@vibesdotdev/integrations 0.0.0-stage → 1.0.0-rc.3

package/dist/server/schemas/integration-secrets.js

@@ -0,0 +1,72 @@
+import * as z from 'zod/v4';
+import { CredentialReferenceSchema } from '@vibesdotdev/kernel/credentials';
+import { managedSecretScopeSchema } from '@vibesdotdev/secrets/schemas';
+export const IntegrationSecretResourceTypeSchema = z.literal('integration');
+export const AttachSecretToResourceInputSchema = z.object({
+    secretId: z.string().min(1),
+    resourceType: IntegrationSecretResourceTypeSchema,
+    resourceId: z.string().min(1),
+    attachedBy: z.string().min(1),
+    purpose: z.string().nullable().optional()
+}).strict();
+export const ListSecretsForResourceInputSchema = z.object({
+    resourceType: IntegrationSecretResourceTypeSchema,
+    resourceId: z.string().min(1)
+}).strict();
+export const IntegrationSecretAssociationSchema = z.object({
+    secretId: z.string().min(1)
+}).strict();
+export const RecordSecretUsageInputSchema = z.object({
+    resourceType: IntegrationSecretResourceTypeSchema,
+    resourceId: z.string().min(1),
+    secretId: z.string().min(1)
+}).strict();
+/** Association metadata only. Credential values remain owned by secrets/store. */
+export const IntegrationSecretClientSchema = z.object({
+    attachSecretToResource: z.function({
+        input: [AttachSecretToResourceInputSchema],
+        output: z.promise(z.void())
+    }),
+    listSecretsForResource: z.function({
+        input: [ListSecretsForResourceInputSchema],
+        output: z.promise(z.array(IntegrationSecretAssociationSchema).readonly())
+    }),
+    recordSecretUsage: z.function({
+        input: [RecordSecretUsageInputSchema],
+        output: z.promise(z.void())
+    }).optional()
+}).strict();
+const RuntimeRefContractSchema = z.object({
+    resolveCredential: z.function(),
+    query: z.function()
+}).passthrough();
+const RuntimeRefSchema = z.custom((value) => RuntimeRefContractSchema.safeParse(value).success);
+export const AttachIntegrationSecretOptionsSchema = z.object({
+    runtime: RuntimeRefSchema,
+    client: IntegrationSecretClientSchema,
+    serviceId: z.string().min(1),
+    secretId: z.string().min(1),
+    attachedBy: z.string().min(1),
+    scope: managedSecretScopeSchema,
+    scopeId: z.string().trim().min(1),
+    purpose: z.string().nullable().optional()
+}).strict();
+export const ListIntegrationServiceSecretsOptionsSchema = z.object({
+    runtime: RuntimeRefSchema,
+    client: IntegrationSecretClientSchema,
+    serviceId: z.string().min(1),
+    scope: managedSecretScopeSchema,
+    scopeId: z.string().trim().min(1)
+}).strict();
+export const ResolveIntegrationSecretOptionsSchema = z.object({
+    runtime: RuntimeRefSchema,
+    client: IntegrationSecretClientSchema,
+    serviceId: z.string().min(1),
+    secretName: z.string().min(1).optional(),
+    providerType: z.string().min(1).optional(),
+    reference: CredentialReferenceSchema.optional(),
+    scope: managedSecretScopeSchema,
+    scopeId: z.string().trim().min(1),
+    recordUsage: z.boolean().default(false)
+}).strict();
+//# sourceMappingURL=integration-secrets.js.map

package/dist/server/schemas/integration-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-secrets.js","sourceRoot":"","sources":["../../../src/server/schemas/integration-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,yBAAyB,EAA4B,MAAM,iCAAiC,CAAC;AACtG,OAAO,EACN,wBAAwB,EAGxB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAG5E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,mCAAmC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,YAAY,EAAE,mCAAmC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC;AAQZ,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,YAAY,EAAE,mCAAmC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,kFAAkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,sBAAsB,EAAE,CAAC,CAAC,QAAQ,CAAC;QAClC,KAAK,EAAE,CAAC,iCAAiC,CAAC;QAC1C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KAC3B,CAAC;IACF,sBAAsB,EAAE,CAAC,CAAC,QAAQ,CAAC;QAClC,KAAK,EAAE,CAAC,iCAAiC,CAAC;QAC1C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,QAAQ,EAAE,CAAC;KACzE,CAAC;IACF,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC;QAC7B,KAAK,EAAE,CAAC,4BAA4B,CAAC;QACrC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KAC3B,CAAC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnB,CAAC,CAAC,WAAW,EAAE,CAAC;AACjB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAa,CAAC,KAAK,EAAE,EAAE,CACvD,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACjD,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO,EAAE,gBAAgB;IACzB,MAAM,EAAE,6BAA6B;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,wBAAwB;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC,MAAM,CAAC;IAClE,OAAO,EAAE,gBAAgB;IACzB,MAAM,EAAE,6BAA6B;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,wBAAwB;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,OAAO,EAAE,gBAAgB;IACzB,MAAM,EAAE,6BAA6B;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,wBAAwB;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/server/schemas/system-defaults.d.ts

