@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.3

package/dist/webhooks/schemas/webhook-delivery.js

@@ -0,0 +1,50 @@
+/**
+ * Durable webhook fan-out contracts.
+ *
+ * A verified provider request is accepted once, then expanded into one delivery
+ * per `tools/webhook-consumer`. Delivery leases are the authority for retries;
+ * the generic runtime hook bus is deliberately not used as a receipt channel.
+ */
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+import * as z from 'zod/v4';
+import { WebhookParsedEventSchema } from "./webhook-events.js";
+export const WebhookDeliveryStatusSchema = z.enum([
+    'pending',
+    'leased',
+    'retry_wait',
+    'succeeded',
+    'dead_lettered'
+]);
+export const WebhookDeliverySchema = z.object({
+    id: z.string(),
+    webhook_request_id: z.string(),
+    consumer_id: z.string(),
+    payload: WebhookParsedEventSchema,
+    status: WebhookDeliveryStatusSchema,
+    attempt_count: z.number().int().nonnegative(),
+    max_attempts: z.number().int().positive(),
+    next_attempt_at: z.string(),
+    lease_owner: z.string().optional(),
+    lease_expires_at: z.string().optional(),
+    last_error: z.string().optional(),
+    receipt: z.record(z.string(), z.unknown()).optional(),
+    created_at: z.string(),
+    updated_at: z.string(),
+    completed_at: z.string().optional()
+});
+export const WebhookConsumerDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('tools/webhook-consumer'),
+    sources: z.array(z.string()).optional(),
+    eventTypes: z.array(z.string()).optional(),
+    maxAttempts: z.number().int().min(1).max(20).default(8)
+});
+export const WebhookIngressRejectionReasonSchema = z.enum([
+    'invalid-signature',
+    'missing-credential',
+    'stale-timestamp',
+    'invalid-json',
+    'unknown-source',
+    'oversized-body',
+    'other'
+]);
+//# sourceMappingURL=webhook-delivery.js.map

package/dist/webhooks/schemas/webhook-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery.js","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,wBAAwB,EAA2B,MAAM,qBAAqB,CAAC;AAExF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,eAAe;CACf,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,wBAAwB;IACjC,MAAM,EAAE,2BAA2B;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,+BAA+B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACvD,CAAC,CAAC;AAkDH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,IAAI,CAAC;IACzD,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,OAAO;CACP,CAAC,CAAC"}

package/dist/webhooks/schemas/webhook-event-definition.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Webhook Event Definition Descriptor + Implementation Interface
+ *
+ * `tools/webhook-event-definition` is a data-only runtime kind. Each descriptor
+ * declares a `(source, event_type)` pair that the router knows how to parse and
+ * optionally project into a task, outbox entries, or a vendor transport
+ * response. Vendor packs register the descriptors and their bound
+ * implementations via plugin loaders.
+ */
+import type { JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import * as z from 'zod/v4';
+import type { WebhookOutboxSpec, WebhookTaskSpec } from './webhook-request.ts';
+/**
+ * Vendor-owned HTTP response data returned by a webhook transport route.
+ *
+ * Keep this deliberately small and data-only. It must never carry credentials,
+ * request headers, or raw request bodies.
+ */
+export interface WebhookTransportResponse {
+    status: number;
+    body: JsonObject;
+}
+export declare const WebhookEventDefinitionDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodLiteral<"tools/webhook-event-definition">;
+    name: z.ZodString;
+    description: z.ZodString;
+    source: z.ZodString;
+    event_type: z.ZodString;
+    dispatchMode: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        hook: "hook";
+    }>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type WebhookEventDefinitionDescriptor = z.infer<typeof WebhookEventDefinitionDescriptorSchema>;
+/**
+ * Runtime implementation of a `tools/webhook-event-definition` descriptor.
+ *
+ * `parse` extracts a normalized JSON payload from the raw webhook body (the
+ * parsed payload persists as JSON).
+ * `buildTask` optionally projects the parsed payload into a marshal task spec.
+ * `buildOutbox` (optional) projects the parsed payload into outbox entries
+ * for secondary actions (e.g. update_lead after an inbound email).
+ * `buildResponse` (optional) returns vendor transport data such as Discord's
+ * PING acknowledgement.
+ */
+export interface WebhookEventDefinitionImplementation {
+    readonly descriptor: WebhookEventDefinitionDescriptor;
+    parse(raw: JsonObject): JsonObject;
+    buildTask?(parsed: JsonObject): WebhookTaskSpec | null;
+    buildOutbox?(parsed: JsonObject): WebhookOutboxSpec[];
+    buildResponse?(parsed: JsonObject): WebhookTransportResponse | null;
+    /**
+     * Stable provider delivery identity. Implementations should use the
+     * provider's own immutable IDs, never body hashes or arrival timestamps.
+     */
+    idempotencyKey?(parsed: JsonObject, raw: JsonObject): string | null;
+}
+//# sourceMappingURL=webhook-event-definition.d.ts.map

