.toString("utf-8");
-    });
-    child.stderr?.on("data", (chunk) => {
-      stderr += chunk.toString("utf-8");
-    });
-
-    child.on("error", (err) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      const isNotFound = (err as NodeJS.ErrnoException).code === "ENOENT";
-      finish({
-        available: false,
-        binaryPath,
-        reason: isNotFound ? "`droid` not found on PATH" : err.message,
-      });
-    });
-
-    child.on("close", (code) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      if (code === 0) {
-        finish({
-          available: true,
-          version: stdout.trim() || undefined,
-          binaryPath,
-        });
-      } else {
-        finish({
-          available: false,
-          binaryPath,
-          reason:
-            stderr.trim() || `droid --version exited with code ${String(code)}`,
-        });
-      }
-    });
-  });
-}
-
-/**
- * Best-effort `which droid`. We don't fail probe on inability to resolve
- * the path — the spawn above is the actual authority. This is just for
- * surfacing a friendly "found at /opt/homebrew/bin/droid" in the UI.
- */
-async function tryResolveBinaryPath(binary: string): Promise<string | undefined> {
-  return new Promise((resolvePromise) => {
-    const which = process.platform === "win32" ? "where" : "which";
-    const child = spawn(which, [binary], { stdio: ["ignore", "pipe", "ignore"] });
-    let out = "";
-    child.stdout?.on("data", (chunk) => {
-      out += chunk.toString("utf-8");
-    });
-    child.on("error", () => resolvePromise(undefined));
-    child.on("close", (code) => {
-      if (code === 0) {
-        const first = out.trim().split(/\r?\n/)[0];
-        resolvePromise(first?.length ? first : undefined);
-      } else {
-        resolvePromise(undefined);
-      }
-    });
-  });
+export async function probeDroidCli(options: { timeoutMs?: number } = {}): Promise<DroidCliBinaryStatus> {
+  return probeDroidBinary({ timeoutMs: options.timeoutMs });
 }