@@ -0,0 +1,124 @@
+import * as z from 'zod/v4';
+import { IntegrationConfigSchema } from '../../schemas/integration-descriptor.ts';
+export type IntegrationProviderDefaultConfig = z.infer<typeof IntegrationConfigSchema>;
+export declare const INTEGRATION_PROVIDER_DEFAULTS_KIND: "integration/provider-defaults";
+export declare const INTEGRATION_PROVIDER_DEFAULTS_ID: "defaults";
+/** The scoped placement every seeded service row carries. */
+export declare const IntegrationProviderDefaultScopeSchema: z.ZodObject<{
+    scope: z.ZodEnum<{
+        user: "user";
+        platform: "platform";
+        project: "project";
+        org: "org";
+    }>;
+    scopeId: z.ZodString;
+    featureId: z.ZodString;
+    serviceKey: z.ZodString;
+}, z.core.$strip>;
+export type IntegrationProviderDefaultScope = z.infer<typeof IntegrationProviderDefaultScopeSchema>;
+/** One provider service a host declares for seeding. */
+export declare const IntegrationProviderDefaultDefinitionSchema: z.ZodObject<{
+    integrationId: z.ZodString;
+    provider: z.ZodString;
+    interfaceId: z.ZodDefault<z.ZodString>;
+    slug: z.ZodString;
+    label: z.ZodString;
+    config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    status: z.ZodDefault<z.ZodLiteral<"active">>;
+}, z.core.$strip>;
+export type IntegrationProviderDefaultDefinition = z.infer<typeof IntegrationProviderDefaultDefinitionSchema>;
+/**
+ * Open, schema-owned descriptor: a host composes one of these to declare
+ * which provider services its deployment seeds and cleans. The generic core
+ * ships no vendor selection of its own.
+ */
+export declare const IntegrationProviderDefaultsDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"integration/provider-defaults">;
+    scope: z.ZodObject<{
+        scope: z.ZodEnum<{
+            user: "user";
+            platform: "platform";
+            project: "project";
+            org: "org";
+        }>;
+        scopeId: z.ZodString;
+        featureId: z.ZodString;
+        serviceKey: z.ZodString;
+    }, z.core.$strip>;
+    definitions: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        integrationId: z.ZodString;
+        provider: z.ZodString;
+        interfaceId: z.ZodDefault<z.ZodString>;
+        slug: z.ZodString;
+        label: z.ZodString;
+        config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        status: z.ZodDefault<z.ZodLiteral<"active">>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type IntegrationProviderDefaultsDescriptor = z.infer<typeof IntegrationProviderDefaultsDescriptorSchema>;
+/** The store operation inputs the seeding owner performs. */
+export declare const IntegrationProviderDefaultServiceInputSchema: z.ZodObject<{
+    integrationId: z.ZodString;
+    provider: z.ZodString;
+    interfaceId: z.ZodDefault<z.ZodString>;
+    slug: z.ZodString;
+    label: z.ZodString;
+    config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    status: z.ZodDefault<z.ZodLiteral<"active">>;
+    scope: z.ZodEnum<{
+        user: "user";
+        platform: "platform";
+        project: "project";
+        org: "org";
+    }>;
+    scopeId: z.ZodString;
+    featureId: z.ZodString;
+    serviceKey: z.ZodString;
+}, z.core.$strip>;
+export type IntegrationProviderDefaultServiceInput = z.infer<typeof IntegrationProviderDefaultServiceInputSchema>;
+export declare const DeleteIntegrationProviderServicesInputSchema: z.ZodObject<{
+    scope: z.ZodEnum<{
+        user: "user";
+        platform: "platform";
+        project: "project";
+        org: "org";
+    }>;
+    scopeId: z.ZodString;
+    featureId: z.ZodString;
+    serviceKey: z.ZodString;
+    integrationIds: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type DeleteIntegrationProviderServicesInput = z.infer<typeof DeleteIntegrationProviderServicesInputSchema>;
+/** The store port the host supplies; seeding never opens a store itself. */
+export declare const IntegrationProviderDefaultsStoreSchema: z.ZodObject<{
+    upsertIntegrationProviderService: z.ZodCustom<(input: IntegrationProviderDefaultServiceInput) => Promise<void>, (input: IntegrationProviderDefaultServiceInput) => Promise<void>>;
+    deleteIntegrationProviderServices: z.ZodCustom<(input: DeleteIntegrationProviderServicesInput) => Promise<void>, (input: DeleteIntegrationProviderServicesInput) => Promise<void>>;
+}, z.core.$strip>;
+export type IntegrationProviderDefaultsStore = z.infer<typeof IntegrationProviderDefaultsStoreSchema>;
+//# sourceMappingURL=system-defaults.d.ts.map

