@vibesdotdev/integrations-kafka 0.0.0-stage → 1.0.0-rc.1

package/dist/message-schemas.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Kafka wire-format primitives (message envelopes, producer/consumer configs,
+ * topic configs, producer records). These are generic Kafka concerns and
+ * belong with the integrations layer rather than with any individual feature
+ * module's streaming pipeline.
+ */
+import * as z from 'zod/v4';
+export declare const kafkaMessageSchema: z.ZodObject<{
+    topic: z.ZodString;
+    partition: z.ZodNumber;
+    offset: z.ZodString;
+    timestamp: z.ZodString;
+    key: z.ZodNullable<z.ZodString>;
+    value: z.ZodUnknown;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+export declare const kafkaProducerConfigSchema: z.ZodObject<{
+    clientId: z.ZodString;
+    brokers: z.ZodArray<z.ZodString>;
+    ssl: z.ZodOptional<z.ZodBoolean>;
+    sasl: z.ZodOptional<z.ZodObject<{
+        mechanism: z.ZodEnum<{
+            plain: "plain";
+            "scram-sha-256": "scram-sha-256";
+            "scram-sha-512": "scram-sha-512";
+        }>;
+        username: z.ZodString;
+        password: z.ZodString;
+    }, z.core.$strip>>;
+    retry: z.ZodOptional<z.ZodObject<{
+        retries: z.ZodDefault<z.ZodNumber>;
+        initialRetryTime: z.ZodDefault<z.ZodNumber>;
+        maxRetryTime: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const kafkaConsumerConfigSchema: z.ZodObject<{
+    clientId: z.ZodString;
+    brokers: z.ZodArray<z.ZodString>;
+    ssl: z.ZodOptional<z.ZodBoolean>;
+    sasl: z.ZodOptional<z.ZodObject<{
+        mechanism: z.ZodEnum<{
+            plain: "plain";
+            "scram-sha-256": "scram-sha-256";
+            "scram-sha-512": "scram-sha-512";
+        }>;
+        username: z.ZodString;
+        password: z.ZodString;
+    }, z.core.$strip>>;
+    retry: z.ZodOptional<z.ZodObject<{
+        retries: z.ZodDefault<z.ZodNumber>;
+        initialRetryTime: z.ZodDefault<z.ZodNumber>;
+        maxRetryTime: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    groupId: z.ZodString;
+    sessionTimeout: z.ZodDefault<z.ZodNumber>;
+    heartbeatInterval: z.ZodDefault<z.ZodNumber>;
+    maxInFlightRequests: z.ZodDefault<z.ZodNumber>;
+    autoCommit: z.ZodDefault<z.ZodBoolean>;
+    autoCommitInterval: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const kafkaTopicConfigSchema: z.ZodObject<{
+    topic: z.ZodString;
+    numPartitions: z.ZodDefault<z.ZodNumber>;
+    replicationFactor: z.ZodDefault<z.ZodNumber>;
+    configEntries: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const kafkaProducerRecordSchema: z.ZodObject<{
+    topic: z.ZodString;
+    messages: z.ZodArray<z.ZodObject<{
+        key: z.ZodOptional<z.ZodString>;
+        value: z.ZodString;
+        partition: z.ZodOptional<z.ZodNumber>;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        timestamp: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    acks: z.ZodOptional<z.ZodNumber>;
+    timeout: z.ZodOptional<z.ZodNumber>;
+    compression: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        gzip: "gzip";
+        snappy: "snappy";
+        lz4: "lz4";
+        zstd: "zstd";
+    }>>;
+}, z.core.$strip>;
+export type KafkaMessageEnvelope = z.infer<typeof kafkaMessageSchema>;
+export type KafkaProducerConfig = z.infer<typeof kafkaProducerConfigSchema>;
+export type KafkaConsumerConfig = z.infer<typeof kafkaConsumerConfigSchema>;
+export type KafkaTopicConfig = z.infer<typeof kafkaTopicConfigSchema>;
+export type KafkaProducerRecord = z.infer<typeof kafkaProducerRecordSchema>;
+//# sourceMappingURL=message-schemas.d.ts.map

package/dist/message-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-schemas.d.ts","sourceRoot":"","sources":["../src/message-schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,kBAAkB;;;;;;;;iBAQ7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;iBAkBpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;iBAOpC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;iBAYjC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;iBAcpC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/message-schemas.js

@@ -0,0 +1,68 @@
+/**
+ * Kafka wire-format primitives (message envelopes, producer/consumer configs,
+ * topic configs, producer records). These are generic Kafka concerns and
+ * belong with the integrations layer rather than with any individual feature
+ * module's streaming pipeline.
