[core-shrink] add TinyBox native shell client helper

crates/tinybox-bus/Cargo.toml

@@ -10,6 +10,12 @@ repository.workspace = true
 [dependencies]
 # The bus boundary contains data only; serialization is its sole dependency.
 serde.workspace = true
+# OpenHuman config operations share this contract type for schema generation.
+schemars = "1"
+# Runtime-neutral future combinators for the optional native-shell client helper.
+futures-util = { version = "0.3", features = ["async-await"] }
+# Runtime-neutral delay used between bounded output polls.
+futures-timer = "3"
 # Only the `storage` feature: pure collection and legacy-body vocabulary.
 serde_json = { workspace = true, optional = true }
 tinystoragedrivers-types = { workspace = true, optional = true }
@@ -22,6 +28,7 @@ storage = ["dep:serde_json", "dep:tinystoragedrivers-types"]
 
 [dev-dependencies]
 serde_json.workspace = true
+futures-executor = "0.3"
 
 [lints]
 workspace = true

crates/tinybox-bus/src/grants.rs

@@ -1,8 +1,9 @@
 //! Host-configured filesystem grant discovery and protected-path vocabulary.
+use schemars::JsonSchema;
 use serde::{Deserialize, Serialize};
 
 /// Configuration used to discover toolchain and explicit filesystem grants.
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, JsonSchema)]
 #[serde(default)]
 pub struct LocalGrantConfig {
     /// Include existing toolchain homes and git configuration.

crates/tinybox-bus/src/lib.rs

@@ -1,4 +1,5 @@
-//! Serialized requests and results for the `TinyBox` module.
+//! Serialized requests and results for the `TinyBox` module, plus runtime-neutral
+//! native-shell lifecycle orchestration over a caller-supplied client.
 //!
 //! This crate has no bus connection, executor, native backend, or policy.
 //! A caller applies its own authorization before sending these requests.
@@ -18,6 +19,12 @@ use std::collections::BTreeMap;
 mod grants;
 pub use grants::{LocalGrantConfig, LocalGrants, ProtectedPaths, ResolveLocalGrantsRequest};
 
+mod native_shell;
+pub use native_shell::{
+    NativeShellClient, NativeShellError, NativeShellOutput, NativeShellRunOutcome,
+    NativeShellRunRequest, NativeShellRunning, run_native_shell,
+};
+
 mod jail;
 pub use jail::{JailEnforcement, NativeJailConfig, NativeJailRequest, NativeJailResourceRequest};
 

crates/tinybox-bus/src/lib_tests.rs

@@ -16,6 +16,14 @@ fn command_optional_fields_default_when_absent() -> Result<(), serde_json::Error
     Ok(())
 }
 
+#[test]
+fn local_grant_config_exposes_a_json_schema() -> Result<(), serde_json::Error> {
+    let schema = schemars::schema_for!(LocalGrantConfig);
+    let schema = serde_json::to_value(schema)?;
+    assert!(schema.get("properties").is_some());
+    Ok(())
+}
+
 #[test]
 fn create_environment_defaults_and_workspace_round_trips() -> Result<(), serde_json::Error> {
     let request: CreateRequest = serde_json::from_str(