@vibesdotdev/client 0.1.1 → 1.0.0-rc.2

package/dist/sse-client.js

@@ -1,124 +1,144 @@
-/**
- * Client-side SSE (Server-Sent Events) client.
- *
- * Provides a typed interface for connecting to SSE endpoints,
- * handling reconnection, and dispatching events.
- */
+/** EventSource lifecycle and named event dispatch on the handed runtime. */
+import { getLogger } from '@vibesdotdev/logging';
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import * as z from 'zod/v4';
+import { readClientValue, HttpOriginSchema, decodeSSEData } from "./lib/client/internal/client-values.js";
 export class SSEClient {
-    url;
-    reconnectDelay;
-    maxReconnectAttempts;
-    onStatusChange;
-    onError;
+    options;
     eventSource = null;
     handlers = new Map();
+    listeners = new Set();
     reconnectAttempts = 0;
-    reconnectTimer = null;
+    cancelReconnect = null;
     _status = 'disconnected';
+    _lastFailure = null;
+    reconnectDelay;
+    maxReconnectAttempts;
     constructor(options) {
-        this.url = options.url;
-        this.reconnectDelay = options.reconnectDelay ?? 5000;
-        this.maxReconnectAttempts = options.maxReconnectAttempts ?? 5;
-        this.onStatusChange = options.onStatusChange;
-        this.onError = options.onError;
-    }
-    get status() {
-        return this._status;
+        this.options = options;
+        readClientValue(HttpOriginSchema, options.url, 'client-origin-invalid');
+        this.reconnectDelay = readClientValue(z.number().int().nonnegative(), options.reconnectDelay ?? 5000, 'sse-reconnect-delay-invalid');
+        this.maxReconnectAttempts = readClientValue(z.number().int().nonnegative(), options.maxReconnectAttempts ?? 5, 'sse-reconnect-attempts-invalid');
+        options.runtime.lifecycle.signal.addEventListener('abort', () => this.disconnect(), { once: true });
     }
+    get status() { return this._status; }
+    /** The latest EventSource failure remains observable after reconnect or disconnect. */
+    get lastFailure() { return this._lastFailure; }
     connect() {
+        if (this.options.runtime.lifecycle.phase !== 'live')
+            throw new CapabilityError('The SSE runtime has ended.', 'UNAVAILABLE', { reason: 'client-runtime-disposed' });
+        this.cleanup();
         this.setStatus('connecting');
+        const logger = getLogger('client.sse', this.options.runtime);
         try {
-            const EventSourceCtor = globalThis.EventSource;
-            this.eventSource = new EventSourceCtor(this.url);
-            this.eventSource.onopen = () => {
-                this.reconnectAttempts = 0;
-                this.setStatus('connected');
-            };
-            this.eventSource.onerror = () => {
-                const error = `SSE connection error`;
-                this.onError?.(error);
+            // The ambient `EventSource` binding, not `globalThis.EventSource`: Cloudflare
+            // workers types declare it as a global class, which is not a `globalThis` member.
+            if (!('EventSource' in globalThis))
+                throw new CapabilityError('EventSource is unavailable.', 'UNAVAILABLE', { reason: 'event-source-unavailable' });
+            // Hosts declare different constructor arities (DOM/workers take a URL, a
+            // lib-less Bun program none); the URL-taking shape is the one every host runs.
+            const EventSourceConstructor = EventSource;
+            const source = new EventSourceConstructor(this.options.url);
+            this.eventSource = source;
+            source.onopen = () => { if (this.eventSource !== source)
+                return; this.reconnectAttempts = 0; this.setStatus('connected'); };
+            source.onerror = (error) => {
+                if (this.eventSource !== source)
+                    return;
+                const terminal = this.reconnectAttempts >= this.maxReconnectAttempts;
+                const failure = new CapabilityError(terminal ? 'SSE reconnect attempts exhausted.' : 'SSE connection error', 'UNAVAILABLE', {
+                    reason: terminal ? 'sse-retries-exhausted' : 'sse-connection-failed', retryable: !terminal,
+                    cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+                });
+                this._lastFailure = failure;
+                this.dispatch('error', failure);
+                logger.error('SSE connection error', { error: valueFreeFailure(failure) });
+                if (this.options.onError)
+                    this.options.onError(failure.message, failure);
+                this.cleanup();
                 if (this.reconnectAttempts < this.maxReconnectAttempts) {
                     this.setStatus('reconnecting');
                     this.reconnectAttempts++;
-                    this.scheduleReconnect();
+                    this.cancelReconnect = this.options.runtime.lifecycle.timeout(() => { this.cancelReconnect = null; this.connect(); }, this.reconnectDelay);
                 }
-                else {
+                else
                     this.setStatus('error');
-                    this.cleanup();
-                }
-            };
-            // Dispatch events to registered handlers
-            this.eventSource.onmessage = (event) => {
-                this.dispatch('message', event.data);
             };
-            // Listen for named events by iterating registered handlers