+ */
+import * as z from 'zod/v4';
+export const kafkaMessageSchema = z.object({
+    topic: z.string(),
+    partition: z.number(),
+    offset: z.string(),
+    timestamp: z.string(),
+    key: z.string().nullable(),
+    value: z.unknown(),
+    headers: z.record(z.string(), z.string()).optional()
+});
+export const kafkaProducerConfigSchema = z.object({
+    clientId: z.string(),
+    brokers: z.array(z.string()),
+    ssl: z.boolean().optional(),
+    sasl: z
+        .object({
+        mechanism: z.enum(['plain', 'scram-sha-256', 'scram-sha-512']),
+        username: z.string(),
+        password: z.string()
+    })
+        .optional(),
+    retry: z
+        .object({
+        retries: z.number().default(5),
+        initialRetryTime: z.number().default(100),
+        maxRetryTime: z.number().default(30000)
+    })
+        .optional()
+});
+export const kafkaConsumerConfigSchema = kafkaProducerConfigSchema.extend({
+    groupId: z.string(),
+    sessionTimeout: z.number().default(30000),
+    heartbeatInterval: z.number().default(3000),
+    maxInFlightRequests: z.number().default(5),
+    autoCommit: z.boolean().default(true),
+    autoCommitInterval: z.number().default(5000)
+});
+export const kafkaTopicConfigSchema = z.object({
+    topic: z.string(),
+    numPartitions: z.number().default(1),
+    replicationFactor: z.number().default(1),
+    configEntries: z
+        .array(z.object({
+        name: z.string(),
+        value: z.string()
+    }))
+        .optional()
+});
+export const kafkaProducerRecordSchema = z.object({
+    topic: z.string(),
+    messages: z.array(z.object({
+        key: z.string().optional(),
+        value: z.string(),
+        partition: z.number().optional(),
+        headers: z.record(z.string(), z.string()).optional(),
+        timestamp: z.string().optional()
+    })),
+    acks: z.number().optional(),
+    timeout: z.number().optional(),
+    compression: z.enum(['none', 'gzip', 'snappy', 'lz4', 'zstd']).optional()
+});
+//# sourceMappingURL=message-schemas.js.map

package/dist/message-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-schemas.js","sourceRoot":"","sources":["../src/message-schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC;SACL,MAAM,CAAC;QACP,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;QAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;SACD,QAAQ,EAAE;IACZ,KAAK,EAAE,CAAC;SACN,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACvC,CAAC;SACD,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IACzE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC5C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,aAAa,EAAE,CAAC;SACd,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC,CACF;SACA,QAAQ,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC;QACR,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC,CACF;IACD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC"}

package/dist/request-queue-timeout-guard.d.ts

@@ -0,0 +1,29 @@
+import type { KafkaQueueTimerOwner as KafkaTimerOwner, KafkaRequestQueueModule, KafkaVendorClient } from './schemas/kafka.ts';
+type KafkaRequestQueueGuardLogger = {
+    warn: (message: string, context?: {
+        reason: string;
+    }) => void;
+};
+type KafkaRequestQueueGuardRuntime = {
+    supported: boolean;
+    importModule: (moduleName: string) => Promise<KafkaRequestQueueModule>;
+};
+/** The runtime-lifecycle surface a queue timer needs in order to arm and cancel. */
+export type KafkaQueueTimerOwner = KafkaTimerOwner;
+/**
+ * Arm the request queues behind a kafkajs facade on `owner`.
