@vibesdotdev/integrations 0.0.0-stage → 1.0.0-rc.3

package/dist/client/integrations.runtime-client.d.ts

@@ -0,0 +1,25 @@
+import type { KindContext, VibesRuntime } from '@vibesdotdev/kernel';
+import { BaseRuntimeClient, type RuntimeClient, type RuntimeClientDescriptor } from '@vibesdotdev/kernel/client';
+import type { IntegrationProviderDescriptor } from '../schemas/integration-descriptor.ts';
+import { type IntegrationCatalogListOptions } from '../catalog/integration-catalog.kind.ts';
+/** Catalog filters owned by the integration/catalog capability contract. */
+export type IntegrationProviderCatalogListOptions = IntegrationCatalogListOptions;
+export interface IntegrationProviderCatalog {
+    /** List provider descriptors without resolving implementations or credentials. */
+    list(options?: IntegrationProviderCatalogListOptions): Promise<IntegrationProviderDescriptor[]>;
+    /** Get one declared provider descriptor, including a disabled descriptor. */
+    get(id: string): Promise<IntegrationProviderDescriptor | null>;
+}
+export interface IntegrationsClient extends RuntimeClient {
+    readonly providers: IntegrationProviderCatalog;
+}
+declare class RuntimeIntegrationsClient extends BaseRuntimeClient<VibesRuntime> implements IntegrationsClient {
+    readonly providers: IntegrationProviderCatalog;
+    constructor(descriptor?: RuntimeClientDescriptor, context?: KindContext<VibesRuntime>, runtime?: VibesRuntime);
+    protected catalogUnavailable(): IntegrationProviderCatalog;
+    private catalog;
+    private listProviders;
+    private getProvider;
+}
+export default RuntimeIntegrationsClient;
+//# sourceMappingURL=integrations.runtime-client.d.ts.map

package/dist/client/integrations.runtime-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.runtime-client.d.ts","sourceRoot":"","sources":["../../src/client/integrations.runtime-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EACN,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAIN,KAAK,6BAA6B,EAClC,MAAM,wCAAwC,CAAC;AAIhD,4EAA4E;AAC5E,MAAM,MAAM,qCAAqC,GAAG,6BAA6B,CAAC;AAElF,MAAM,WAAW,0BAA0B;IAC1C,kFAAkF;IAClF,IAAI,CAAC,OAAO,CAAC,EAAE,qCAAqC,GAAG,OAAO,CAAC,6BAA6B,EAAE,CAAC,CAAC;IAChG,6EAA6E;IAC7E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACxD,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;CAC/C;AAED,cAAM,yBAA0B,SAAQ,iBAAiB,CAAC,YAAY,CAAE,YAAW,kBAAkB;IACpG,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;gBAG9C,UAAU,GAAE,uBAGX,EACD,OAAO,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,EACnC,OAAO,CAAC,EAAE,YAAY;IASvB,SAAS,CAAC,kBAAkB,IAAI,0BAA0B;YAO5C,OAAO;YAaP,aAAa;YAMb,WAAW;CAGzB;AAED,eAAe,yBAAyB,CAAC"}

package/dist/client/integrations.runtime-client.descriptor.d.ts

@@ -0,0 +1,4 @@
+import { type RuntimeClientDescriptor } from '@vibesdotdev/kernel/client';
+export declare const integrationsRuntimeClientDescriptor: RuntimeClientDescriptor;
+export default integrationsRuntimeClientDescriptor;
+//# sourceMappingURL=integrations.runtime-client.descriptor.d.ts.map

package/dist/client/integrations.runtime-client.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.runtime-client.descriptor.d.ts","sourceRoot":"","sources":["../../src/client/integrations.runtime-client.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,uBAAuB,EAC5B,MAAM,4BAA4B,CAAC;AAEpC,eAAO,MAAM,mCAAmC,EAAE,uBAW/C,CAAC;AAEJ,eAAe,mCAAmC,CAAC"}

package/dist/client/integrations.runtime-client.descriptor.js

@@ -0,0 +1,13 @@
+import { RuntimeClientDescriptorSchema } from '@vibesdotdev/kernel/client';
+export const integrationsRuntimeClientDescriptor = RuntimeClientDescriptorSchema.parse({
+    id: 'integrations',
+    kind: 'runtime/client',
+    name: 'Integrations Client',
+    description: 'Canonical read client for the descriptor-backed integration provider catalog',
+    enabled: true,
+    hardware: ['consumer', 'cloud'],
+    requiredContext: [],
+    optionalContext: ['user', 'surface', 'session']
+});
+export default integrationsRuntimeClientDescriptor;
+//# sourceMappingURL=integrations.runtime-client.descriptor.js.map

package/dist/client/integrations.runtime-client.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.runtime-client.descriptor.js","sourceRoot":"","sources":["../../src/client/integrations.runtime-client.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,6BAA6B,EAE7B,MAAM,4BAA4B,CAAC;AAEpC,MAAM,CAAC,MAAM,mCAAmC,GAC/C,6BAA6B,CAAC,KAAK,CAAC;IACnC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EACV,8EAA8E;IAC/E,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,eAAe,EAAE,EAAE;IACnB,eAAe,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;CAC/C,CAAC,CAAC;AAEJ,eAAe,mCAAmC,CAAC"}