-            for (const eventName of this.handlers.keys()) {
-                if (eventName === 'message')
-                    continue;
-                this.eventSource.addEventListener(eventName, (event) => {
-                    try {
-                        const data = JSON.parse(event.data);
-                        this.dispatch(eventName, data);
-                    }
-                    catch {
-                        this.dispatch(eventName, event.data);
-                    }
-                });
-            }
+            source.onmessage = (event) => { if (this.eventSource === source)
+                this.dispatch('message', this.decode(event.data)); };
+            for (const event of this.handlers.keys())
+                this.listen(event);
         }
-        catch (e) {
-            const error = e instanceof Error ? e.message : 'Failed to create SSE connection';
-            this.onError?.(error);
+        catch (error) {
+            logger.error('SSE connection failed', { error: valueFreeFailure(CaughtFailureSchema.parse(error)) });
+            const failure = new CapabilityError('The SSE connection could not be created.', 'UNAVAILABLE', { reason: 'sse-connection-unavailable', cause: valueFreeFailure(CaughtFailureSchema.parse(error)) });
+            this._lastFailure = failure;
+            this.dispatch('error', failure);
+            this.options.onError?.('Failed to create SSE connection', failure);
+            this.cleanup();
             this.setStatus('error');
+            throw failure;
         }
     }
-    disconnect() {
-        this.cleanup();
-        this.setStatus('disconnected');
-    }
+    disconnect() { this.cleanup(); this.reconnectAttempts = 0; this.setStatus('disconnected'); }
     on(event, handler) {
-        if (!this.handlers.has(event)) {
-            this.handlers.set(event, new Set());
+        let handlers = this.handlers.get(event);
+        if (!handlers) {
+            handlers = new Set();
+            this.handlers.set(event, handlers);
         }
-        this.handlers.get(event).add(handler);
-        // Return unsubscribe function
-        return () => {
-            this.handlers.get(event)?.delete(handler);
-        };
+        handlers.add(handler);
+        this.listen(event);
+        return () => { this.handlers.get(event)?.delete(handler); };
+    }
+    listen(event) {
+        const source = this.eventSource;
+        if (!source || event === 'message' || event === 'error' || this.listeners.has(event))
+            return;
+        this.listeners.add(event);
+        source.addEventListener(event, message => {
+            if (this.eventSource !== source)
+                return;
+            if (!(message instanceof MessageEvent)) {
+                const failure = new CapabilityError('Invalid SSE event', 'INVALID_INPUT', { reason: 'sse-event-invalid' });
+                this._lastFailure = failure;
+                this.dispatch('error', failure);
+                this.options.onError?.(failure.message, failure);
+                return;
+            }
+            this.dispatch(event, this.decode(message.data));
+        });
+    }
+    decode(data) {
+        const text = z.string().safeParse(data);
+        return text.success ? decodeSSEData(text.data) : data;
     }
     dispatch(event, data) {
-        this.handlers.get(event)?.forEach((handler) => {
+        const logger = getLogger('client.sse', this.options.runtime);
+        this.handlers.get(event)?.forEach(handler => {
             try {
-                handler(data);
+                if (data instanceof CapabilityError) {
+                    // SAFETY: Only the reserved error key receives CapabilityError; on('error') registers FailureHandler.
+                    handler(data);
+                }
+                else {
+                    // SAFETY: Message and named data keys retain their JsonValue registration and payload contract.
+                    handler(data);
+                }
             }
-            catch (e) {
-                console.error(`[SSEClient] Error in handler for "${event}":`, e);
+            catch (error) {
+                logger.error('SSE event handler failed', { error: valueFreeFailure(CaughtFailureSchema.parse(error)) });
             }
         });
     }
-    setStatus(status) {
-        this._status = status;
-        this.onStatusChange?.(status);
-    }
-    scheduleReconnect() {
-        if (this.reconnectTimer)
-            clearTimeout(this.reconnectTimer);
-        this.reconnectTimer = setTimeout(() => {
-            this.connect();
-        }, this.reconnectDelay);
-    }
+    setStatus(status) { this._status = status; this.options.onStatusChange?.(status); }
     cleanup() {
-        if (this.reconnectTimer) {
-            clearTimeout(this.reconnectTimer);
-            this.reconnectTimer = null;
-        }
-        if (this.eventSource) {
-            this.eventSource.close();
-            this.eventSource = null;
-        }
+        this.cancelReconnect?.();
+        this.cancelReconnect = null;
+        this.eventSource?.close();
+        this.eventSource = null;
+        this.listeners.clear();
     }
 }
-export function createSSEClient(options) {
-    return new SSEClient(options);
-}
+export function createSSEClient(options) { return new SSEClient(options); }
 //# sourceMappingURL=sse-client.js.map