+ *
+ * KafkaJS creates a `Cluster` per producer, consumer or admin through its
+ * module-local `createCluster` symbol, and each cluster builds its own pool
+ * builder. The Node boundary finds that actual callable member on each facade,
+ * wraps it in place, and stamps each returned pool's queues with this client's
+ * owner. An unsupported facade refuses before the client can open resources.
+ */
+export declare function armKafkaClientQueues(owner: KafkaQueueTimerOwner, client: KafkaVendorClient): void;
+export declare function createKafkaRequestQueueTimeoutGuard(options: {
+    /** Read at each call: the host's build flag is never captured at import. */
+    building: () => boolean;
+    logger: KafkaRequestQueueGuardLogger;
+}, runtimeOverrides?: Partial<KafkaRequestQueueGuardRuntime>): () => Promise<void>;
+export {};
+//# sourceMappingURL=request-queue-timeout-guard.d.ts.map

package/dist/request-queue-timeout-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-queue-timeout-guard.d.ts","sourceRoot":"","sources":["../src/request-queue-timeout-guard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAKX,oBAAoB,IAAI,eAAe,EAEvC,uBAAuB,EAEvB,iBAAiB,EAKjB,MAAM,oBAAoB,CAAC;AA+B5B,KAAK,4BAA4B,GAAG;IACnC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC9D,CAAC;AAEF,KAAK,6BAA6B,GAAG;IACpC,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACvE,CAAC;AAEF,oFAAoF;AACpF,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAyHnD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAyBjG;AAqDD,wBAAgB,mCAAmC,CAClD,OAAO,EAAE;IACR,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,MAAM,EAAE,4BAA4B,CAAC;CACrC,EACD,gBAAgB,GAAE,OAAO,CAAC,6BAA6B,CAAM,GAC3D,MAAM,OAAO,CAAC,IAAI,CAAC,CAgCrB"}

package/dist/request-queue-timeout-guard.js

@@ -0,0 +1,245 @@
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { vibesKafkaQueueOwner, vibesKafkaQueueOwnerSlot } from "./schemas/kafka.js";
+/** The deep kafkajs RequestQueue module, named by this package's subpath import. */
+const KAFKAJS_REQUEST_QUEUE_MODULE = '#kafkajs/request-queue';
+const KAFKA_CREATE_CLUSTER_SYMBOL = 'private:Kafka:createCluster';
+function isKafkaClusterFactory(value) {
+    return typeof value === 'function';
+}
+function isKafkaConnectionPoolBuild(value) {
+    return typeof value === 'function';
+}
+function findKafkaClusterFactory(client) {
+    const key = Object.getOwnPropertySymbols(client).find(symbol => symbol.description === KAFKA_CREATE_CLUSTER_SYMBOL);
+    const descriptor = key ? Object.getOwnPropertyDescriptor(client, key) : undefined;
+    const factory = descriptor?.value;
+    if (!key || !isKafkaClusterFactory(factory)) {
+        throw new CapabilityError('KafkaJS cluster construction is unavailable.', 'UNAVAILABLE', {
+            reason: 'kafka-timeout-guard-unavailable',
+            retryable: false
+        });
+    }
+    return { key, factory };
+}
+const KAFKA_PENDING_CHECK_INTERVAL_MS = 10;
+/**
+ * KafkaJS's RequestQueue prototype is process-global, so the patch is installed
+ * once per prototype and cannot itself know which runtime's client a queue
+ * belongs to. Ownership is therefore carried on the queue: `armKafkaClientQueues`
+ * arms each queue a vendor client builds with that client's own owner token, and
+ * the patched scheduler arms that queue's timer on that owner alone. When the
+ * owner disposes, the timer is cleared and is not re-armed onto another runtime;
+ * the queue's `destroy` clears it as well.
+ *
+ * `queueTimers` holds each queue's armed check so `destroy` can dispose it. The
+ * disposer is kept here, never in KafkaJS's `throttleCheckTimeoutId` (KafkaJS's
+ * `destroy()` calls `clearTimeout` on it, which is a no-op for a Disposer).