package/dist/server/schemas/system-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-defaults.d.ts","sourceRoot":"","sources":["../../../src/server/schemas/system-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAGlF,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvF,eAAO,MAAM,kCAAkC,EAAG,+BAAwC,CAAC;AAC3F,eAAO,MAAM,gCAAgC,EAAG,UAAmB,CAAC;AAEpE,6DAA6D;AAC7D,eAAO,MAAM,qCAAqC;;;;;;;;;;iBAKhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qCAAqC,CAAC,CAAC;AAEpG,wDAAwD;AACxD,eAAO,MAAM,0CAA0C;;;;;;;;;;iBAWrD,CAAC;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAE9G;;;;GAIG;AACH,eAAO,MAAM,2CAA2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAItD,CAAC;AACH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAEhH,6DAA6D;AAC7D,eAAO,MAAM,4CAA4C;;;;;;;;;;;;;;;;;;;iBACsC,CAAC;AAChG,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAElH,eAAO,MAAM,4CAA4C;;;;;;;;;;;iBAGvD,CAAC;AACH,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4CAA4C,CAAC,CAAC;AAElH,4EAA4E;AAC5E,eAAO,MAAM,sCAAsC;0DACC,sCAAsC,KAAK,OAAO,CAAC,IAAI,CAAC,UAAxD,sCAAsC,KAAK,OAAO,CAAC,IAAI,CAAC;2DAGvD,sCAAsC,KAAK,OAAO,CAAC,IAAI,CAAC,UAAxD,sCAAsC,KAAK,OAAO,CAAC,IAAI,CAAC;iBAG3G,CAAC;AACH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sCAAsC,CAAC,CAAC"}

package/dist/server/schemas/system-defaults.js

@@ -0,0 +1,48 @@
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import { IntegrationConfigSchema } from "../../schemas/integration-descriptor.js";
+import { managedSecretScopeSchema } from '@vibesdotdev/secrets/schemas';
+export const INTEGRATION_PROVIDER_DEFAULTS_KIND = 'integration/provider-defaults';
+export const INTEGRATION_PROVIDER_DEFAULTS_ID = 'defaults';
+/** The scoped placement every seeded service row carries. */
+export const IntegrationProviderDefaultScopeSchema = z.object({
+    scope: managedSecretScopeSchema,
+    scopeId: z.string().min(1),
+    featureId: z.string().min(1),
+    serviceKey: z.string().min(1)
+});
+/** One provider service a host declares for seeding. */
+export const IntegrationProviderDefaultDefinitionSchema = z.object({
+    integrationId: z.string().min(1),
+    provider: z.string().min(1),
+    /** The provider kind the id resolves through. */
+    interfaceId: z.string().min(1).default('integration/provider'),
+    slug: z.string().min(1),
+    label: z.string().min(1),
+    config: IntegrationConfigSchema.default({}),
+    enabled: z.boolean().default(true),
+    permissions: z.array(z.string()).default([]),
+    status: z.literal('active').default('active')
+});
+/**
+ * Open, schema-owned descriptor: a host composes one of these to declare
+ * which provider services its deployment seeds and cleans. The generic core
+ * ships no vendor selection of its own.
+ */
+export const IntegrationProviderDefaultsDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal(INTEGRATION_PROVIDER_DEFAULTS_KIND),
+    scope: IntegrationProviderDefaultScopeSchema,
+    definitions: z.array(IntegrationProviderDefaultDefinitionSchema).default([])
+});
+/** The store operation inputs the seeding owner performs. */
+export const IntegrationProviderDefaultServiceInputSchema = IntegrationProviderDefaultDefinitionSchema.extend(IntegrationProviderDefaultScopeSchema.shape);
+export const DeleteIntegrationProviderServicesInputSchema = z.object({
+    integrationIds: z.array(z.string().min(1)).min(1),
+    ...IntegrationProviderDefaultScopeSchema.shape
+});
+/** The store port the host supplies; seeding never opens a store itself. */
+export const IntegrationProviderDefaultsStoreSchema = z.object({
+    upsertIntegrationProviderService: z.custom((value) => value instanceof Function),
+    deleteIntegrationProviderServices: z.custom((value) => value instanceof Function)
+});
+//# sourceMappingURL=system-defaults.js.map

package/dist/server/schemas/system-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-defaults.js","sourceRoot":"","sources":["../../../src/server/schemas/system-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAIxE,MAAM,CAAC,MAAM,kCAAkC,GAAG,+BAAwC,CAAC;AAC3F,MAAM,CAAC,MAAM,gCAAgC,GAAG,UAAmB,CAAC;AAEpE,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,KAAK,EAAE,wBAAwB;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAGH,wDAAwD;AACxD,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC,MAAM,CAAC;IAClE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,iDAAiD;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAC7C,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2CAA2C,GAAG,uBAAuB,CAAC,MAAM,CAAC;IACzF,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kCAAkC,CAAC;IACnD,KAAK,EAAE,qCAAqC;IAC5C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5E,CAAC,CAAC;AAGH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,4CAA4C,GACxD,0CAA0C,CAAC,MAAM,CAAC,qCAAqC,CAAC,KAAK,CAAC,CAAC;AAGhG,MAAM,CAAC,MAAM,4CAA4C,GAAG,CAAC,CAAC,MAAM,CAAC;IACpE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,GAAG,qCAAqC,CAAC,KAAK;CAC9C,CAAC,CAAC;AAGH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,gCAAgC,EAAE,CAAC,CAAC,MAAM,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,QAAQ,CACpC;IACD,iCAAiC,EAAE,CAAC,CAAC,MAAM,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,QAAQ,CACpC;CACD,CAAC,CAAC"}