package/dist/sse-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"sse-client.js","sourceRoot":"","sources":["../src/sse-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,MAAM,OAAO,SAAS;IACb,GAAG,CAAS;IACZ,cAAc,CAAS;IACvB,oBAAoB,CAAS;IAC7B,cAAc,CAAyC;IACvD,OAAO,CAA2B;IAElC,WAAW,GAAuB,IAAI,CAAC;IACvC,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IAChD,iBAAiB,GAAG,CAAC,CAAC;IACtB,cAAc,GAAyC,IAAI,CAAC;IAC5D,OAAO,GAAwB,cAAc,CAAC;IAEtD,YAAY,OAAyB;QACpC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,IAAI,MAAM;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,OAAO;QACN,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAE7B,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,UAAU,CAAC,WAElC,CAAC;YACF,IAAI,CAAC,WAAW,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEjD,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE;gBAC9B,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC7B,CAAC,CAAC;YAEF,IAAI,CAAC,WAAW,CAAC,OAAO,GAAG,GAAG,EAAE;gBAC/B,MAAM,KAAK,GAAG,sBAAsB,CAAC;gBACrC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;gBAEtB,IAAI,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBACxD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;oBAC/B,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACzB,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBACxB,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChB,CAAC;YACF,CAAC,CAAC;YAEF,yCAAyC;YACzC,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE;gBACtC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC,CAAC;YAEF,2DAA2D;YAC3D,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9C,IAAI,SAAS,KAAK,SAAS;oBAAE,SAAS;gBACtC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;oBACtD,IAAI,CAAC;wBACJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAE,KAAsB,CAAC,IAAI,CAAC,CAAC;wBACtD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBAChC,CAAC;oBAAC,MAAM,CAAC;wBACR,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAG,KAAsB,CAAC,IAAI,CAAC,CAAC;oBACxD,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC;YACjF,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED,UAAU;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IAED,EAAE,CAAC,KAAa,EAAE,OAAqB;QACtC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEvC,8BAA8B;QAC9B,OAAO,GAAG,EAAE;YACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,KAAa,EAAE,IAAa;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7C,IAAI,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,qCAAqC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,MAA2B;QAC5C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAEO,iBAAiB;QACxB,IAAI,IAAI,CAAC,cAAc;YAAE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACzB,CAAC;IAEO,OAAO;QACd,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,CAAC;IACF,CAAC;CACD;AAED,MAAM,UAAU,eAAe,CAAC,OAAyB;IACxD,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"sse-client.js","sourceRoot":"","sources":["../src/sse-client.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAkC,MAAM,qBAAqB,CAAC;AAC7H,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAkB,MAAM,wCAAwC,CAAC;AAQ1H,MAAM,OAAO,SAAS;IAUQ;IATrB,WAAW,GAAuB,IAAI,CAAC;IACvC,QAAQ,GAAG,IAAI,GAAG,EAA8C,CAAC;IACjE,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,iBAAiB,GAAG,CAAC,CAAC;IACtB,eAAe,GAAoB,IAAI,CAAC;IACxC,OAAO,GAAwB,cAAc,CAAC;IAC9C,YAAY,GAA2B,IAAI,CAAC;IAClC,cAAc,CAAS;IACxB,oBAAoB,CAAS;IAC9C,YAA6B,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;QACrD,eAAe,CAAC,gBAAgB,EAAE,OAAO,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACxE,IAAI,CAAC,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI,EAAE,6BAA6B,CAAC,CAAC;QACrI,IAAI,CAAC,oBAAoB,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,oBAAoB,IAAI,CAAC,EAAE,gCAAgC,CAAC,CAAC;QACjJ,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,MAAM,KAA0B,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,uFAAuF;IACvF,IAAI,WAAW,KAA6B,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACvE,OAAO;QACN,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,MAAM;YAAE,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACnK,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC;YACJ,8EAA8E;YAC9E,kFAAkF;YAClF,IAAI,CAAC,CAAC,aAAa,IAAI,UAAU,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACpJ,yEAAyE;YACzE,+EAA+E;YAC/E,MAAM,sBAAsB,GAAqC,WAAW,CAAC;YAC7E,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5D,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;YAC1B,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5H,MAAM,CAAC,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;gBACjC,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;oBAAE,OAAO;gBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,oBAAoB,CAAC;gBACrE,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,sBAAsB,EAAE,aAAa,EAAE;oBAC3H,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,EAAE,SAAS,EAAE,CAAC,QAAQ;oBAC1F,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;iBACzD,CAAC,CAAC;gBACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;gBAC5B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC3E,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBACxD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;oBAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACzD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC5I,CAAC;;oBAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC,CAAC;YACF,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmC,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;gBAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpJ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACrG,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,0CAA0C,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACpM,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC;QACf,CAAC;IACF,CAAC;IACD,UAAU,KAAW,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAGlG,EAAE,CAAC,KAAa,EAAE,OAAsC;QACvD,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAAC,CAAC;QAC5E,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACO,MAAM,CAAC,KAAa;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;YACxC,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;gBAAE,OAAO;YACxC,IAAI,CAAC,CAAC,OAAO,YAAY,YAAY,CAAC,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,mBAAmB,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC3G,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;gBAC5B,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACjD,OAAO;YACR,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACJ,CAAC;IACO,MAAM,CAAC,IAAe;QAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAGO,QAAQ,CAAC,KAAa,EAAE,IAAiC;QAChE,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC3C,IAAI,CAAC;gBACJ,IAAI,IAAI,YAAY,eAAe,EAAE,CAAC;oBACrC,sGAAsG;oBACrG,OAA0B,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACP,gGAAgG;oBAC/F,OAAwB,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC;YACF,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QAC3H,CAAC,CAAC,CAAC;IACJ,CAAC;IACO,SAAS,CAAC,MAA2B,IAAU,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9G,OAAO;QACd,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QACtD,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC5E,CAAC;CACD;AACD,MAAM,UAAU,eAAe,CAAC,OAAyB,IAAe,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC"}