+ */
+const queueTimers = new WeakMap();
+const patchedPrototypes = new WeakSet();
+const stampedBuilders = new WeakSet();
+const armedFactories = new WeakSet();
+/**
+ * The owner token a queue carries, when the client that built it armed one. The
+ * only writer of this key is `armKafkaConnectionPoolQueues`, which stores the
+ * owner of the runtime that created the client; a queue no runtime armed carries
+ * no key at all.
+ */
+function queueOwner(queue) {
+    const stamped = queue[vibesKafkaQueueOwner];
+    return isTimerOwner(stamped) ? stamped : undefined;
+}
+/**
+ * Whether a value carries the two lifecycle members a queue timer needs — the
+ * shape `KafkaQueueTimerOwner` declares, checked where a vendor queue hands its
+ * stamp over.
+ */
+function isTimerOwner(stamped) {
+    return stamped?.signal instanceof AbortSignal && typeof stamped?.timeout === 'function';
+}
+/**
+ * Arm the queue's pending-request check on `owner`. Returns the disposer, or
+ * `undefined` when the owner no longer accepts timers because its runtime began
+ * disposing.
+ */
+function armQueueTimer(owner, queue, delayMs, onOwnerAbort) {
+    if (owner.signal.aborted)
+        return undefined;
+    try {
+        return owner.timeout(() => {
+            queueTimers.delete(queue);
+            owner.signal.removeEventListener('abort', onOwnerAbort);
+            queue.checkPendingRequests();
+        }, delayMs);
+    }
+    catch (error) {
+        if (owner.signal.aborted && error instanceof CapabilityError && error.reason === 'runtime-disposed')
+            throw error;
+        const failure = valueFreeFailure(CaughtFailureSchema.parse(error));
+        throw new CapabilityError('Kafka request queue timer could not be scheduled.', 'INTERNAL', {
+            reason: 'kafka-request-queue-timer-schedule-failed',
+            details: { failure }
+        });
+    }
+}
+function clearQueueTimer(queue) {
+    const armed = queueTimers.get(queue);
+    if (!armed)
+        return;
+    queueTimers.delete(queue);
+    armed.owner.signal.removeEventListener('abort', armed.onOwnerAbort);
+    armed.dispose();
+}
+/**
+ * Arm every request queue a connection pool builds on `owner`. KafkaJS builds a
+ * `ConnectionPool` per broker and each pool constructs two `Connection`s, each
+ * owning a request queue, so the pool is the level at which a client hands its
+ * queues over. The vendor build is awaited unchanged and its result returned
+ * unchanged; only the queues inside it are armed.
+ */
+function armKafkaConnectionPoolQueues(ownerSlot, builder) {
+    if (stampedBuilders.has(builder))
+        return;
+    const vendorBuild = builder.build;
+    if (!isKafkaConnectionPoolBuild(vendorBuild)) {
+        throw new CapabilityError('KafkaJS connection-pool construction is unavailable.', 'UNAVAILABLE', {
+            reason: 'kafka-timeout-guard-unavailable',
+            retryable: false
+        });
+    }
+    const stampedBuild = async function stampedBuild(destination) {
+        const pool = await vendorBuild.call(builder, destination);
+        const owner = ownerSlot.current;
+        if (owner)
+            for (const connection of pool?.pool ?? []) {
+                if (connection?.requestQueue)
+                    connection.requestQueue[vibesKafkaQueueOwner] = owner;
+            }
+        return pool;
+    };
+    if (!Reflect.set(builder, 'build', stampedBuild)) {
+        throw new CapabilityError('KafkaJS connection-pool construction cannot be wrapped.', 'UNAVAILABLE', {
+            reason: 'kafka-timeout-guard-unavailable',
+            retryable: false
+        });
+    }
+    stampedBuilders.add(builder);
+}
+/**
+ * Arm the request queues behind a kafkajs facade on `owner`.
+ *
+ * KafkaJS creates a `Cluster` per producer, consumer or admin through its
+ * module-local `createCluster` symbol, and each cluster builds its own pool
+ * builder. The Node boundary finds that actual callable member on each facade,
+ * wraps it in place, and stamps each returned pool's queues with this client's
+ * owner. An unsupported facade refuses before the client can open resources.