package/dist/client/integrations.runtime-client.js

@@ -0,0 +1,41 @@
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import { INTEGRATION_CATALOG_ID, INTEGRATION_CATALOG_KIND } from "../catalog/integration-catalog.kind.js";
+import { getIntegrationProviderCatalogEntry, listIntegrationProviderCatalog } from "../catalog/queries.js";
+class RuntimeIntegrationsClient extends BaseRuntimeClient {
+    providers;
+    constructor(descriptor = {
+        id: 'integrations',
+        kind: 'runtime/client'
+    }, context, runtime) {
+        super(descriptor, context, runtime);
+        this.providers = {
+            list: (options = {}) => this.listProviders(options),
+            get: (id) => this.getProvider(id)
+        };
+    }
+    catalogUnavailable() {
+        return {
+            list: async (options = {}) => listIntegrationProviderCatalog(this.runtime, options),
+            get: async (id) => getIntegrationProviderCatalogEntry(this.runtime, id)
+        };
+    }
+    async catalog() {
+        if (this.runtime.hasKind(INTEGRATION_CATALOG_KIND)) {
+            const capability = await this.runtime
+                .query(INTEGRATION_CATALOG_KIND)
+                .withId(INTEGRATION_CATALOG_ID)
+                .first();
+            if (capability)
+                return capability;
+        }
+        return this.catalogUnavailable();
+    }
+    async listProviders(options) {
+        return (await this.catalog()).list(options);
+    }
+    async getProvider(id) {
+        return (await this.catalog()).get(id);
+    }
+}
+export default RuntimeIntegrationsClient;
+//# sourceMappingURL=integrations.runtime-client.js.map

package/dist/client/integrations.runtime-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.runtime-client.js","sourceRoot":"","sources":["../../src/client/integrations.runtime-client.ts"],"names":[],"mappings":"AACA,OAAO,EACN,iBAAiB,EAGjB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACN,sBAAsB,EACtB,wBAAwB,EAGxB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AAgB3G,MAAM,yBAA0B,SAAQ,iBAA+B;IAC7D,SAAS,CAA6B;IAE/C,YACC,aAAsC;QACrC,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,gBAAgB;KACtB,EACD,OAAmC,EACnC,OAAsB;QAEtB,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG;YAChB,IAAI,EAAE,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YACnD,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;SACjC,CAAC;IACH,CAAC;IAES,kBAAkB;QAC3B,OAAO;YACN,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;YACnF,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;SACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACpB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO;iBACnC,KAAK,CACL,wBAAwB,CACxB;iBACA,MAAM,CAAC,sBAAsB,CAAC;iBAC9B,KAAK,EAAE,CAAC;YACV,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,aAAa,CAC1B,OAA8C;QAE9C,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,EAAU;QACnC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;CACD;AAED,eAAe,yBAAyB,CAAC"}

package/dist/docs/integrations.docs.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { DocsTopicDescriptor } from '@vibesdotdev/docs-contracts';
+declare const descriptor: DocsTopicDescriptor;
+export default descriptor;
+//# sourceMappingURL=integrations.docs.descriptor.d.ts.map

package/dist/docs/integrations.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.docs.descriptor.d.ts","sourceRoot":"","sources":["../../src/docs/integrations.docs.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAgCvE,QAAA,MAAM,UAAU,EAAE,mBAWjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/docs/integrations.docs.descriptor.js

@@ -0,0 +1,43 @@
+const integrationsMarkdown = [
+    "---",
+    "title: Integrations",
+    "summary: Third-party integration providers.",
+    "order: 11",
+    "---",
+    "",
+    "# Integrations",
+    "",
+    "This package owns the `integration/provider` and `integration/connection` runtime contracts. Connector packages provide implementations through descriptors and lazy loaders.",
+    "",
+    "## Credentials and scope",
+    "",
+    "Provider credential references resolve through `runtime.resolveCredential`; managed credential metadata and writes use the secrets runtime client. A setting-backed credential must be a kernel `CredentialReference`, never a raw value. Managed writes require an explicit scope and scope ID. Organization access uses the current request organization and descriptor scope; absent identity refuses with `PERMISSION_DENIED` / `integration-organization-required`. Host references are read-only.",
+    "",
+    "Selected accounts use `connectionId`. A provider authorizes that exact ID for the authenticated user or verified delegation. No latest-row or cross-organization fallback is allowed.",
+    "",
+    "## Connection behavior",
+    "",
+    "Providers declare authentication mode and connection metadata. A composed `integration/connection` descriptor and resolved implementation are required before the runtime can connect; catalog presence or metadata alone is not authority. The implementation checks host authorization and returns an accepted result or a typed refusal with its code and reason.",
+    "",
+    "## Defaults",
+    "",
+    "The generic core ships no vendor defaults. A host declares the provider services it seeds through an explicitly scoped `integration/provider-defaults` descriptor. Seed and cleanup use that same declaration.",
+    "",
+    "## Entry points",
+    "",
+    "Use `@vibesdotdev/integrations/kinds/integration` to extend the provider base. The root exposes runtime contracts, not the concrete base class. AI provider aggregation belongs to `@vibesdotdev/integrations-connectors/ai/plugin`; cloud hosts compose that owner's `./ai/cloud.plugin`.",
+].join('\n');
+const descriptor = {
+    kind: 'docs/topic',
+    id: "integrations",
+    title: "Integrations",
+    summary: "Runtime-owned contracts for third-party integration providers.",
+    body: { type: 'markdown', sourceType: 'raw', source: integrationsMarkdown },
+    order: 11,
+    tags: ["integrations", "overview"],
+    surfaces: ["web", "in-app"],
+    hardware: ["consumer", "cloud"],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=integrations.docs.descriptor.js.map