package/dist/server/system-defaults.d.ts

@@ -0,0 +1,20 @@
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import { type IntegrationProviderDefaultsStore } from './schemas/system-defaults.ts';
+export { DeleteIntegrationProviderServicesInputSchema, IntegrationProviderDefaultDefinitionSchema, IntegrationProviderDefaultScopeSchema, IntegrationProviderDefaultServiceInputSchema, IntegrationProviderDefaultsDescriptorSchema, IntegrationProviderDefaultsStoreSchema } from './schemas/system-defaults.ts';
+export type { DeleteIntegrationProviderServicesInput, IntegrationProviderDefaultConfig, IntegrationProviderDefaultDefinition, IntegrationProviderDefaultScope, IntegrationProviderDefaultServiceInput, IntegrationProviderDefaultsDescriptor, IntegrationProviderDefaultsStore } from './schemas/system-defaults.ts';
+export { INTEGRATION_PROVIDER_DEFAULTS_ID, INTEGRATION_PROVIDER_DEFAULTS_KIND, integrationProviderDefaultsKind } from './defaults/system-defaults.kind.ts';
+/**
+ * The canonical ids of the provider services the composed runtime declares.
+ * Terminal export reconciliation derives this from the host's descriptors; it
+ * is no longer a fixed list shipped by the generic core.
+ */
+export declare function integrationProviderDefaultIds(runtime: RuntimeRef): Promise<string[]>;
+/** Seed exactly the scoped definitions the host declared. */
+export declare function seedIntegrationProviderServices(runtime: RuntimeRef, store: IntegrationProviderDefaultsStore): Promise<void>;
+/**
+ * Clean exactly the declared scoped definitions. Cleanup is scoped to the
+ * declared ids plus the declared feature/service/scope placement — it never
+ * broadens to delete rows the host did not declare.
+ */
+export declare function cleanIntegrationProviderServices(runtime: RuntimeRef, store: IntegrationProviderDefaultsStore): Promise<void>;
+//# sourceMappingURL=system-defaults.d.ts.map

package/dist/server/system-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-defaults.d.ts","sourceRoot":"","sources":["../../src/server/system-defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EASN,KAAK,gCAAgC,EACrC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACN,4CAA4C,EAC5C,0CAA0C,EAC1C,qCAAqC,EACrC,4CAA4C,EAC5C,2CAA2C,EAC3C,sCAAsC,EACtC,MAAM,8BAA8B,CAAC;AAEtC,YAAY,EACX,sCAAsC,EACtC,gCAAgC,EAChC,oCAAoC,EACpC,+BAA+B,EAC/B,sCAAsC,EACtC,qCAAqC,EACrC,gCAAgC,EAChC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACN,gCAAgC,EAChC,kCAAkC,EAClC,+BAA+B,EAC/B,MAAM,oCAAoC,CAAC;AAE5C;;;;GAIG;AACH,wBAAsB,6BAA6B,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAI1F;AAED,6DAA6D;AAC7D,wBAAsB,+BAA+B,CACpD,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,gCAAgC,GACrC,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACrD,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,gCAAgC,GACrC,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/server/system-defaults.js