+ */
+export function armKafkaClientQueues(owner, client) {
+    const { key, factory } = findKafkaClusterFactory(client);
+    const ownerSlot = { current: owner };
+    client[vibesKafkaQueueOwnerSlot] = ownerSlot;
+    if (armedFactories.has(factory))
+        return;
+    const armedCreateCluster = function armedCreateCluster(options) {
+        const cluster = factory.call(client, options);
+        const builder = cluster?.connectionPoolBuilder;
+        if (!builder) {
+            throw new CapabilityError('KafkaJS connection-pool construction is unavailable.', 'UNAVAILABLE', {
+                reason: 'kafka-timeout-guard-unavailable',
+                retryable: false
+            });
+        }
+        armKafkaConnectionPoolQueues(ownerSlot, builder);
+        return cluster;
+    };
+    if (!Reflect.set(client, key, armedCreateCluster)) {
+        throw new CapabilityError('KafkaJS cluster construction cannot be wrapped.', 'UNAVAILABLE', {
+            reason: 'kafka-timeout-guard-unavailable',
+            retryable: false
+        });
+    }
+    armedFactories.add(armedCreateCluster);
+}
+function patchRequestQueuePrototype(proto) {
+    const originalSchedule = proto.scheduleCheckPendingRequests;
+    const originalDestroy = proto.destroy;
+    proto.scheduleCheckPendingRequests = function scheduleCheckPendingRequests() {
+        const owner = queueOwner(this);
+        // An unstamped queue belongs to a client this runtime did not create; its own
+        // scheduler is left alone rather than borrowed to another runtime.
+        if (!owner) {
+            originalSchedule.call(this);
+            return;
+        }
+        // A queue whose owner has begun disposing is retired: its timer is cleared and
+        // it is not re-armed, on this or any other runtime.
+        if (owner.signal.aborted) {
+            clearQueueTimer(this);
+            return;
+        }
+        // A timer armed on a live owner already covers this queue; KafkaJS's own
+        // scheduler returns early in the same situation.
+        if (queueTimers.get(this))
+            return;
+        let scheduleAt = this.throttledUntil - Date.now();
+        if (this.pending.length > 0) {
+            scheduleAt = scheduleAt > 0 ? scheduleAt : KAFKA_PENDING_CHECK_INTERVAL_MS;
+        }
+        else if (scheduleAt <= 0) {
+            return;
+        }
+        const onOwnerAbort = () => {
+            // The owning runtime is gone: its timer is cleared and not moved elsewhere.
+            queueTimers.delete(this);
+            owner.signal.removeEventListener('abort', onOwnerAbort);
+        };
+        const armed = armQueueTimer(owner, this, scheduleAt, onOwnerAbort);
+        if (!armed)
+            return;
+        queueTimers.set(this, { dispose: armed, owner, onOwnerAbort });
+        owner.signal.addEventListener('abort', onOwnerAbort, { once: true });
+    };
+    if (originalDestroy) {
+        proto.destroy = function destroy() {
+            clearQueueTimer(this);
+            originalDestroy.call(this);
+        };
+    }
+}
+export function createKafkaRequestQueueTimeoutGuard(options, runtimeOverrides = {}) {
+    let promise = null;
+    return function ensureKafkaRequestQueueTimeoutGuard() {
+        if (options.building() || runtimeOverrides.supported === false)
+            return Promise.resolve();
+        if (promise)
+            return promise;
+        promise = (async () => {
+            try {
+                // kafkajs ships no types for this deep runtime path; the package's
+                // `#kafkajs/request-queue` subpath import declares it through the owning
+                // constructor contract. A mismatch throws inside this try and surfaces
+                // as a CapabilityError below.