package/dist/docs/integrations.docs.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.docs.descriptor.js","sourceRoot":"","sources":["../../src/docs/integrations.docs.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,oBAAoB,GAAG;IAC5B,KAAK;IACL,qBAAqB;IACrB,6CAA6C;IAC7C,WAAW;IACX,KAAK;IACL,EAAE;IACF,gBAAgB;IAChB,EAAE;IACF,+KAA+K;IAC/K,EAAE;IACF,0BAA0B;IAC1B,EAAE;IACF,yeAAye;IACze,EAAE;IACF,uLAAuL;IACvL,EAAE;IACF,wBAAwB;IACxB,EAAE;IACF,sWAAsW;IACtW,EAAE;IACF,aAAa;IACb,EAAE;IACF,gNAAgN;IAChN,EAAE;IACF,iBAAiB;IACjB,EAAE;IACF,4RAA4R;CAC5R,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,GAAwB;IACvC,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,gEAAgE;IACzE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE;IAC3E,KAAK,EAAE,EAAE;IACT,IAAI,EAAE,CAAC,cAAc,EAAC,UAAU,CAAC;IACjC,QAAQ,EAAE,CAAC,KAAK,EAAC,QAAQ,CAAC;IAC1B,QAAQ,EAAE,CAAC,UAAU,EAAC,OAAO,CAAC;IAC9B,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/docs/integrations.providers.docs.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { DocsTopicDescriptor } from '@vibesdotdev/docs-contracts';
+declare const descriptor: DocsTopicDescriptor;
+export default descriptor;
+//# sourceMappingURL=integrations.providers.docs.descriptor.d.ts.map

package/dist/docs/integrations.providers.docs.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.providers.docs.descriptor.d.ts","sourceRoot":"","sources":["../../src/docs/integrations.providers.docs.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAsBvE,QAAA,MAAM,UAAU,EAAE,mBAUjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/docs/integrations.providers.docs.descriptor.js

@@ -0,0 +1,32 @@
+const body = [
+    "# Integration provider catalog",
+    "",
+    "The integrations client discovers local and runtime-mounted `integration/provider` descriptors without resolving provider implementations or credentials.",
+    "",
+    "```ts",
+    "import { getVibesIntegrationsClient } from '@vibesdotdev/integrations/client';",
+    "",
+    "const integrations = await getVibesIntegrationsClient(runtime);",
+    "const providers = await integrations.providers.list({ category: 'crm' });",
+    "const google = await integrations.providers.get('integration.google');",
+    "```",
+    "",
+    "Compose `./plugin` with logging and storage. Add `./consumer.plugin` in a consumer daemon and `./browser.plugin` in its renderer.",
+    "",
+    "Renderer projection keeps labels, availability, and declared connection metadata while removing configuration, credential references, OAuth endpoints, base URLs, and operation metadata. Before mount or after disconnect the browser catalog refuses with `UNAVAILABLE` / `integration-catalog-renderer-capability-unavailable`.",
+    "",
+    "Catalog presence is not connection state or authority. A Connect action requires a connectable declaration and a resolved `integration/connection` runtime implementation. Provider ID, category, or credential shape does not admit a connection. The implementation retains host authorization and returns an accepted result or a typed refusal with code and reason.",
+].join('\n');
+const descriptor = {
+    kind: 'docs/topic',
+    id: "integrations.providers",
+    title: "Integration Providers",
+    summary: "Discover provider descriptors and resolve connection behavior through the runtime.",
+    body: { type: 'markdown', sourceType: 'raw', source: body },
+    tags: ["integrations", "providers", "runtime-client"],
+    surfaces: ["cli", "web", "in-app"],
+    hardware: ["consumer", "cloud"],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=integrations.providers.docs.descriptor.js.map

package/dist/docs/integrations.providers.docs.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.providers.docs.descriptor.js","sourceRoot":"","sources":["../../src/docs/integrations.providers.docs.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAAG;IACZ,gCAAgC;IAChC,EAAE;IACF,2JAA2J;IAC3J,EAAE;IACF,OAAO;IACP,gFAAgF;IAChF,EAAE;IACF,iEAAiE;IACjE,2EAA2E;IAC3E,wEAAwE;IACxE,KAAK;IACL,EAAE;IACF,mIAAmI;IACnI,EAAE;IACF,oUAAoU;IACpU,EAAE;IACF,0WAA0W;CAC1W,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,GAAwB;IACvC,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,wBAAwB;IAC5B,KAAK,EAAE,uBAAuB;IAC9B,OAAO,EAAE,oFAAoF;IAC7F,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;IAC3D,IAAI,EAAE,CAAC,cAAc,EAAC,WAAW,EAAC,gBAAgB,CAAC;IACnD,QAAQ,EAAE,CAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,CAAC;IAChC,QAAQ,EAAE,CAAC,UAAU,EAAC,OAAO,CAAC;IAC9B,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/http/fetch-with-retry.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Shared fetch retry/backoff for vendor integration clients.
+ *
+ * Third-party APIs (Notion, Linear, …) rate-limit aggressively and emit
+ * transient 5xx/network errors. Without backoff a burst hard-fails the whole
+ * operation. This wraps a single fetch with bounded retries:
+ *   - honours `Retry-After` (seconds or HTTP-date) on 429/503,
+ *   - exponential backoff + jitter on other retryable statuses and network
+ *     errors,
+ *   - returns the final Response on success OR after the last attempt (so the
+ *     caller's own error handling still runs on a terminal 4xx/5xx).
+ *
+ * Workerd-safe. The bounded in-request backoff waits through the handed
+ * runtime's lifecycle (`runtime.lifecycle.delay`), aborting with the caller's
+ * signal; it is not a schedule.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { type RetryOptions } from '../schemas/http-retry.ts';
+export type { RetryOptions } from '../schemas/http-retry.ts';
+export type FetchLike = (url: string, init?: RequestInit) => Promise<Response>;
+/** Parse a `Retry-After` header (delta-seconds or HTTP-date) into ms, or null. */
+export declare function parseRetryAfter(headerValue: string | null, nowMs: number): number | null;
+/**
+ * Fetch `url` via `fetchFn`, retrying transient failures. See {@link RetryOptions}.
+ */
+export declare function fetchWithRetry(runtime: Pick<VibesRuntime, 'lifecycle'>, fetchFn: FetchLike, url: string, init?: RequestInit, opts?: RetryOptions): Promise<Response>;
+//# sourceMappingURL=fetch-with-retry.d.ts.map