package/dist/webhooks/schemas/webhook-event-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-event-definition.d.ts","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-event-definition.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,CAAC;CACjB;AAED,eAAO,MAAM,sCAAsC;;;;;;;;;;;;iBAgBjD,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,sCAAsC,CAC7C,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oCAAoC;IACpD,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAC;IACtD,KAAK,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAAC;IACnC,SAAS,CAAC,CAAC,MAAM,EAAE,UAAU,GAAG,eAAe,GAAG,IAAI,CAAC;IACvD,WAAW,CAAC,CAAC,MAAM,EAAE,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACtD,aAAa,CAAC,CAAC,MAAM,EAAE,UAAU,GAAG,wBAAwB,GAAG,IAAI,CAAC;IACpE;;;OAGG;IACH,cAAc,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;CACpE"}

package/dist/webhooks/schemas/webhook-event-definition.js

@@ -0,0 +1,24 @@
+/**
+ * Webhook Event Definition Descriptor + Implementation Interface
+ *
+ * `tools/webhook-event-definition` is a data-only runtime kind. Each descriptor
+ * declares a `(source, event_type)` pair that the router knows how to parse and
+ * optionally project into a task, outbox entries, or a vendor transport
+ * response. Vendor packs register the descriptors and their bound
+ * implementations via plugin loaders.
+ */
+import * as z from 'zod/v4';
+export const WebhookEventDefinitionDescriptorSchema = z.object({
+    id: z.string(),
+    kind: z.literal('tools/webhook-event-definition'),
+    name: z.string(),
+    description: z.string(),
+    /** The webhook source this definition handles. */
+    source: z.string(),
+    /** The event type within that source (e.g. 'email.received', 'app_mention'). */
+    event_type: z.string(),
+    /** Handshakes terminate after persistence; normal events emit the parsed hook. */
+    dispatchMode: z.enum(['hook', 'none']).optional(),
+    tags: z.array(z.string()).optional()
+});
+//# sourceMappingURL=webhook-event-definition.js.map

package/dist/webhooks/schemas/webhook-event-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-event-definition.js","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-event-definition.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAc5B,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IAEvB,kDAAkD;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAElB,gFAAgF;IAChF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IAEtB,kFAAkF;IAClF,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IAEjD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC"}