package/dist/svelte/client-svelte.plugin.d.ts

@@ -0,0 +1,3 @@
+export declare const clientSveltePlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default clientSveltePlugin;
+//# sourceMappingURL=client-svelte.plugin.d.ts.map

package/dist/svelte/client-svelte.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-svelte.plugin.d.ts","sourceRoot":"","sources":["../../src/svelte/client-svelte.plugin.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,kBAAkB,6CAiB7B,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/dist/svelte/client-svelte.plugin.js

@@ -0,0 +1,35 @@
+import { createRuntimeImplementation, createRuntimePlugin, loader, settle } from '@vibesdotdev/kernel';
+const loadApiRequestToolCard = () => import('./tool-widgets/ApiRequestToolCard.svelte');
+const apiRequestWidget = {
+    id: 'api-request.svelte-widget',
+    kind: 'tools/ui',
+    name: 'API Request Svelte Widget',
+    description: 'Renders api-request method, URL, status, and a body excerpt in Kit ToolCard.',
+    surfaces: ['web'],
+    role: 'widget',
+    targetToolId: 'api-request',
+    tags: ['api', 'network'],
+    enabled: true
+};
+const kitToolWidgets = await settle(() => import('@vibesdotdev/kit/components/tool-widgets'));
+const registerKitToolWidget = kitToolWidgets.ok ? kitToolWidgets.value.registerToolWidget : undefined;
+registerKitToolWidget?.('api-request', loadApiRequestToolCard);
+export const clientSveltePlugin = createRuntimePlugin({
+    id: '@vibesdotdev/client/svelte',
+    name: 'Client Svelte',
+    description: 'Client-owned Svelte tool-result contributions for api-request.',
+    dependencies: [],
+    descriptors: [apiRequestWidget],
+    loaders: [
+        loader(apiRequestWidget.id, { kind: 'tools/ui', scope: 'browser' }, async () => {
+            registerKitToolWidget?.('api-request', loadApiRequestToolCard);
+            const module = await loadApiRequestToolCard();
+            return createRuntimeImplementation({
+                kind: 'tools/ui',
+                id: apiRequestWidget.id,
+                implementation: { web: { component: module.default } }
+            });
+        })
+    ]
+});
+export default clientSveltePlugin;

package/dist/svelte/index.d.ts

@@ -0,0 +1,3 @@
+export { clientSveltePlugin as default, clientSveltePlugin } from './client-svelte.plugin.ts';
+export { default as ApiRequestToolCard } from './tool-widgets/ApiRequestToolCard.svelte';
+//# sourceMappingURL=index.d.ts.map