package/dist/http/fetch-with-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-with-retry.d.ts","sourceRoot":"","sources":["../../src/http/fetch-with-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAA2B,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEjF,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAQ/E,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxF;AAED;;GAEG;AACH,wBAAsB,cAAc,CACnC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EACxC,OAAO,EAAE,SAAS,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,EAClB,IAAI,GAAE,YAAiB,GACrB,OAAO,CAAC,QAAQ,CAAC,CAqCnB"}

package/dist/http/fetch-with-retry.js

@@ -0,0 +1,76 @@
+/**
+ * Shared fetch retry/backoff for vendor integration clients.
+ *
+ * Third-party APIs (Notion, Linear, …) rate-limit aggressively and emit
+ * transient 5xx/network errors. Without backoff a burst hard-fails the whole
+ * operation. This wraps a single fetch with bounded retries:
+ *   - honours `Retry-After` (seconds or HTTP-date) on 429/503,
+ *   - exponential backoff + jitter on other retryable statuses and network
+ *     errors,
+ *   - returns the final Response on success OR after the last attempt (so the
+ *     caller's own error handling still runs on a terminal 4xx/5xx).
+ *
+ * Workerd-safe. The bounded in-request backoff waits through the handed
+ * runtime's lifecycle (`runtime.lifecycle.delay`), aborting with the caller's
+ * signal; it is not a schedule.
+ */
+import { CapabilityError, settle } from '@vibesdotdev/kernel';
+import { RetryOptionsSchema } from "../schemas/http-retry.js";
+import { parseIntegrationBoundary } from "../schemas/boundary.js";
+function backoffDelay(attempt, base, max) {
+    const exp = Math.min(max, base * 2 ** (attempt - 1));
+    // Full jitter in [exp/2, exp] to avoid thundering-herd alignment.
+    return Math.round(exp * (0.5 + Math.random() * 0.5));
+}
+/** Parse a `Retry-After` header (delta-seconds or HTTP-date) into ms, or null. */
+export function parseRetryAfter(headerValue, nowMs) {
+    if (!headerValue)
+        return null;
+    const trimmed = headerValue.trim();
+    if (/^\d+$/.test(trimmed))
+        return Number(trimmed) * 1000;
+    const dateMs = Date.parse(trimmed);
+    if (!Number.isNaN(dateMs))
+        return Math.max(0, dateMs - nowMs);
+    return null;
+}
+/**
+ * Fetch `url` via `fetchFn`, retrying transient failures. See {@link RetryOptions}.
+ */
+export async function fetchWithRetry(runtime, fetchFn, url, init, opts = {}) {
+    const options = parseIntegrationBoundary(RetryOptionsSchema, opts);
+    const { maxAttempts, baseDelayMs: base, maxDelayMs: maxDelay, retryStatuses } = options;
+    const signal = init?.signal ?? undefined;
+    const sleep = (ms) => runtime.lifecycle.delay(ms, signal);
+    for (let attempt = 1;; attempt++) {
+        signal?.throwIfAborted();
+        const result = await settle(() => fetchFn(url, init));
+        if (!result.ok) {
+            signal?.throwIfAborted();
+            if (result.cause instanceof CapabilityError && !result.cause.retryable)
+                throw result.cause;
+            if (attempt === maxAttempts)
+                throw result.cause;
+            await sleep(backoffDelay(attempt, base, maxDelay));
+            continue;
+        }
+        const response = result.value;
+        if (attempt === maxAttempts || !retryStatuses.includes(response.status)) {
+            return response;
+        }
+        // Retryable status with attempts remaining. Honour Retry-After when present.
+        const retryAfter = parseRetryAfter(response.headers.get('retry-after'), Date.now());
+        const wait = retryAfter !== null ? Math.min(retryAfter, maxDelay) : backoffDelay(attempt, base, maxDelay);
+        // Release the prior response before starting another request.
+        try {
+            await response.body?.cancel();
+        }
+        catch (cause) {
+            throw new CapabilityError('HTTP response cleanup failed.', 'UNAVAILABLE', {
+                reason: 'integration-http-body-cleanup-failed', retryable: false, cause
+            });
+        }
+        await sleep(wait);
+    }
+}
+//# sourceMappingURL=fetch-with-retry.js.map