@@ -0,0 +1,58 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { parseIntegrationBoundary } from "../schemas/boundary.js";
+import { INTEGRATION_PROVIDER_DEFAULTS_ID, INTEGRATION_PROVIDER_DEFAULTS_KIND, DeleteIntegrationProviderServicesInputSchema, IntegrationProviderDefaultServiceInputSchema, IntegrationProviderDefaultsDescriptorSchema, IntegrationProviderDefaultsStoreSchema } from "./schemas/system-defaults.js";
+export { DeleteIntegrationProviderServicesInputSchema, IntegrationProviderDefaultDefinitionSchema, IntegrationProviderDefaultScopeSchema, IntegrationProviderDefaultServiceInputSchema, IntegrationProviderDefaultsDescriptorSchema, IntegrationProviderDefaultsStoreSchema } from "./schemas/system-defaults.js";
+export { INTEGRATION_PROVIDER_DEFAULTS_ID, INTEGRATION_PROVIDER_DEFAULTS_KIND, integrationProviderDefaultsKind } from "./defaults/system-defaults.kind.js";
+/**
+ * The canonical ids of the provider services the composed runtime declares.
+ * Terminal export reconciliation derives this from the host's descriptors; it
+ * is no longer a fixed list shipped by the generic core.
+ */
+export async function integrationProviderDefaultIds(runtime) {
+    return (await declaredProviderDefaults(runtime)).definitions.map((definition) => definition.integrationId);
+}
+/** Seed exactly the scoped definitions the host declared. */
+export async function seedIntegrationProviderServices(runtime, store) {
+    const declarations = await declaredProviderDefaults(runtime);
+    const scopedStore = parseIntegrationBoundary(IntegrationProviderDefaultsStoreSchema, store);
+    for (const definition of declarations.definitions) {
+        const input = { ...definition, ...declarations.scope };
+        await scopedStore.upsertIntegrationProviderService(parseIntegrationBoundary(IntegrationProviderDefaultServiceInputSchema, input));
+    }
+}
+/**
+ * Clean exactly the declared scoped definitions. Cleanup is scoped to the
+ * declared ids plus the declared feature/service/scope placement — it never
+ * broadens to delete rows the host did not declare.
+ */
+export async function cleanIntegrationProviderServices(runtime, store) {
+    const declarations = await declaredProviderDefaults(runtime);
+    const scopedStore = parseIntegrationBoundary(IntegrationProviderDefaultsStoreSchema, store);
+    if (declarations.definitions.length === 0)
+        return;
+    await scopedStore.deleteIntegrationProviderServices(parseIntegrationBoundary(DeleteIntegrationProviderServicesInputSchema, {
+        integrationIds: declarations.definitions.map((definition) => definition.integrationId),
+        ...declarations.scope
+    }));
+}
+async function declaredProviderDefaults(runtime) {
+    if (!runtime.hasKind(INTEGRATION_PROVIDER_DEFAULTS_KIND)) {
+        throw new CapabilityError('No provider defaults are composed for this runtime.', 'UNAVAILABLE', {
+            reason: 'integration-provider-defaults-undeclared',
+            retryable: false
+        });
+    }
+    const candidate = await runtime
+        .query(INTEGRATION_PROVIDER_DEFAULTS_KIND)
+        .withId(INTEGRATION_PROVIDER_DEFAULTS_ID)
+        .enabled()
+        .firstDescriptorAsync();
+    if (!candidate) {
+        throw new CapabilityError('No provider defaults are composed for this runtime.', 'UNAVAILABLE', {
+            reason: 'integration-provider-defaults-undeclared',
+            retryable: false
+        });
+    }
+    return parseIntegrationBoundary(IntegrationProviderDefaultsDescriptorSchema, candidate);
+}
+//# sourceMappingURL=system-defaults.js.map

package/dist/server/system-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-defaults.js","sourceRoot":"","sources":["../../src/server/system-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACN,gCAAgC,EAChC,kCAAkC,EAClC,4CAA4C,EAC5C,4CAA4C,EAC5C,2CAA2C,EAC3C,sCAAsC,EAItC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACN,4CAA4C,EAC5C,0CAA0C,EAC1C,qCAAqC,EACrC,4CAA4C,EAC5C,2CAA2C,EAC3C,sCAAsC,EACtC,MAAM,8BAA8B,CAAC;AAYtC,OAAO,EACN,gCAAgC,EAChC,kCAAkC,EAClC,+BAA+B,EAC/B,MAAM,oCAAoC,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAAmB;IACtE,OAAO,CAAC,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAC/D,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,CACxC,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACpD,OAAmB,EACnB,KAAuC;IAEvC,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,wBAAwB,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;IAC5F,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,YAAY,CAAC,KAAK,EAAmD,CAAC;QACxG,MAAM,WAAW,CAAC,gCAAgC,CACjD,wBAAwB,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAC7E,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,OAAmB,EACnB,KAAuC;IAEvC,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,wBAAwB,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;IAC5F,IAAI,YAAY,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElD,MAAM,WAAW,CAAC,iCAAiC,CAClD,wBAAwB,CAAC,4CAA4C,EAAE;QACtE,cAAc,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;QACtF,GAAG,YAAY,CAAC,KAAK;KACrB,CAAC,CACF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACtC,OAAmB;IAEnB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,aAAa,EAAE;YAC/F,MAAM,EAAE,0CAA0C;YAClD,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,OAAO;SAC7B,KAAK,CAAwC,kCAAkC,CAAC;SAChF,MAAM,CAAC,gCAAgC,CAAC;SACxC,OAAO,EAAE;SACT,oBAAoB,EAAE,CAAC;IACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,aAAa,EAAE;YAC/F,MAAM,EAAE,0CAA0C;YAClD,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,wBAAwB,CAAC,2CAA2C,EAAE,SAAS,CAAC,CAAC;AACzF,CAAC"}