+                const requestQueueModule = runtimeOverrides.importModule
+                    ? await runtimeOverrides.importModule(KAFKAJS_REQUEST_QUEUE_MODULE)
+                    : await import('#kafkajs/request-queue');
+                const ctor = 'default' in requestQueueModule ? requestQueueModule.default : requestQueueModule;
+                const proto = ctor.prototype;
+                if (patchedPrototypes.has(proto))
+                    return;
+                patchRequestQueuePrototype(proto);
+                patchedPrototypes.add(proto);
+            }
+            catch (error) {
+                const failure = valueFreeFailure(CaughtFailureSchema.parse(error));
+                options.logger.warn('Failed to install KafkaJS timeout guard', { reason: 'kafka-timeout-guard-unavailable' });
+                throw new CapabilityError('Kafka timeout protection is unavailable.', 'UNAVAILABLE', {
+                    reason: 'kafka-timeout-guard-unavailable',
+                    retryable: false,
+                    details: { failure }
+                });
+            }
+        })();
+        return promise;
+    };
+}
+//# sourceMappingURL=request-queue-timeout-guard.js.map

package/dist/request-queue-timeout-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-queue-timeout-guard.js","sourceRoot":"","sources":["../src/request-queue-timeout-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAgB7F,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEpF,oFAAoF;AACpF,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAC9D,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AAGlE,SAAS,qBAAqB,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACpC,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACpC,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAyB;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,2BAA2B,CAAC,CAAC;IACpH,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,OAAO,GAAG,UAAU,EAAE,KAAK,CAAC;IAClC,IAAI,CAAC,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,eAAe,CAAC,8CAA8C,EAAE,aAAa,EAAE;YACxF,MAAM,EAAE,iCAAiC;YACzC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAqB3C;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,GAAG,IAAI,OAAO,EAA8C,CAAC;AAC9E,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAU,CAAC;AAChD,MAAM,eAAe,GAAG,IAAI,OAAO,EAAU,CAAC;AAC9C,MAAM,cAAc,GAAG,IAAI,OAAO,EAAU,CAAC;AAG7C;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAgC;IACnD,MAAM,OAAO,GAAyB,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAClE,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,OAA6B;IAClD,OAAO,OAAO,EAAE,MAAM,YAAY,WAAW,IAAI,OAAO,OAAO,EAAE,OAAO,KAAK,UAAU,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACrB,KAA2B,EAC3B,KAAgC,EAChC,OAAe,EACf,YAAwB;IAExB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,CAAC;QACJ,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE;YACzB,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACxD,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC9B,CAAC,EAAE,OAAO,CAAC,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB;YAAE,MAAM,KAAK,CAAC;QACjH,MAAM,OAAO,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,UAAU,EAAE;YAC1F,MAAM,EAAE,2CAA2C;YACnD,OAAO,EAAE,EAAE,OAAO,EAAE;SACpB,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,KAAgC;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACpE,KAAK,CAAC,OAAO,EAAE,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,4BAA4B,CACpC,SAA8B,EAC9B,OAAyC;IAEzC,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAClC,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,aAAa,EAAE;YAChG,MAAM,EAAE,iCAAiC;YACzC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,UAAU,YAAY,CAAC,WAAoC;QACpF,MAAM,IAAI,GAA8B,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC;QAChC,IAAI,KAAK;YAAE,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;gBACtD,IAAI,UAAU,EAAE,YAAY;oBAAE,UAAU,CAAC,YAAY,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC;YACrF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,yDAAyD,EAAE,aAAa,EAAE;YACnG,MAAM,EAAE,iCAAiC;YACzC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAA2B,EAAE,MAAyB;IAC1F,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,SAAS,GAAwB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1D,MAAM,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC;IAC7C,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAExC,MAAM,kBAAkB,GAAwB,SAAS,kBAAkB,CAAC,OAAO;QAClF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,EAAE,qBAAqB,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,aAAa,EAAE;gBAChG,MAAM,EAAE,iCAAiC;gBACzC,SAAS,EAAE,KAAK;aAChB,CAAC,CAAC;QACJ,CAAC;QACD,4BAA4B,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CAAC,iDAAiD,EAAE,aAAa,EAAE;YAC3F,MAAM,EAAE,iCAAiC;YACzC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,cAAc,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAiC;IACpE,MAAM,gBAAgB,GAAG,KAAK,CAAC,4BAA4B,CAAC;IAC5D,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC;IAEtC,KAAK,CAAC,4BAA