package/dist/http/fetch-with-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-with-retry.js","sourceRoot":"","sources":["../../src/http/fetch-with-retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,EAAqB,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAqB,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAKlE,SAAS,YAAY,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD,kEAAkE;IAClE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,WAA0B,EAAE,KAAa;IACxE,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,OAAwC,EACxC,OAAkB,EAClB,GAAW,EACX,IAAkB,EAClB,OAAqB,EAAE;IAEvB,MAAM,OAAO,GAAG,wBAAwB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IACxF,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC;IACzC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAElE,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QACnC,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,KAAK,YAAY,eAAe,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YAC3F,IAAI,OAAO,KAAK,WAAW;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YAChD,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnD,SAAS;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;QAE9B,IAAI,OAAO,KAAK,WAAW,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,OAAO,QAAQ,CAAC;QACjB,CAAC;QAED,6EAA6E;QAC7E,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GACT,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9F,8DAA8D;QAC9D,IAAI,CAAC;YACJ,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,aAAa,EAAE;gBACzE,MAAM,EAAE,sCAAsC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK;aACvE,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AAEF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,24 @@
+export { integrationsPlugin } from './integrations.plugin.ts';
+export * from './catalog/integration-catalog.kind.ts';
+export * from './catalog/integration-catalog.descriptor.ts';
+export * from './catalog/integration-catalog.exposure.ts';
+export * from './catalog/integration-catalog.http.ts';
+export * from './catalog/queries.ts';
+export { getVibesIntegrationsClient } from './client/index.ts';
+export type { IntegrationProviderCatalog, IntegrationProviderCatalogListOptions, IntegrationsClient } from './client/index.ts';
+export { integrationProviderKind } from './kinds/integration.kind.ts';
+export { IntegrationCategorySchema, IntegrationConnectionActorSchema, IntegrationConnectionSelectorSchema, IntegrationCredentialReferenceCandidatesSchema, IntegrationProviderDescriptorSchema, IntegrationProviderResolvedConfigurationSchema } from './schemas/integration-descriptor.ts';
+export type { IntegrationCategory, IntegrationConfig, IntegrationConfigValue, IntegrationConnectionActor, IntegrationConnectionSelector, IntegrationCredentialReferenceCandidates, IntegrationCredentialSource, IntegrationCredentialWriteMetadata, IntegrationOAuthAuthorization, IntegrationOAuthCompletion, IntegrationOAuthMetadata, IntegrationOAuthStart, IntegrationOperation, IntegrationOperationResult, IntegrationProviderDescriptor, IntegrationProviderDescriptorInput, IntegrationProviderImplementation, IntegrationProviderResolvedConfiguration } from './schemas/integration-descriptor.ts';
+export type { SystemSettingsReader } from './settings/context.ts';
+export { IntegrationAuthModeSchema, IntegrationConnectionMetadataSchema, IntegrationConnectionStatusSchema, IntegrationConnectRequestResultSchema, IntegrationConnectionRefusalSchema } from './status/integration-connection-status.ts';
+export type { IntegrationAuthMode, IntegrationConnectRequestResult, IntegrationConnectionMetadata, IntegrationConnectionRefusal, IntegrationConnectionStatus } from './status/integration-connection-status.ts';
+export { INTEGRATION_CONNECTION_KIND, IntegrationConnectionDescriptorSchema, integrationConnectionKind } from './status/integration-connection.kind.ts';
+export type { IntegrationConnectionDescriptor } from './status/integration-connection.kind.ts';
+export type { IntegrationConnectionCapability } from './status/integration-connection.capability.ts';
+export { integrationConnectionStatus, resolveIntegrationConnection, resolveIntegrationConnectionMetadata } from './status/integration-connection.queries.ts';
+export { isIntegrationProviderConnectable } from './status/integration-connect.availability.ts';
+export { attachSecretToIntegrationService, listIntegrationServiceSecrets, resolveIntegrationServiceSecret, sendIntegrationAuthenticatedRequest } from './server/integration-secrets.ts';
+export type { AttachIntegrationSecretOptions, IntegrationSecretClient, IntegrationSecretReference, ListIntegrationServiceSecretsOptions, ResolveIntegrationSecretOptions } from './server/integration-secrets.ts';
+export { integrationProviderDefaultIds, seedIntegrationProviderServices, cleanIntegrationProviderServices, INTEGRATION_PROVIDER_DEFAULTS_ID, INTEGRATION_PROVIDER_DEFAULTS_KIND, integrationProviderDefaultsKind, DeleteIntegrationProviderServicesInputSchema, IntegrationProviderDefaultDefinitionSchema, IntegrationProviderDefaultScopeSchema, IntegrationProviderDefaultServiceInputSchema, IntegrationProviderDefaultsDescriptorSchema, IntegrationProviderDefaultsStoreSchema } from './server/system-defaults.ts';
+export type { DeleteIntegrationProviderServicesInput, IntegrationProviderDefaultConfig, IntegrationProviderDefaultDefinition, IntegrationProviderDefaultScope, IntegrationProviderDefaultServiceInput, IntegrationProviderDefaultsDescriptor, IntegrationProviderDefaultsStore } from './server/system-defaults.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EACX,0BAA0B,EAC1B,qCAAqC,EACrC,kBAAkB,EAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EACN,yBAAyB,EACzB,gCAAgC,EAChC,mCAAmC,EACnC,8CAA8C,EAC9C,mCAAmC,EACnC,8CAA8C,EAC9C,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACX,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAC7B,wCAAwC,EACxC,2BAA2B,EAC3B,kCAAkC,EAClC,6BAA6B,EAC7B,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,6BAA6B,EAC7B,kCAAkC,EAClC,iCAAiC,EACjC,wCAAwC,EACxC,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EACN,yBAAyB,EACzB,mCAAmC,EACnC,iCAAiC,EACjC,qCAAqC,EACrC,kCAAkC,EAClC,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACX,mBAAmB,EACnB,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC5B,2BAA2B,EAC3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACN,2BAA2B,EAC3B,qCAAqC,EACrC,yBAAyB,EACzB,MAAM,yCAAyC,CAAC;AACjD,YAAY,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC/F,YAAY,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AACrG,OAAO,EACN,2BAA2B,EAC3B,4BAA4B,EAC5B,oCAAoC,EACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAEhG,OAAO,EACN,gCAAgC,EAChC,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACX,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,oCAAoC,EACpC,+BAA+B,EAC/B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,6BAA6B,EAC7B,+BAA+B,EAC/B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,+BAA+B,EAC/B,4CAA4C,EAC5C,0CAA0C,EAC1C,qCAAqC,EACrC,4CAA4C,EAC5C,2CAA2C,EAC3C,sCAAsC,EACtC,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACX,sCAAsC,EACtC,gCAAgC,EAChC,oCAAoC,EACpC,+BAA+B,EAC/B,sCAAsC,EACtC,qCAAqC,EACrC,gCAAgC,EAChC,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -0,0 +1,16 @@
+export { integrationsPlugin } from "./integrations.plugin.js";
+export * from "./catalog/integration-catalog.kind.js";
+export * from "./catalog/integration-catalog.descriptor.js";
+export * from "./catalog/integration-catalog.exposure.js";
+export * from "./catalog/integration-catalog.http.js";
+export * from "./catalog/queries.js";
+export { getVibesIntegrationsClient } from "./client/index.js";
+export { integrationProviderKind } from "./kinds/integration.kind.js";
+export { IntegrationCategorySchema, IntegrationConnectionActorSchema, IntegrationConnectionSelectorSchema, IntegrationCredentialReferenceCandidatesSchema, IntegrationProviderDescriptorSchema, IntegrationProviderResolvedConfigurationSchema } from "./schemas/integration-descriptor.js";
+export { IntegrationAuthModeSchema, IntegrationConnectionMetadataSchema, IntegrationConnectionStatusSchema, IntegrationConnectRequestResultSchema, IntegrationConnectionRefusalSchema } from "./status/integration-connection-status.js";
+export { INTEGRATION_CONNECTION_KIND, IntegrationConnectionDescriptorSchema, integrationConnectionKind } from "./status/integration-connection.kind.js";
+export { integrationConnectionStatus, resolveIntegrationConnection, resolveIntegrationConnectionMetadata } from "./status/integration-connection.queries.js";
+export { isIntegrationProviderConnectable } from "./status/integration-connect.availability.js";
+export { attachSecretToIntegrationService, listIntegrationServiceSecrets, resolveIntegrationServiceSecret, sendIntegrationAuthenticatedRequest } from "./server/integration-secrets.js";
+export { integrationProviderDefaultIds, seedIntegrationProviderServices, cleanIntegrationProviderServices, INTEGRATION_PROVIDER_DEFAULTS_ID, INTEGRATION_PROVIDER_DEFAULTS_KIND, integrationProviderDefaultsKind, DeleteIntegrationProviderServicesInputSchema, IntegrationProviderDefaultDefinitionSchema, IntegrationProviderDefaultScopeSchema, IntegrationProviderDefaultServiceInputSchema, IntegrationProviderDefaultsDescriptorSchema, IntegrationProviderDefaultsStoreSchema } from "./server/system-defaults.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,sBAAsB,CAAC;AACrC,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAO/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EACN,yBAAyB,EACzB,gCAAgC,EAChC,mCAAmC,EACnC,8CAA8C,EAC9C,mCAAmC,EACnC,8CAA8C,EAC9C,MAAM,qCAAqC,CAAC;AAuB7C,OAAO,EACN,yBAAyB,EACzB,mCAAmC,EACnC,iCAAiC,EACjC,qCAAqC,EACrC,kCAAkC,EAClC,MAAM,2CAA2C,CAAC;AAQnD,OAAO,EACN,2BAA2B,EAC3B,qCAAqC,EACrC,yBAAyB,EACzB,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EACN,2BAA2B,EAC3B,4BAA4B,EAC5B,oCAAoC,EACpC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAEhG,OAAO,EACN,gCAAgC,EAChC,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,MAAM,iCAAiC,CAAC;AAQzC,OAAO,EACN,6BAA6B,EAC7B,+BAA+B,EAC/B,gCAAgC,EAChC,gCAAgC,EAChC,kCAAkC,EAClC,+BAA+B,EAC/B,4CAA4C,EAC5C,0CAA0C,EAC1C,qCAAqC,EACrC,4CAA4C,EAC5C,2CAA2C,EAC3C,sCAAsC,EACtC,MAAM,6BAA6B,CAAC"}