package/dist/settings/context.d.ts

@@ -0,0 +1,11 @@
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import { type SystemSettingsReader } from '../schemas/settings.ts';
+import type { IntegrationConfigValue } from '../schemas/integration-descriptor.ts';
+export type { SystemSettingsReader } from '../schemas/settings.ts';
+export declare const systemSettingsReaderContextId = "system/settings-reader";
+/** An unwired reader confirms absence. Failures from a mounted reader propagate. */
+export declare function createUnavailableSystemSettingsReader(_runtime?: RuntimeRef): SystemSettingsReader;
+export declare function createInMemorySettingsReader(settings?: Record<string, IntegrationConfigValue>): SystemSettingsReader;
+/** Check the context boundary while preserving the host reader's identity and receiver. */
+export declare function isSystemSettingsReader<T>(value: T): value is T & SystemSettingsReader;
+//# sourceMappingURL=context.d.ts.map

package/dist/settings/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/settings/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAyD,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC1H,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AACnF,YAAY,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,eAAO,MAAM,6BAA6B,2BAA2B,CAAC;AAEtE,oFAAoF;AACpF,wBAAgB,qCAAqC,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,oBAAoB,CAEjG;AAED,wBAAgB,4BAA4B,CAC3C,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAM,GACnD,oBAAoB,CAMtB;AAED,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,oBAAoB,CAGrF"}

package/dist/settings/context.js

@@ -0,0 +1,19 @@
+import { IntegrationSettingsSchema, SystemSettingsReaderSchema } from "../schemas/settings.js";
+export const systemSettingsReaderContextId = 'system/settings-reader';
+/** An unwired reader confirms absence. Failures from a mounted reader propagate. */
+export function createUnavailableSystemSettingsReader(_runtime) {
+    return { get: () => undefined, getAll: () => ({}) };
+}
+export function createInMemorySettingsReader(settings = {}) {
+    const store = IntegrationSettingsSchema.parse(settings);
+    return {
+        get: (key) => store[key],
+        getAll: () => ({ ...store })
+    };
+}
+/** Check the context boundary while preserving the host reader's identity and receiver. */
+export function isSystemSettingsReader(value) {
+    const parsed = SystemSettingsReaderSchema.safeParse(value);
+    return parsed.success;
+}
+//# sourceMappingURL=context.js.map

package/dist/settings/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/settings/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAA6B,MAAM,wBAAwB,CAAC;AAI1H,MAAM,CAAC,MAAM,6BAA6B,GAAG,wBAAwB,CAAC;AAEtE,oFAAoF;AACpF,MAAM,UAAU,qCAAqC,CAAC,QAAqB;IAC1E,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC3C,WAAmD,EAAE;IAErD,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO;QACN,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;QACxB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;KAC5B,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAI,KAAQ;IACjD,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,OAAO,CAAC;AACvB,CAAC"}

package/dist/settings/system-settings-reader.context.descriptor.d.ts

@@ -0,0 +1,43 @@
+/**
+ * System Settings Reader Context Descriptor
+ *
+ * Registers the `system/settings-reader` context kind with the runtime.
+ *
+ * Provider descriptors name this as an optional Kernel context by default.
+ * Hosts may provide a real settings reader or explicitly require one.
+ *
+ * Implementations are optional — `BaseIntegrationProvider` falls back to
+ * `createUnavailableSystemSettingsReader()` when no impl is present in the
+ * resolved context. A registered implementation's failure propagates; only
+ * confirmed absence permits that fallback.
+ */
+declare const systemSettingsReaderDescriptor: {
+    id: string;
+    kind: "context";
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    valueKind?: "service" | "data" | undefined;
+    valueSchema?: unknown;
+    config?: {
+        sources: ("literal" | "workspace" | "floor")[];
+        subset?: true | undefined;
+    } | undefined;
+};
+export default systemSettingsReaderDescriptor;
+//# sourceMappingURL=system-settings-reader.context.descriptor.d.ts.map

package/dist/settings/system-settings-reader.context.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-settings-reader.context.descriptor.d.ts","sourceRoot":"","sources":["../../src/settings/system-settings-reader.context.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,QAAA,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMlC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}

package/dist/settings/system-settings-reader.context.descriptor.js

@@ -0,0 +1,23 @@
+/**
+ * System Settings Reader Context Descriptor
+ *
+ * Registers the `system/settings-reader` context kind with the runtime.
+ *
+ * Provider descriptors name this as an optional Kernel context by default.
+ * Hosts may provide a real settings reader or explicitly require one.
+ *
+ * Implementations are optional — `BaseIntegrationProvider` falls back to
+ * `createUnavailableSystemSettingsReader()` when no impl is present in the
+ * resolved context. A registered implementation's failure propagates; only
+ * confirmed absence permits that fallback.
+ */
+import { createContextDescriptor } from '@vibesdotdev/kernel/factory/context';
+import { systemSettingsReaderContextId } from "./context.js";
+const systemSettingsReaderDescriptor = createContextDescriptor({
+    id: systemSettingsReaderContextId,
+    name: 'System Settings Reader',
+    description: 'Read-only access to system-level settings (feature flags, integration config defaults). Required by every integration/provider kind so providers can resolve settings-driven configuration.',
+    tags: ['integrations', 'settings', 'context']
+});
+export default systemSettingsReaderDescriptor;
+//# sourceMappingURL=system-settings-reader.context.descriptor.js.map