package/dist/webhooks/schemas/webhook-events.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Webhook Hook-Bus Event Map
+ *
+ * Payload shapes emitted on the `tools/webhook` hook bus key. Subscribers
+ * (marshal-system, audit loggers, dashboards) receive the bus payload as one
+ * of these types. Emitted by `processWebhook` after persistence; the parsed
+ * event is also each durable delivery's payload, so it has a schema.
+ *
+ * Bus key: `tools/webhook`
+ * Event keys: `received`, `parsed`, `rejected`
+ */
+import * as z from 'zod/v4';
+export interface WebhookReceivedEvent {
+    request_id: string;
+    source: string;
+    event_type: string;
+    raw_body: string;
+    raw_headers: Record<string, string>;
+    created_at: string;
+}
+export declare const WebhookParsedEventSchema: z.ZodObject<{
+    request_id: z.ZodString;
+    source: z.ZodString;
+    event_type: z.ZodString;
+    parsed_payload: z.ZodType<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject>>;
+    task_spec: z.ZodOptional<z.ZodObject<{
+        title: z.ZodString;
+        lane: z.ZodString;
+        description: z.ZodString;
+        priority: z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>;
+        assigned_to: z.ZodString;
+    }, z.core.$strip>>;
+    outbox_specs: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        source: z.ZodString;
+        webhook_request_id: z.ZodString;
+        action: z.ZodUnion<readonly [z.ZodLiteral<"send_email">, z.ZodLiteral<"post_message">, z.ZodLiteral<"create_task">, z.ZodLiteral<"update_lead">, z.ZodLiteral<"custom">]>;
+        payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        status: z.ZodEnum<{
+            failed: "failed";
+            pending: "pending";
+            sent: "sent";
+        }>;
+        created_at: z.ZodString;
+    }, z.core.$strip>>;
+    created_at: z.ZodString;
+}, z.core.$strip>;
+export type WebhookParsedEvent = z.infer<typeof WebhookParsedEventSchema>;
+export interface WebhookRejectedEvent {
+    request_id: string;
+    source: string;
+    error: string;
+    created_at: string;
+}
+/** Hook-bus event-map for `runtime.hooks<WebhookEvents>('tools/webhook')`. */
+export type WebhookEvents = {
+    received: WebhookReceivedEvent;
+    parsed: WebhookParsedEvent;
+    rejected: WebhookRejectedEvent;
+};
+//# sourceMappingURL=webhook-events.d.ts.map

package/dist/webhooks/schemas/webhook-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-events.d.ts","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,MAAM,aAAa,GAAG;IAC3B,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,EAAE,oBAAoB,CAAC;CAC/B,CAAC"}

package/dist/webhooks/schemas/webhook-events.js

@@ -0,0 +1,24 @@
+/**
+ * Webhook Hook-Bus Event Map
+ *
+ * Payload shapes emitted on the `tools/webhook` hook bus key. Subscribers
+ * (marshal-system, audit loggers, dashboards) receive the bus payload as one
+ * of these types. Emitted by `processWebhook` after persistence; the parsed
+ * event is also each durable delivery's payload, so it has a schema.
+ *
+ * Bus key: `tools/webhook`
+ * Event keys: `received`, `parsed`, `rejected`
+ */
+import { JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+import * as z from 'zod/v4';
+import { WebhookOutboxSpecSchema, WebhookTaskSpecSchema } from "./webhook-request.js";
+export const WebhookParsedEventSchema = z.object({
+    request_id: z.string(),
+    source: z.string(),
+    event_type: z.string(),
+    parsed_payload: JsonObjectSchema,
+    task_spec: WebhookTaskSpecSchema.optional(),
+    outbox_specs: z.array(WebhookOutboxSpecSchema),
+    created_at: z.string()
+});
+//# sourceMappingURL=webhook-events.js.map

package/dist/webhooks/schemas/webhook-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-events.js","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAWtF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC"}

package/dist/webhooks/schemas/webhook-preparation.d.ts

@@ -0,0 +1,17 @@
+import type { WebhookProcessResult } from './webhook-process-result.ts';
+import type { WebhookOutboxSpec, WebhookRequest, WebhookTaskSpec } from './webhook-request.ts';
+/**
+ * Verified, parsed ingress detached from host persistence.
+ *
+ * HTTP transports may return `result.response` immediately and hand this
+ * value to `waitUntil`. It contains only redacted persistence data and parsed
+ * provider output; ephemeral credentials must be removed by the vendor parser.
+ */
+export interface WebhookPreparation {
+    request: WebhookRequest;
+    result: WebhookProcessResult;
+    task_spec?: WebhookTaskSpec;
+    outbox_specs: WebhookOutboxSpec[];
+    dispatch_mode: 'hook' | 'none';
+}
+//# sourceMappingURL=webhook-preparation.d.ts.map

package/dist/webhooks/schemas/webhook-preparation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-preparation.d.ts","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-preparation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE/F;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B"}

package/dist/webhooks/schemas/webhook-preparation.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=webhook-preparation.js.map

package/dist/webhooks/schemas/webhook-preparation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-preparation.js","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-preparation.ts"],"names":[],"mappings":""}