package/dist/svelte/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/svelte/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,IAAI,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,0CAA0C,CAAC"}

package/dist/svelte/index.js

@@ -0,0 +1,2 @@
+export { clientSveltePlugin as default, clientSveltePlugin } from "./client-svelte.plugin.js";
+export { default as ApiRequestToolCard } from './tool-widgets/ApiRequestToolCard.svelte';

package/dist/svelte/styles.css

@@ -0,0 +1,8 @@
+/*
+ * Tailwind v4 source declaration for consumers — mirrors @vibesdotdev/kit's
+ * styles.css pattern. Apps that @import this file get this package's
+ * components scanned by their Tailwind build, so utility classes used only
+ * inside these components are emitted in the app's CSS bundle (Tailwind
+ * never scans node_modules). Paths resolve relative to this file.
+ */
+@source "./";

package/dist/svelte/tool-widgets/ApiRequestToolCard.svelte

@@ -0,0 +1,53 @@
+<script lang="ts">
+	/**
+	 * Designed Kit card for `api-request`: method, app-scoped URL, status, and
+	 * a truncated response-body excerpt. Composes the shared ToolCard shell.
+	 */
+	import { Badge } from '@vibesdotdev/kit/components/ui/badge';
+	import {
+		ToolCard,
+		ToolCardBody,
+		type ToolWidgetProps
+	} from '@vibesdotdev/kit/components/tool-widgets';
+	import { apiRequestCardModel } from '../../tools/api-request/api-request.view.js';
+
+	let { tool, compact = false }: ToolWidgetProps = $props();
+
+	const model = $derived(
+		apiRequestCardModel({
+			input: tool.input,
+			output: tool.output,
+			error: tool.error
+		})
+	);
+</script>
+
+<ToolCard {tool} {compact} title={model.title} icon="lucide:server">
+	{#snippet children()}
+		<ToolCardBody {compact}>
+			<div class="flex flex-wrap items-center gap-1.5">
+				{#if model.method}
+					<Badge variant="outline" class="font-mono text-caption">{model.method}</Badge>
+				{/if}
+				{#if model.statusLabel}
+					<Badge
+						variant={model.failed ? 'destructive' : 'secondary'}
+						class="font-mono text-caption"
+					>
+						{model.statusLabel}
+					</Badge>
+				{/if}
+			</div>
+			{#if model.url}
+				<p class="truncate font-mono text-footnote text-foreground">{model.url}</p>
+			{/if}
+			{#if model.bodyExcerpt}
+				<p class="line-clamp-3 font-mono text-footnote whitespace-pre-wrap text-muted-foreground">
+					{model.bodyExcerpt}
+				</p>
+			{:else if model.statusLabel === 'success'}
+				<p class="text-footnote text-muted-foreground italic">No body returned.</p>
+			{/if}
+		</ToolCardBody>
+	{/snippet}
+</ToolCard>

package/dist/svelte/tool-widgets/ApiRequestToolCard.svelte.d.ts

@@ -0,0 +1,5 @@
+import { type ToolWidgetProps } from '@vibesdotdev/kit/components/tool-widgets';
+declare const ApiRequestToolCard: import("svelte").Component<ToolWidgetProps, {}, "">;
+type ApiRequestToolCard = ReturnType<typeof ApiRequestToolCard>;
+export default ApiRequestToolCard;
+//# sourceMappingURL=ApiRequestToolCard.svelte.d.ts.map

package/dist/svelte/tool-widgets/ApiRequestToolCard.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiRequestToolCard.svelte.d.ts","sourceRoot":"","sources":["../../../src/svelte/tool-widgets/ApiRequestToolCard.svelte.ts"],"names":[],"mappings":"AAQA,OAAO,EAGL,KAAK,eAAe,EACpB,MAAM,0CAA0C,CAAC;AAiDnD,QAAA,MAAM,kBAAkB,qDAAwC,CAAC;AACjE,KAAK,kBAAkB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAChE,eAAe,kBAAkB,CAAC"}

package/dist/svelte/tool-widgets/index.d.ts

@@ -0,0 +1,2 @@
+export { default as ApiRequestToolCard } from './ApiRequestToolCard.svelte';
+//# sourceMappingURL=index.d.ts.map

package/dist/svelte/tool-widgets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/svelte/tool-widgets/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/svelte/tool-widgets/index.js