package/dist/settings/system-settings-reader.context.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-settings-reader.context.descriptor.js","sourceRoot":"","sources":["../../src/settings/system-settings-reader.context.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAE7D,MAAM,8BAA8B,GAAG,uBAAuB,CAAC;IAC9D,EAAE,EAAE,6BAA6B;IACjC,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACV,6LAA6L;IAC9L,IAAI,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,SAAS,CAAC;CAC7C,CAAC,CAAC;AAEH,eAAe,8BAA8B,CAAC"}

package/dist/status/integration-connect.availability.d.ts

@@ -0,0 +1,16 @@
+import type { IntegrationConnectionMetadata } from '../schemas/integration-connection.ts';
+import type { IntegrationProviderDescriptor } from '../schemas/integration-descriptor.ts';
+/**
+ * Svelte-safe connect availability for one provider descriptor.
+ *
+ * Availability comes from the provider's DECLARED connection metadata only:
+ * `connection.connectable` on the descriptor (the catalog projection keeps
+ * this field; configuration, credentials and OAuth endpoints are stripped).
+ * There is no provider-id admission list and no credential-shape heuristic:
+ * a descriptor that declares nothing is never connectable, and a host
+ * reference credential never makes one connectable by itself.
+ */
+export declare function isIntegrationProviderConnectable(provider: Pick<IntegrationProviderDescriptor, 'enabled' | 'connection'>): provider is Pick<IntegrationProviderDescriptor, 'enabled' | 'connection'> & {
+    connection: IntegrationConnectionMetadata;
+};
+//# sourceMappingURL=integration-connect.availability.d.ts.map

package/dist/status/integration-connect.availability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-connect.availability.d.ts","sourceRoot":"","sources":["../../src/status/integration-connect.availability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AAE1F;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAC/C,QAAQ,EAAE,IAAI,CAAC,6BAA6B,EAAE,SAAS,GAAG,YAAY,CAAC,GACrE,QAAQ,IAAI,IAAI,CAAC,6BAA6B,EAAE,SAAS,GAAG,YAAY,CAAC,GAAG;IAC9E,UAAU,EAAE,6BAA6B,CAAC;CAC1C,CAEA"}

package/dist/status/integration-connect.availability.js

@@ -0,0 +1,14 @@
+/**
+ * Svelte-safe connect availability for one provider descriptor.
+ *
+ * Availability comes from the provider's DECLARED connection metadata only:
+ * `connection.connectable` on the descriptor (the catalog projection keeps
+ * this field; configuration, credentials and OAuth endpoints are stripped).
+ * There is no provider-id admission list and no credential-shape heuristic:
+ * a descriptor that declares nothing is never connectable, and a host
+ * reference credential never makes one connectable by itself.
+ */
+export function isIntegrationProviderConnectable(provider) {
+    return provider.enabled !== false && provider.connection?.connectable === true;
+}
+//# sourceMappingURL=integration-connect.availability.js.map

package/dist/status/integration-connect.availability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-connect.availability.js","sourceRoot":"","sources":["../../src/status/integration-connect.availability.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAC/C,QAAuE;IAIvE,OAAO,QAAQ,CAAC,OAAO,KAAK,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,WAAW,KAAK,IAAI,CAAC;AAChF,CAAC"}

package/dist/status/integration-connection-status.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared connection-status vocabulary.
+ *
+ * Authentication mode and connect/check support are DECLARED by the provider
+ * (descriptor `connection` metadata, or an `integration/connection`
+ * capability the host composed) and resolved through the runtime. Nothing
+ * here infers behavior from an id suffix, a provider admission list or a
+ * credential-value shape: a host-reference credential alone never implies
+ * tenant connection support.
+ *
+ * SECURITY: any producer of `IntegrationConnectionStatus` MUST scope
+ * `connected` / `connectionCount` to the calling user/org — never leak
+ * whether some OTHER tenant has the provider connected. When in doubt,
+ * return `{ connected: false, connectionCount: 0 }`.
+ */
+export { IntegrationAuthModeSchema, IntegrationConnectionStatusSchema, IntegrationConnectionMetadataSchema, IntegrationConnectRequestResultSchema, IntegrationConnectionRefusalSchema } from '../schemas/integration-connection.ts';
+export type { IntegrationAuthMode, IntegrationConnectRequestResult, IntegrationConnectionMetadata, IntegrationConnectionRefusal, IntegrationConnectionStatus } from '../schemas/integration-connection.ts';
+//# sourceMappingURL=integration-connection-status.d.ts.map