package/dist/webhooks/schemas/webhook-process-result.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Webhook Process Result
+ *
+ * Shape returned by `processWebhook` to its caller (typically an HTTP route).
+ * The result carries the request ID (so the caller can look up the persisted
+ * record), a high-level status, and optional fields for the Slack URL
+ * verification handshake or a vendor-owned transport response.
+ *
+ * Task / outbox dispatch happens during the durable commit phase via the runtime
+ * hook bus (`tools.webhook.parsed`). HTTP surfaces use `prepare()` for the vendor
+ * response and schedule `commit()` on their host background-execution primitive.
+ */
+import type { JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import type { WebhookTransportResponse } from './webhook-event-definition.ts';
+export interface WebhookProcessResult {
+    request_id: string;
+    status: 'accepted' | 'rejected' | 'error';
+    event_type: string;
+    error?: string;
+    /** True when an atomic provider-delivery claim already existed. */
+    duplicate?: boolean;
+    /** Slack URL-verification handshake — caller echoes this in the HTTP body. */
+    challenge?: string;
+    /** Present on accepted parses for diagnostics and compatibility. */
+    source?: string;
+    parsed_payload?: JsonObject;
+    /** Data-only vendor response for the HTTP transport to return verbatim. */
+    response?: WebhookTransportResponse;
+}
+//# sourceMappingURL=webhook-process-result.d.ts.map

package/dist/webhooks/schemas/webhook-process-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-process-result.d.ts","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-process-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,UAAU,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,wBAAwB,CAAC;CACpC"}

package/dist/webhooks/schemas/webhook-process-result.js

@@ -0,0 +1,14 @@
+/**
+ * Webhook Process Result
+ *
+ * Shape returned by `processWebhook` to its caller (typically an HTTP route).
+ * The result carries the request ID (so the caller can look up the persisted
+ * record), a high-level status, and optional fields for the Slack URL
+ * verification handshake or a vendor-owned transport response.
+ *
+ * Task / outbox dispatch happens during the durable commit phase via the runtime
+ * hook bus (`tools.webhook.parsed`). HTTP surfaces use `prepare()` for the vendor
+ * response and schedule `commit()` on their host background-execution primitive.
+ */
+export {};
+//# sourceMappingURL=webhook-process-result.js.map