package/dist/integrations.browser.plugin.d.ts

@@ -0,0 +1,11 @@
+/** Browser-safe integrations composition for renderer catalog surfaces. */
+/**
+ * Registers the renderer-facing catalog and connection contracts and the
+ * runtime client, without provider implementations. Provider browser plugins
+ * may declare and lazily load their own connection behavior into this runtime.
+ * Native hosts use the mounted catalog for provider metadata; connection
+ * implementations remain responsible for host authorization.
+ */
+export declare const integrationsBrowserPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default integrationsBrowserPlugin;
+//# sourceMappingURL=integrations.browser.plugin.d.ts.map

package/dist/integrations.browser.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.browser.plugin.d.ts","sourceRoot":"","sources":["../src/integrations.browser.plugin.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAQ3E;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,6CAYpC,CAAC;AAEH,eAAe,yBAAyB,CAAC"}

package/dist/integrations.browser.plugin.js

@@ -0,0 +1,26 @@
+/** Browser-safe integrations composition for renderer catalog surfaces. */
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel/factory';
+import integrationsRuntimeClientDescriptor from "./client/integrations.runtime-client.descriptor.js";
+import integrationCatalogDescriptor from "./catalog/integration-catalog.descriptor.js";
+import { integrationCatalogKind } from "./catalog/integration-catalog.kind.js";
+import { integrationConnectionKind } from "./status/integration-connection.kind.js";
+/**
+ * Registers the renderer-facing catalog and connection contracts and the
+ * runtime client, without provider implementations. Provider browser plugins
+ * may declare and lazily load their own connection behavior into this runtime.
+ * Native hosts use the mounted catalog for provider metadata; connection
+ * implementations remain responsible for host authorization.
+ */
+export const integrationsBrowserPlugin = createRuntimePlugin({
+    id: 'integrations',
+    name: 'Integrations (Browser)',
+    description: 'Browser client for mounted integration catalog and provider connection capabilities',
+    dependencies: ['runtime-client'],
+    kinds: [integrationCatalogKind, integrationConnectionKind],
+    descriptors: [integrationCatalogDescriptor, integrationsRuntimeClientDescriptor],
+    loaders: [
+        loader('integrations', { kind: 'runtime/client', scope: 'browser' }, () => import("./client/integrations.runtime-client.browser.js"))
+    ]
+});
+export default integrationsBrowserPlugin;
+//# sourceMappingURL=integrations.browser.plugin.js.map