4B,GAAG,SAAS,4BAA4B;QAGzE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,8EAA8E;QAC9E,mEAAmE;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO;QACR,CAAC;QACD,+EAA+E;QAC/E,oDAAoD;QACpD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO;QACR,CAAC;QAED,yEAAyE;QACzE,iDAAiD;QACjD,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAElC,IAAI,UAAU,GAAG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,+BAA+B,CAAC;QAC5E,CAAC;aAAM,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO;QACR,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,EAAE;YACzB,4EAA4E;YAC5E,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/D,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,IAAI,eAAe,EAAE,CAAC;QACrB,KAAK,CAAC,OAAO,GAAG,SAAS,OAAO;YAC/B,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,OAIC,EACD,mBAA2D,EAAE;IAE7D,IAAI,OAAO,GAAyB,IAAI,CAAC;IAEzC,OAAO,SAAS,mCAAmC;QAClD,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,gBAAgB,CAAC,SAAS,KAAK,KAAK;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACzF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,IAAI,CAAC;gBACJ,mEAAmE;gBACnE,yEAAyE;gBACzE,uEAAuE;gBACvE,8BAA8B;gBAC9B,MAAM,kBAAkB,GAA4B,gBAAgB,CAAC,YAAY;oBAChF,CAAC,CAAC,MAAM,gBAAgB,CAAC,YAAY,CAAC,4BAA4B,CAAC;oBACnE,CAAC,CAAC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;gBAC1C,MAAM,IAAI,GAAG,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBAC/F,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC7B,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,OAAO;gBACzC,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBAClC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBAC9G,MAAM,IAAI,eAAe,CAAC,0CAA0C,EAAE,aAAa,EAAE;oBACpF,MAAM,EAAE,iCAAiC;oBACzC,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,EAAE,OAAO,EAAE;iBACpB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;AACH,CAAC"}

package/dist/schemas/contracts.d.ts

@@ -0,0 +1,190 @@
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+export declare enum KafkaConnectionPurpose {
+    CHAT = "chat",
+    WORKERS = "workers",
+    BENCHMARKS = "benchmarks",
+    ANALYTICS = "analytics"
+}
+export declare const KafkaPurposeSchema: z.ZodEnum<typeof KafkaConnectionPurpose>;
+export declare const KafkaAdapterOptionsSchema: z.ZodObject<{
+    purpose: z.ZodEnum<typeof KafkaConnectionPurpose>;
+}, z.core.$strip>;
+export type KafkaAdapterOptions = z.infer<typeof KafkaAdapterOptionsSchema>;
+export declare const KafkaSaslSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"secret">;
+        key: z.ZodString;
+        store: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodCustom<object, object>>;
+    }, z.core.$strict>], "source">;
+    mechanism: z.ZodLiteral<"plain">;
+}, z.core.$strip>, z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"secret">;
+        key: z.ZodString;
+        store: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodCustom<object, object>>;
+    }, z.core.$strict>], "source">;
+    mechanism: z.ZodLiteral<"scram-sha-256">;
+}, z.core.$strip>, z.ZodObject<{
+    username: z.ZodString;
+    password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        source: z.ZodLiteral<"secret">;
+        key: z.ZodString;
+        store: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodCustom<object, object>>;
+    }, z.core.$strict>], "source">;
+    mechanism: z.ZodLiteral<"scram-sha-512">;
+}, z.core.$strip>], "mechanism">;
+export type KafkaSasl = z.infer<typeof KafkaSaslSchema>;
+export declare const KafkaPublicConfigSchema: z.ZodObject<{
+    brokers: z.ZodArray<z.ZodString>;
+    ssl: z.ZodBoolean;
+}, z.core.$strip>;
+export type KafkaPublicConfig = z.infer<typeof KafkaPublicConfigSchema>;
+export declare const KafkaConnectorConfigSchema: z.ZodObject<{
+    brokers: z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>;
+    ssl: z.ZodDefault<z.ZodBoolean>;
+    sasl: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"plain">;
+    }, z.core.$strip>, z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"scram-sha-256">;
+    }, z.core.$strip>, z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"scram-sha-512">;
+    }, z.core.$strip>], "mechanism">>;
+    clientId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const ResolvedKafkaConnectorConfigSchema: z.ZodObject<{
+    ssl: z.ZodDefault<z.ZodBoolean>;
+    sasl: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"plain">;
+    }, z.core.$strip>, z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"scram-sha-256">;
+    }, z.core.$strip>, z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"scram-sha-512">;
+    }, z.core.$strip>], "mechanism">>;
+    clientId: z.ZodOptional<z.ZodString>;
+    brokers: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type KafkaConnectorConfig = z.input<typeof KafkaConnectorConfigSchema>;
+export type ResolvedKafkaConnectorConfig = z.infer<typeof ResolvedKafkaConnectorConfigSchema>;
+/**
+ * Connector declarations are parsed before merging with runtime broker settings.