package/dist/webhooks/schemas/webhook-process-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-process-result.js","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-process-result.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/webhooks/schemas/webhook-request.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Webhook Request / Outbox / Config Schemas
+ *
+ * Domain types for the generic webhook ingestion subsystem. Persisted to the
+ * consumer FS service at `~/.vibes/vibesOS/webhooks/`; persistence and ingress
+ * are selected through the `tools/webhook-service` runtime capability so
+ * other hosts can provide D1/KV implementations without changing call sites.
+ *
+ * Schemas are exported as both Zod schemas (for runtime validation) and TS
+ * types (for static callers). Naming mirrors the pre-migration shape so
+ * existing on-disk records stay readable.
+ */
+import * as z from 'zod/v4';
+export declare const WebhookEventStatusSchema: z.ZodEnum<{
+    parsed: "parsed";
+    failed: "failed";
+    rejected: "rejected";
+    queued: "queued";
+    completed: "completed";
+    processing: "processing";
+    received: "received";
+    dispatched: "dispatched";
+    retrying: "retrying";
+    dead_lettered: "dead_lettered";
+}>;
+export type WebhookEventStatus = z.infer<typeof WebhookEventStatusSchema>;
+export type WebhookSource = string;
+export declare const WebhookRequestSchema: z.ZodObject<{
+    id: z.ZodString;
+    source: z.ZodString;
+    event_type: z.ZodString;
+    raw_body: z.ZodString;
+    raw_headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    signature: z.ZodOptional<z.ZodString>;
+    idempotency_key: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        parsed: "parsed";
+        failed: "failed";
+        rejected: "rejected";
+        queued: "queued";
+        completed: "completed";
+        processing: "processing";
+        received: "received";
+        dispatched: "dispatched";
+        retrying: "retrying";
+        dead_lettered: "dead_lettered";
+    }>;
+    parsed_payload: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    error: z.ZodOptional<z.ZodString>;
+    completion_reason: z.ZodOptional<z.ZodString>;
+    orchestration_task_id: z.ZodOptional<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+    completed_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type WebhookRequest = z.infer<typeof WebhookRequestSchema>;
+export declare const WebhookOutboxActionSchema: z.ZodUnion<readonly [z.ZodLiteral<"send_email">, z.ZodLiteral<"post_message">, z.ZodLiteral<"create_task">, z.ZodLiteral<"update_lead">, z.ZodLiteral<"custom">]>;
+export type WebhookOutboxAction = z.infer<typeof WebhookOutboxActionSchema>;
+export declare const WebhookOutboxStatusSchema: z.ZodEnum<{
+    failed: "failed";
+    pending: "pending";
+    sent: "sent";
+}>;
+export type WebhookOutboxStatus = z.infer<typeof WebhookOutboxStatusSchema>;
+export declare const WebhookOutboxEntrySchema: z.ZodObject<{
+    id: z.ZodString;
+    source: z.ZodString;
+    webhook_request_id: z.ZodString;
+    action: z.ZodUnion<readonly [z.ZodLiteral<"send_email">, z.ZodLiteral<"post_message">, z.ZodLiteral<"create_task">, z.ZodLiteral<"update_lead">, z.ZodLiteral<"custom">]>;
+    payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    status: z.ZodEnum<{
+        failed: "failed";
+        pending: "pending";
+        sent: "sent";
+    }>;
+    result: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    error: z.ZodOptional<z.ZodString>;
+    created_at: z.ZodString;
+    sent_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type WebhookOutboxEntry = z.infer<typeof WebhookOutboxEntrySchema>;
+export declare const WebhookSourceConfigSchema: z.ZodObject<{
+    source: z.ZodString;
+    enabled: z.ZodBoolean;
+    signing_secret_env: z.ZodString;
+    description: z.ZodString;
+    allowed_events: z.ZodArray<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type WebhookSourceConfig = z.infer<typeof WebhookSourceConfigSchema>;
+export declare const WebhookConfigSchema: z.ZodObject<{
+    sources: z.ZodRecord<z.ZodString, z.ZodObject<{
+        source: z.ZodString;
+        enabled: z.ZodBoolean;
+        signing_secret_env: z.ZodString;
+        description: z.ZodString;
+        allowed_events: z.ZodArray<z.ZodString>;
+        created_at: z.ZodString;
+        updated_at: z.ZodString;
+    }, z.core.$strip>>;
+    global_secret: z.ZodOptional<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type WebhookConfig = z.infer<typeof WebhookConfigSchema>;
+export declare const WebhookPrioritySchema: z.ZodEnum<{
+    low: "low";
+    medium: "medium";
+    high: "high";
+    critical: "critical";
+}>;
+export type WebhookPriority = z.infer<typeof WebhookPrioritySchema>;
+export declare const WebhookTaskSpecSchema: z.ZodObject<{
+    title: z.ZodString;
+    lane: z.ZodString;
+    description: z.ZodString;
+    priority: z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        critical: "critical";
+    }>;
+    assigned_to: z.ZodString;
+}, z.core.$strip>;
+export type WebhookTaskSpec = z.infer<typeof WebhookTaskSpecSchema>;
+export declare const WebhookOutboxSpecSchema: z.ZodObject<{
+    id: z.ZodString;
+    source: z.ZodString;
+    webhook_request_id: z.ZodString;
+    action: z.ZodUnion<readonly [z.ZodLiteral<"send_email">, z.ZodLiteral<"post_message">, z.ZodLiteral<"create_task">, z.ZodLiteral<"update_lead">, z.ZodLiteral<"custom">]>;
+    payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    status: z.ZodEnum<{
+        failed: "failed";
+        pending: "pending";
+        sent: "sent";
+    }>;
+    created_at: z.ZodString;
+}, z.core.$strip>;
+export type WebhookOutboxSpec = z.infer<typeof WebhookOutboxSpecSchema>;
+//# sourceMappingURL=webhook-request.d.ts.map

package/dist/webhooks/schemas/webhook-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-request.d.ts","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,wBAAwB;;;;;;;;;;;EAWnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,yBAAyB,mKAMpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,yBAAyB;;;;EAAwC,CAAC;AAC/E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;iBAWnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;;;;;iBAQpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;iBAK9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,qBAAqB;;;;;EAAgD,CAAC;AACnF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,qBAAqB;;;;;;;;;;;iBAMhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;iBAQlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/webhooks/schemas/webhook-request.js