@@ -0,0 +1 @@
+export { default as ApiRequestToolCard } from './ApiRequestToolCard.svelte';

package/dist/tools/api-request/api-request.contract.d.ts

@@ -0,0 +1,19 @@
+import { type JsonValue } from '../../lib/client/internal/client-values.ts';
+import { CapabilityError, type VibesRuntime } from '@vibesdotdev/kernel';
+import type { ApiRequestInput, ApiRequestOutput } from './schemas/index.ts';
+export declare class ApiRequestContractError extends CapabilityError {
+    readonly contractCode: string;
+    constructor(contractCode: string, message: string, options?: ErrorOptions);
+}
+export interface ResolvedApiRequestTarget {
+    app: string;
+    origin: string;
+    url: string;
+}
+export declare function resolveApiRequestTarget(input: ApiRequestInput, runtime: VibesRuntime): Promise<ResolvedApiRequestTarget>;
+export declare function apiRequestErrorOutput(error: unknown): ApiRequestOutput & {
+    error: NonNullable<ApiRequestOutput['error']>;
+};
+/** Apply the shared credential redactor before emitting a tool result. */
+export declare function apiRequestSuccessOutput(response: JsonValue): ApiRequestOutput;
+//# sourceMappingURL=api-request.contract.d.ts.map

package/dist/tools/api-request/api-request.contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-request.contract.d.ts","sourceRoot":"","sources":["../../../src/tools/api-request/api-request.contract.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsD,KAAK,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAEhI,OAAO,EAAE,eAAe,EAAkE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzI,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAW5E,qBAAa,uBAAwB,SAAQ,eAAe;IAE1D,QAAQ,CAAC,YAAY,EAAE,MAAM;gBAApB,YAAY,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,YAAY;CAKvB;AAED,MAAM,WAAW,wBAAwB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACZ;AA4CD,wBAAsB,uBAAuB,CAC5C,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,YAAY,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAmDnC;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,GAAG;IAAE,KAAK,EAAE,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAA;CAAE,CAS1H;AACD,0EAA0E;AAC1E,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,SAAS,GAAG,gBAAgB,CAG7E"}