+ * Password values remain credential references through config resolution.
+ */
+export declare const KafkaConnectorDeclaredConfigSchema: z.ZodObject<{
+    brokers: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+    sasl: z.ZodOptional<z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"plain">;
+    }, z.core.$strip>, z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"scram-sha-256">;
+    }, z.core.$strip>, z.ZodObject<{
+        username: z.ZodString;
+        password: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">;
+        mechanism: z.ZodLiteral<"scram-sha-512">;
+    }, z.core.$strip>], "mechanism">>>;
+    clientId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    ssl: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type KafkaConnectorDeclaredConfig = z.input<typeof KafkaConnectorDeclaredConfigSchema>;
+export declare const KafkaBaseOverridesSchema: z.ZodObject<{
+    brokers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const KafkaCustomConsumerOptionsSchema: z.ZodObject<{
+    sessionTimeout: z.ZodDefault<z.ZodNumber>;
+    heartbeatInterval: z.ZodDefault<z.ZodNumber>;
+    autoCommit: z.ZodOptional<z.ZodBoolean>;
+    autoCommitInterval: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type KafkaCustomConsumerOptions = z.input<typeof KafkaCustomConsumerOptionsSchema>;
+export declare const KafkaEventEnvelopeSchema: z.ZodObject<{
+    id: z.ZodString;
+    timestamp: z.ZodString;
+    bus: z.ZodString;
+    event: z.ZodString;
+    payload: z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>;
+    metadata: z.ZodOptional<z.ZodType<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject>>>;
+}, z.core.$catchall<z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>;
+export type KafkaEventEnvelope = z.infer<typeof KafkaEventEnvelopeSchema>;
+export declare function parseKafkaEventJson(raw: string): {
+    readonly ok: false;
+    readonly error: CapabilityError;
+    readonly value?: undefined;
+} | {
+    readonly ok: true;
+    readonly value: {
+        [x: string]: import("@vibesdotdev/kernel/bootstrap").JsonValue;
+        id: string;
+        timestamp: string;
+        bus: string;
+        event: string;
+        payload: import("@vibesdotdev/kernel/bootstrap").JsonValue;
+        metadata?: import("@vibesdotdev/kernel/schemas/json").JsonObject | undefined;
+    };
+    readonly error?: undefined;
+};
+//# sourceMappingURL=contracts.d.ts.map

package/dist/schemas/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/schemas/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAyC,MAAM,qBAAqB,CAAC;AAG7F,oBAAY,sBAAsB;IACjC,IAAI,SAAS;IACb,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,SAAS,cAAc;CACvB;AACD,eAAO,MAAM,kBAAkB,0CAAiC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;iBAA4C,CAAC;AACnF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAM5E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAI1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKrC,CAAC;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE7C,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F;;;GAGG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AACH,eAAO,MAAM,gCAAgC;;;;;iBAK3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAE1F,eAAO,MAAM,wBAAwB;;;;;;;qQAOT,CAAC;AAC7B,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM;;;;;;;;;;;;;;;;EAuB9C"}