package/dist/integrations.browser.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.browser.plugin.js","sourceRoot":"","sources":["../src/integrations.browser.plugin.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,4BAA4B,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEpF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;IAC5D,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EAAE,qFAAqF;IAClG,YAAY,EAAE,CAAC,gBAAgB,CAAC;IAChC,KAAK,EAAE,CAAC,sBAAsB,EAAE,yBAAyB,CAAC;IAC1D,WAAW,EAAE,CAAC,4BAA4B,EAAE,mCAAmC,CAAC;IAChF,OAAO,EAAE;QACR,MAAM,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CACzE,MAAM,CAAC,iDAAiD,CAAC,CACzD;KACD;CACD,CAAC,CAAC;AAEH,eAAe,yBAAyB,CAAC"}

package/dist/integrations.consumer.plugin.d.ts

@@ -0,0 +1,3 @@
+export declare const integrationsConsumerPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default integrationsConsumerPlugin;
+//# sourceMappingURL=integrations.consumer.plugin.d.ts.map

package/dist/integrations.consumer.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.consumer.plugin.d.ts","sourceRoot":"","sources":["../src/integrations.consumer.plugin.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,0BAA0B,6CAQrC,CAAC;AACH,eAAe,0BAA0B,CAAC"}

package/dist/integrations.consumer.plugin.js

@@ -0,0 +1,12 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel/factory';
+import { INTEGRATION_CATALOG_ID, INTEGRATION_CATALOG_KIND } from "./catalog/integration-catalog.kind.js";
+export const integrationsConsumerPlugin = createRuntimePlugin({
+    id: 'integrations-consumer',
+    name: 'Integrations Consumer',
+    dependencies: ['integrations'],
+    loaders: [
+        loader(INTEGRATION_CATALOG_ID, { kind: INTEGRATION_CATALOG_KIND, scope: 'consumer.worker' }, () => import("./catalog/integration-catalog.capability.js"))
+    ]
+});
+export default integrationsConsumerPlugin;
+//# sourceMappingURL=integrations.consumer.plugin.js.map

package/dist/integrations.consumer.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.consumer.plugin.js","sourceRoot":"","sources":["../src/integrations.consumer.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AAEzG,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;IAC7D,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,uBAAuB;IAC7B,YAAY,EAAE,CAAC,cAAc,CAAC;IAC9B,OAAO,EAAE;QACR,MAAM,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAC1F,GAAG,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC;KAC7D;CACD,CAAC,CAAC;AACH,eAAe,0BAA0B,CAAC"}

package/dist/integrations.plugin.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Integrations Plugin
+ *
+ * Registers the integration/provider runtime kind and makes this package
+ * a proper runtime plugin following the runtime-first modules pattern.
+ */
+import { type RuntimePlugin } from '@vibesdotdev/kernel/factory';
+export declare const integrationsPlugin: RuntimePlugin;
+export default integrationsPlugin;
+//# sourceMappingURL=integrations.plugin.d.ts.map

package/dist/integrations.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.plugin.d.ts","sourceRoot":"","sources":["../src/integrations.plugin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAA+B,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAuB9F,eAAO,MAAM,kBAAkB,EAAE,aA0C/B,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/dist/integrations.plugin.js