package/dist/tools/api-request/api-request.contract.js

@@ -0,0 +1,110 @@
+import * as z from 'zod/v4';
+import { redactedExcerpt, redactCredentials } from '@vibesdotdev/shared/utils';
+import { readClientValue, readClientFields, JsonValueSchema } from "../../lib/client/internal/client-values.js";
+import { apiRequestInputSchema } from "./schemas/index.js";
+import { CapabilityError, CaughtFailureSchema, isCapabilityError } from '@vibesdotdev/kernel';
+const FORBIDDEN_AUTH_HEADERS = new Set([
+    'authorization',
+    'proxy-authorization',
+    'cookie',
+    'set-cookie',
+    'x-api-key',
+    'x-auth-token'
+]);
+export class ApiRequestContractError extends CapabilityError {
+    contractCode;
+    constructor(contractCode, message, options) {
+        super(redactedExcerpt(message), contractCode === 'UNKNOWN_APP' ? 'NOT_FOUND' : contractCode.startsWith('NO_AUTH') ? 'AUTH_REQUIRED' : 'INVALID_INPUT', { reason: contractCode.toLowerCase().replaceAll('_', '-'), cause: options?.cause });
+        this.contractCode = contractCode;
+        this.name = 'ApiRequestContractError';
+    }
+}
+function assertSafeHeaders(headers) {
+    for (const name of Object.keys(headers ?? {})) {
+        if (FORBIDDEN_AUTH_HEADERS.has(name.trim().toLowerCase())) {
+            throw new ApiRequestContractError('AUTH_HEADER_FORBIDDEN', `Header "${name}" is managed by the authenticated API client and cannot be supplied to api-request.`);
+        }
+    }
+}
+async function resolveDeclaredServiceOrigin(app, runtime) {
+    try {
+        const selected = runtime.hasKind('infra/service')
+            ? await runtime.query('infra/service').withId(app).select()
+            : undefined;
+        if (!selected) {
+            throw new CapabilityError('Service is not declared in this runtime.', 'NOT_FOUND', {
+                reason: 'service-undeclared',
+                details: { serviceId: app }
+            });
+        }
+        return await selected.impl.origin();
+    }
+    catch (error) {
+        if (!(error instanceof Error && isCapabilityError(error) && error.reason === 'service-undeclared'))
+            throw error;
+        throw new ApiRequestContractError('UNKNOWN_APP', `Unknown vibes app "${app}" — no infra/service declares it in the configured service environment.`, { cause: error });
+    }
+}
+export async function resolveApiRequestTarget(input, runtime) {
+    input = readClientValue(apiRequestInputSchema, input, 'api-request-input-invalid');
+    const app = input.app?.trim();
+    if (!app) {
+        throw new ApiRequestContractError('APP_REQUIRED', 'api-request requires an explicit app id naming a declared infra/service.');
+    }
+    assertSafeHeaders(input.headers);
+    const origin = await resolveDeclaredServiceOrigin(app, runtime);
+    let configured;
+    let target;
+    try {
+        configured = new URL(origin);
+        target = new URL(input.path, `${origin}/`);
+    }
+    catch (cause) {
+        throw new ApiRequestContractError('INVALID_APP_ORIGIN', `The configured origin for vibes app "${app}" is not a valid URL.`, { cause });
+    }
+    if (configured.protocol !== 'http:' && configured.protocol !== 'https:') {
+        throw new ApiRequestContractError('INVALID_APP_ORIGIN', `The configured origin for vibes app "${app}" must use HTTP or HTTPS.`);
+    }
+    const configuredOrigin = configured.origin;
+    if (!input.path.startsWith('/') ||
+        input.path.startsWith('//') ||
+        target.origin !== configuredOrigin) {
+        throw new ApiRequestContractError('INVALID_PATH', 'api-request path must begin with one slash and cannot override the configured app origin.');
+    }
+    return {
+        app,
+        origin: configuredOrigin,
+        url: target.toString()
+    };
+}
+export function apiRequestErrorOutput(error) {
+    const failure = CaughtFailureSchema.parse(error);
+    return readClientFields(() => {
+        const status = readClientValue(z.object({ status: z.number().int().optional() }), failure, 'api-request-failure-unreadable').status;
+        return { status: 'error', error: {
+                message: failure instanceof Error ? redactedExcerpt(failure.message, { maxChars: 2000 }) : 'The API request failed.',
+                code: failure instanceof ApiRequestContractError ? failure.contractCode : failure instanceof CapabilityError && failure.reason === 'no-auth-client' ? 'NO_AUTH_CLIENT' : 'API_REQUEST_FAILED', status
+            } };
+    }, 'api-request-failure-unreadable');
+}
+/** Apply the shared credential redactor before emitting a tool result. */
+export function apiRequestSuccessOutput(response) {
+    const value = readClientValue(JsonValueSchema, response, 'api-request-response-invalid');
+    return { status: 'success', response: redactApiResponse(value) };
+}
+function redactApiResponse(value) {
+    if (value === null)
+        return null;
+    if (Array.isArray(value))
+        return value.map(redactApiResponse);
+    const string = z.string().safeParse(value);
+    if (string.success)
+        return redactCredentials(string.data);
+    const record = z.record(z.string(), JsonValueSchema).safeParse(value);
+    if (!record.success)
+        return value;
+    return Object.fromEntries(Object.entries(record.data).map(([key, entry]) => [key,
+        redactCredentials(`${key}=credential-value`) !== `${key}=credential-value`
+            ? '[redacted]' : redactApiResponse(entry)]));
+}
+//# sourceMappingURL=api-request.contract.js.map