package/dist/status/integration-connection-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-connection-status.d.ts","sourceRoot":"","sources":["../../src/status/integration-connection-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACN,yBAAyB,EACzB,iCAAiC,EACjC,mCAAmC,EACnC,qCAAqC,EACrC,kCAAkC,EAClC,MAAM,sCAAsC,CAAC;AAE9C,YAAY,EACX,mBAAmB,EACnB,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC5B,2BAA2B,EAC3B,MAAM,sCAAsC,CAAC"}

package/dist/status/integration-connection-status.js

@@ -0,0 +1,17 @@
+/**
+ * Shared connection-status vocabulary.
+ *
+ * Authentication mode and connect/check support are DECLARED by the provider
+ * (descriptor `connection` metadata, or an `integration/connection`
+ * capability the host composed) and resolved through the runtime. Nothing
+ * here infers behavior from an id suffix, a provider admission list or a
+ * credential-value shape: a host-reference credential alone never implies
+ * tenant connection support.
+ *
+ * SECURITY: any producer of `IntegrationConnectionStatus` MUST scope
+ * `connected` / `connectionCount` to the calling user/org — never leak
+ * whether some OTHER tenant has the provider connected. When in doubt,
+ * return `{ connected: false, connectionCount: 0 }`.
+ */
+export { IntegrationAuthModeSchema, IntegrationConnectionStatusSchema, IntegrationConnectionMetadataSchema, IntegrationConnectRequestResultSchema, IntegrationConnectionRefusalSchema } from "../schemas/integration-connection.js";
+//# sourceMappingURL=integration-connection-status.js.map

package/dist/status/integration-connection-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-connection-status.js","sourceRoot":"","sources":["../../src/status/integration-connection-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACN,yBAAyB,EACzB,iCAAiC,EACjC,mCAAmC,EACnC,qCAAqC,EACrC,kCAAkC,EAClC,MAAM,sCAAsC,CAAC"}

package/dist/status/integration-connection.capability.d.ts

@@ -0,0 +1,19 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import type { IntegrationConnectRequestResult, IntegrationConnectionStatus } from '../schemas/integration-connection.ts';
+/**
+ * The narrow contract a host (or the Svelte surface) uses for connect
+ * availability and requests. Implementations come from the provider's own
+ * `integration/connection` descriptor through a lazy loader; the consumer
+ * never knows which provider answered.
+ */
+export interface IntegrationConnectionCapability {
+    /** Connection state for the calling user/org. */
+    status(): Promise<IntegrationConnectionStatus>;
+    /** Ask the provider to begin a connect flow; host authorization is retained. */
+    requestConnect(): Promise<IntegrationConnectRequestResult>;
+}
+/** Refusal for a provider whose connection behavior no plugin declared. */
+export declare function integrationConnectionUnsupported(integrationId: string): CapabilityError;
+/** Validate a provider implementation's connect outcome at the boundary. */
+export declare function parseIntegrationConnectRequestResult(value: unknown): IntegrationConnectRequestResult;
+//# sourceMappingURL=integration-connection.capability.d.ts.map

package/dist/status/integration-connection.capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-connection.capability.d.ts","sourceRoot":"","sources":["../../src/status/integration-connection.capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EACX,+BAA+B,EAC/B,2BAA2B,EAC3B,MAAM,sCAAsC,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,WAAW,+BAA+B;IAC/C,iDAAiD;IACjD,MAAM,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC/C,gFAAgF;IAChF,cAAc,IAAI,OAAO,CAAC,+BAA+B,CAAC,CAAC;CAC3D;AAED,2EAA2E;AAC3E,wBAAgB,gCAAgC,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,CAMvF;AAED,4EAA4E;AAC5E,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,OAAO,GAAG,+BAA+B,CAEpG"}

package/dist/status/integration-connection.capability.js

@@ -0,0 +1,15 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { IntegrationConnectRequestResultSchema } from "../schemas/integration-connection.js";
+/** Refusal for a provider whose connection behavior no plugin declared. */
+export function integrationConnectionUnsupported(integrationId) {
+    return new CapabilityError('This integration declares no connection capability.', 'UNAVAILABLE', {
+        reason: 'integration-connection-unsupported',
+        retryable: false,
+        details: { integrationId }
+    });
+}
+/** Validate a provider implementation's connect outcome at the boundary. */
+export function parseIntegrationConnectRequestResult(value) {
+    return IntegrationConnectRequestResultSchema.parse(value);
+}
+//# sourceMappingURL=integration-connection.capability.js.map

package/dist/status/integration-connection.capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-connection.capability.js","sourceRoot":"","sources":["../../src/status/integration-connection.capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAmB7F,2EAA2E;AAC3E,MAAM,UAAU,gCAAgC,CAAC,aAAqB;IACrE,OAAO,IAAI,eAAe,CAAC,qDAAqD,EAAE,aAAa,EAAE;QAChG,MAAM,EAAE,oCAAoC;QAC5C,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,aAAa,EAAE;KAC1B,CAAC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oCAAoC,CAAC,KAAc;IAClE,OAAO,qCAAqC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC"}