@@ -0,0 +1,67 @@
+/**
+ * Integrations Plugin
+ *
+ * Registers the integration/provider runtime kind and makes this package
+ * a proper runtime plugin following the runtime-first modules pattern.
+ */
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel/factory';
+import integrationsRuntimeClientDescriptor from "./client/integrations.runtime-client.descriptor.js";
+import integrationCatalogDescriptor from "./catalog/integration-catalog.descriptor.js";
+import { integrationCatalogRemoteExposure } from "./catalog/integration-catalog.exposure.js";
+import { INTEGRATION_CATALOG_ID, INTEGRATION_CATALOG_KIND, integrationCatalogKind } from "./catalog/integration-catalog.kind.js";
+// The `integrations` section root. It used to sit in the GitHub vendor pack,
+// where nothing registered it — and where it would have made the whole
+// Integrations section disappear for any app that composes Stripe but not
+// GitHub. Its children (`integrations.providers` here, `integrations.github`,
+// `integrations.stripe-billing`) all declare `parent: 'integrations'`, so the
+// root belongs to the package that owns the `integration/provider` kind.
+import integrationsDocsDescriptor from "./docs/integrations.docs.descriptor.js";
+import integrationsProvidersDocsDescriptor from "./docs/integrations.providers.docs.descriptor.js";
+import { integrationProviderKind } from "./kinds/integration.kind.js";
+import { integrationConnectionKind } from "./status/integration-connection.kind.js";
+import { integrationProviderDefaultsKind } from "./server/defaults/system-defaults.kind.js";
+import systemSettingsReaderContextDescriptor from "./settings/system-settings-reader.context.descriptor.js";
+import integrationStoreContextDescriptor from "./kinds/integration-store.context.descriptor.js";
+export const integrationsPlugin = createRuntimePlugin({
+    id: 'integrations',
+    name: 'Integrations',
+    description: 'Third-party service integration layer and provider catalog',
+    // `'runtime'` is not a registered plugin — the runtime API is the
+    // host, not a plugin. Real hard deps are logging (for getLogger) and
+    // storage (the integration store kind delegates to a storage adapter for
+    // credentials). `runtime-client` is deliberately not a hard plugin dep:
+    // provider-only runtimes can register this plugin without composing a
+    // consumer client. The runtime defers the descriptor/loader registrations
+    // until that kind exists, and getVibesIntegrationsClient(runtime) installs the
+    // canonical runtime-client plugin when a consumer actually asks for it.
+    dependencies: ['logging', 'storage'],
+    kinds: [integrationProviderKind, integrationCatalogKind, integrationConnectionKind, integrationProviderDefaultsKind],
+    // integration/provider declares `contexts: ['system/settings-reader']`
+    // in kinds/integration.kind.ts. Without a registered descriptor for
+    // that context, runtime.buildContext throws and every consumer route
+    // that resolves an integration provider 500s (e.g. casework-web's
+    // /api/integrations/[id]/connect). Register the descriptor here so
+    // the kind owner is also the context owner. Implementations are
+    // optional — BaseIntegrationProvider falls back to
+    // createUnavailableSystemSettingsReader() when no impl is wired.
+    descriptors: [
+        systemSettingsReaderContextDescriptor,
+        integrationStoreContextDescriptor,
+        integrationCatalogDescriptor,
+        integrationsRuntimeClientDescriptor,
+        integrationsDocsDescriptor,
+        integrationsProvidersDocsDescriptor
+    ],
+    loaders: [
+        loader('integrations', { kind: 'runtime/client' }, () => import("./client/integrations.runtime-client.js"))
+    ],
+    remoteExposures: [
+        {
+            kindId: INTEGRATION_CATALOG_KIND,
+            assetId: INTEGRATION_CATALOG_ID,
+            exposure: integrationCatalogRemoteExposure
+        }
+    ]
+});
+export default integrationsPlugin;
+//# sourceMappingURL=integrations.plugin.js.map

package/dist/integrations.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.plugin.js","sourceRoot":"","sources":["../src/integrations.plugin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAsB,MAAM,6BAA6B,CAAC;AAC9F,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,4BAA4B,MAAM,6CAA6C,CAAC;AACvF,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EACN,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,MAAM,uCAAuC,CAAC;AAC/C,6EAA6E;AAC7E,uEAAuE;AACvE,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,yEAAyE;AACzE,OAAO,0BAA0B,MAAM,wCAAwC,CAAC;AAChF,OAAO,mCAAmC,MAAM,kDAAkD,CAAC;AACnG,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,qCAAqC,MAAM,yDAAyD,CAAC;AAC5G,OAAO,iCAAiC,MAAM,iDAAiD,CAAC;AAEhG,MAAM,CAAC,MAAM,kBAAkB,GAAkB,mBAAmB,CAAC;IACpE,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,4DAA4D;IACzE,kEAAkE;IAClE,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,sEAAsE;IACtE,0EAA0E;IAC1E,+EAA+E;IAC/E,wEAAwE;IACxE,YAAY,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IACpC,KAAK,EAAE,CAAC,uBAAuB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,+BAA+B,CAAC;IACpH,uEAAuE;IACvE,oEAAoE;IACpE,qEAAqE;IACrE,kEAAkE;IAClE,mEAAmE;IACnE,gEAAgE;IAChE,mDAAmD;IACnD,iEAAiE;IACjE,WAAW,EAAE;QACZ,qCAAqC;QACrC,iCAAiC;QACjC,4BAA4B;QAC5B,mCAAmC;QACnC,0BAA0B;QAC1B,mCAAmC;KACnC;IACD,OAAO,EAAE;QACR,MAAM,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,CACvD,MAAM,CAAC,yCAAyC,CAAC,CACjD;KACD;IACD,eAAe,EAAE;QAChB;YACC,MAAM,EAAE,wBAAwB;YAChC,OAAO,EAAE,sBAAsB;YAC/B,QAAQ,EAAE,gCAAgC;SAC1C;KACD;CACD,CAAC,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/dist/kinds/integration-store.context.descriptor.d.ts

@@ -0,0 +1,31 @@
+export declare const integrationStoreContextId = "integration/store";
+declare const _default: {
+    id: string;
+    kind: "context";
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    valueKind?: "service" | "data" | undefined;
+    valueSchema?: unknown;
+    config?: {
+        sources: ("literal" | "workspace" | "floor")[];
+        subset?: true | undefined;
+    } | undefined;
+};
+export default _default;
+//# sourceMappingURL=integration-store.context.descriptor.d.ts.map

package/dist/kinds/integration-store.context.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-store.context.descriptor.d.ts","sourceRoot":"","sources":["../../src/kinds/integration-store.context.descriptor.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAE7D,wBAKG"}

package/dist/kinds/integration-store.context.descriptor.js

@@ -0,0 +1,8 @@
+import { createContextDescriptor } from '@vibesdotdev/kernel/factory/context';
+export const integrationStoreContextId = 'integration/store';
+export default createContextDescriptor({
+    id: integrationStoreContextId,
+    name: 'Integration Store',
+    description: 'Runtime-local host adapter for integration configuration and credential persistence.'
+});
+//# sourceMappingURL=integration-store.context.descriptor.js.map

package/dist/kinds/integration-store.context.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-store.context.descriptor.js","sourceRoot":"","sources":["../../src/kinds/integration-store.context.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;AAE7D,eAAe,uBAAuB,CAAC;IACtC,EAAE,EAAE,yBAAyB;IAC7B,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACV,sFAAsF;CACvF,CAAC,CAAC"}