package/dist/tools/api-request/api-request.contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-request.contract.js","sourceRoot":"","sources":["../../../src/tools/api-request/api-request.contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAkB,MAAM,4CAA4C,CAAC;AAChI,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAA6C,MAAM,qBAAqB,CAAC;AAGzI,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACtC,eAAe;IACf,qBAAqB;IACrB,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;CACd,CAAC,CAAC;AAEH,MAAM,OAAO,uBAAwB,SAAQ,eAAe;IAEjD;IADV,YACU,YAAoB,EAC7B,OAAe,EACf,OAAsB;QAEtB,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,YAAY,KAAK,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAJlO,iBAAY,GAAZ,YAAY,CAAQ;QAK7B,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACvC,CAAC;CACD;AAQD,SAAS,iBAAiB,CAAC,OAA2C;IACrE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,uBAAuB,CAChC,uBAAuB,EACvB,WAAW,IAAI,qFAAqF,CACpG,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAWD,KAAK,UAAU,4BAA4B,CAAC,GAAW,EAAE,OAAqB;IAC7E,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;YAChD,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAiD,eAAe,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE;YAC3G,CAAC,CAAC,SAAS,CAAC;QACb,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,eAAe,CAAC,0CAA0C,EAAE,WAAW,EAAE;gBAClF,MAAM,EAAE,oBAAoB;gBAC5B,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;aAC3B,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,CAAC;YAAE,MAAM,KAAK,CAAC;QAChH,MAAM,IAAI,uBAAuB,CAChC,aAAa,EACb,sBAAsB,GAAG,yEAAyE,EAClG,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,KAAsB,EACtB,OAAqB;IAErB,KAAK,GAAG,eAAe,CAAC,qBAAqB,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,uBAAuB,CAChC,cAAc,EACd,0EAA0E,CAC1E,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAEhE,IAAI,UAAe,CAAC;IACpB,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,uBAAuB,CAChC,oBAAoB,EACpB,wCAAwC,GAAG,uBAAuB,EAClE,EAAE,KAAK,EAAE,CACT,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,uBAAuB,CAChC,oBAAoB,EACpB,wCAAwC,GAAG,2BAA2B,CACtE,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC;IAC3C,IACC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAC3B,MAAM,CAAC,MAAM,KAAK,gBAAgB,EACjC,CAAC;QACF,MAAM,IAAI,uBAAuB,CAChC,cAAc,EACd,2FAA2F,CAC3F,CAAC;IACH,CAAC;IAED,OAAO;QACN,GAAG;QACH,MAAM,EAAE,gBAAgB;QACxB,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;KACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IACnD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,gBAAgB,CAAC,GAAG,EAAE;QAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,gCAAgC,CAAC,CAAC,MAAM,CAAC;QACpI,OAAO,EAAE,MAAM,EAAE,OAAgB,EAAE,KAAK,EAAE;gBACzC,OAAO,EAAE,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,yBAAyB;gBACpH,IAAI,EAAE,OAAO,YAAY,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,YAAY,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,EAAE,MAAM;aACrM,EAAE,CAAC;IACL,CAAC,EAAE,gCAAgC,CAAC,CAAC;AACtC,CAAC;AACD,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,QAAmB;IAC1D,MAAM,KAAK,GAAG,eAAe,CAAC,eAAe,EAAE,QAAQ,EAAE,8BAA8B,CAAC,CAAC;IACzF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgB;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG;QAC/E,iBAAiB,CAAC,GAAG,GAAG,mBAAmB,CAAC,KAAK,GAAG,GAAG,mBAAmB;YACzE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/tools/api-request/api-request.descriptor.d.ts

@@ -23,23 +23,30 @@ declare const _default: {
                 GET: "GET";
                 POST: "POST";
                 PUT: "PUT";
-                DELETE: "DELETE";
                 PATCH: "PATCH";
+                DELETE: "DELETE";
             }>;
             path: import("zod/v4").ZodString;
-            query: import("zod/v4").ZodOptional<import("zod/v4").ZodRecord<import("zod/v4").ZodString, import("zod/v4").ZodAny>>;
-            body: import("zod/v4").ZodOptional<import("zod/v4").ZodAny>;
+            query: import("zod/v4").ZodOptional<import("zod/v4").ZodRecord<import("zod/v4").ZodString, import("zod/v4").ZodOptional<import("zod/v4").ZodUnion<readonly [import("zod/v4").ZodString, import("zod/v4").ZodNumber, import("zod/v4").ZodBoolean, import("zod/v4").ZodArray<import("zod/v4").ZodString>]>>>>;
+            body: import("zod/v4").ZodOptional<import("zod/v4").ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, import("zod/v4/core").$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
             headers: import("zod/v4").ZodOptional<import("zod/v4").ZodRecord<import("zod/v4").ZodString, import("zod/v4").ZodString>>;
+            app: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
         }, import("zod/v4/core").$strip>;
         output: import("zod/v4").ZodObject<{
             status: import("zod/v4").ZodEnum<{
                 error: "error";
                 success: "success";
             }>;
-            response: import("zod/v4").ZodOptional<import("zod/v4").ZodUnknown>;
+            response: import("zod/v4").ZodOptional<import("zod/v4").ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, import("zod/v4/core").$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
             error: import("zod/v4").ZodOptional<import("zod/v4").ZodObject<{
                 message: import("zod/v4").ZodString;
+                failure: import("zod/v4").ZodOptional<import("zod/v4").ZodObject<{
+                    name: import("zod/v4").ZodString;
+                    code: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
+                    reason: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
+                }, import("zod/v4/core").$strip>>;
                 code: import("zod/v4").ZodOptional<import("zod/v4").ZodString>;
+                status: import("zod/v4").ZodOptional<import("zod/v4").ZodNumber>;
             }, import("zod/v4/core").$strip>>;
         }, import("zod/v4/core").$strip>;
     };

package/dist/tools/api-request/api-request.descriptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-request.descriptor.d.ts","sourceRoot":"","sources":["../../../src/tools/api-request/api-request.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKH,wBAkBG"}
+{"version":3,"file":"api-request.descriptor.d.ts","sourceRoot":"","sources":["../../../src/tools/api-request/api-request.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKH,wBAsBG"}