@@ -0,0 +1,96 @@
+/**
+ * Webhook Request / Outbox / Config Schemas
+ *
+ * Domain types for the generic webhook ingestion subsystem. Persisted to the
+ * consumer FS service at `~/.vibes/vibesOS/webhooks/`; persistence and ingress
+ * are selected through the `tools/webhook-service` runtime capability so
+ * other hosts can provide D1/KV implementations without changing call sites.
+ *
+ * Schemas are exported as both Zod schemas (for runtime validation) and TS
+ * types (for static callers). Naming mirrors the pre-migration shape so
+ * existing on-disk records stay readable.
+ */
+import * as z from 'zod/v4';
+export const WebhookEventStatusSchema = z.enum([
+    'received',
+    'queued',
+    'parsed',
+    'dispatched',
+    'processing',
+    'retrying',
+    'completed',
+    'failed',
+    'dead_lettered',
+    'rejected'
+]);
+export const WebhookRequestSchema = z.object({
+    id: z.string(),
+    source: z.string(),
+    event_type: z.string(),
+    raw_body: z.string(),
+    raw_headers: z.record(z.string(), z.string()),
+    signature: z.string().optional(),
+    /** Stable provider delivery identity used for atomic duplicate suppression. */
+    idempotency_key: z.string().optional(),
+    status: WebhookEventStatusSchema,
+    parsed_payload: z.record(z.string(), z.unknown()).optional(),
+    error: z.string().optional(),
+    completion_reason: z.string().optional(),
+    orchestration_task_id: z.string().optional(),
+    created_at: z.string(),
+    updated_at: z.string(),
+    completed_at: z.string().optional()
+});
+export const WebhookOutboxActionSchema = z.union([
+    z.literal('send_email'),
+    z.literal('post_message'),
+    z.literal('create_task'),
+    z.literal('update_lead'),
+    z.literal('custom')
+]);
+export const WebhookOutboxStatusSchema = z.enum(['pending', 'sent', 'failed']);
+export const WebhookOutboxEntrySchema = z.object({
+    id: z.string(),
+    source: z.string(),
+    webhook_request_id: z.string(),
+    action: WebhookOutboxActionSchema,
+    payload: z.record(z.string(), z.unknown()),
+    status: WebhookOutboxStatusSchema,
+    result: z.record(z.string(), z.unknown()).optional(),
+    error: z.string().optional(),
+    created_at: z.string(),
+    sent_at: z.string().optional()
+});
+export const WebhookSourceConfigSchema = z.object({
+    source: z.string(),
+    enabled: z.boolean(),
+    signing_secret_env: z.string(),
+    description: z.string(),
+    allowed_events: z.array(z.string()),
+    created_at: z.string(),
+    updated_at: z.string()
+});
+export const WebhookConfigSchema = z.object({
+    sources: z.record(z.string(), WebhookSourceConfigSchema),
+    global_secret: z.string().optional(),
+    created_at: z.string(),
+    updated_at: z.string()
+});
+export const WebhookPrioritySchema = z.enum(['low', 'medium', 'high', 'critical']);
+export const WebhookTaskSpecSchema = z.object({
+    title: z.string(),
+    lane: z.string(),
+    description: z.string(),
+    priority: WebhookPrioritySchema,
+    assigned_to: z.string()
+});
+export const WebhookOutboxSpecSchema = z.object({
+    id: z.string(),
+    source: z.string(),
+    webhook_request_id: z.string(),
+    action: WebhookOutboxActionSchema,
+    payload: z.record(z.string(), z.unknown()),
+    status: WebhookOutboxStatusSchema,
+    created_at: z.string()
+});
+//# sourceMappingURL=webhook-request.js.map

package/dist/webhooks/schemas/webhook-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-request.js","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,WAAW;IACX,QAAQ;IACR,eAAe;IACf,UAAU;CACV,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,+EAA+E;IAC/E,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,wBAAwB;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC;IAChD,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACvB,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACzB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACxB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACxB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CACnB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1C,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC;IACxD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAGnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,QAAQ,EAAE,qBAAqB;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1C,MAAM,EAAE,yBAAyB;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC"}