@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.3

package/dist/fetch/tools/fetch/fetch-request.prompt.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-request.prompt.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/fetch/tools/fetch/fetch-request.prompt.descriptor.ts"],"names":[],"mappings":"AAEA,uFAAuF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACvF,wBAkBuB"}

package/dist/fetch/tools/fetch/fetch-request.prompt.descriptor.js

@@ -0,0 +1,22 @@
+import { definePromptManifestDescriptor } from '@vibesdotdev/ai-schemas';
+/** The `fetch` tool's MCP prompt (`ai.prompt.fetch.request`): plan an HTTP request. */
+export default definePromptManifestDescriptor({
+    id: 'fetch.request',
+    name: 'Plan an HTTP request',
+    description: 'Plan an HTTP request',
+    type: 'workflow',
+    tags: ['mcp', 'fetch'],
+    scope: 'builtin',
+    generator: 'template',
+    content: `Plan an HTTP request with the \`fetch\` tool.
+
+URL: {{url}}{{#if method}}
+Method: {{method}}{{/if}}
+
+Say what the request should send and what the response should show before making it.`,
+    arguments: [
+        { name: 'url', description: 'Target URL', type: 'text', required: true },
+        { name: 'method', description: 'HTTP method', type: 'text' }
+    ]
+}, { owner: 'tools' });
+//# sourceMappingURL=fetch-request.prompt.descriptor.js.map

package/dist/fetch/tools/fetch/fetch-request.prompt.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-request.prompt.descriptor.js","sourceRoot":"","sources":["../../../../src/fetch/tools/fetch/fetch-request.prompt.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAEzE,uFAAuF;AACvF,eAAe,8BAA8B,CAAC;IAC7C,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,sBAAsB;IACnC,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,SAAS;IAChB,SAAS,EAAE,UAAU;IACrB,OAAO,EAAE;;;;;qFAK2E;IACpF,SAAS,EAAE;QACV,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE;KAC5D;CACD,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC"}

package/dist/fetch/tools/fetch/fetch.descriptor.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Fetch Tool Descriptor
+ *
+ * Metadata for the fetch tool. Safe to import anywhere.
+ */
+declare const _default: {
+    readonly kind: "tools/tool";
+    readonly id: "fetch";
+    readonly name: "Fetch";
+    readonly description: string;
+    readonly mcpDescription: string;
+    readonly category: "web";
+    readonly subcategory: "http";
+    readonly hardware: ["consumer", "cloud"];
+    readonly purpose: ["direct", "worker", "mcp", "agent"];
+    readonly tags: ["network", "fetch", "read", "http"];
+    readonly safety: "execute";
+    readonly requiresApproval: true;
+    readonly schemas: {
+        readonly input: import("zod").ZodObject<{
+            url: import("zod").ZodURL;
+            method: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodEnum<{
+                GET: "GET";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+                DELETE: "DELETE";
+                OPTIONS: "OPTIONS";
+                HEAD: "HEAD";
+            }>>>;
+            headers: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodString>>;
+            body: import("zod").ZodOptional<import("zod").ZodString>;
+            timeout: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodNumber>>;
+            forceRefresh: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            ingestToKnowledge: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            knowledgeBaseId: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        readonly output: import("zod").ZodObject<{
+            content: import("zod").ZodString;
+            statusCode: import("zod").ZodNumber;
+            contentType: import("zod").ZodString;
+            url: import("zod").ZodString;
+            fromCache: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            scannedAt: import("zod").ZodOptional<import("zod").ZodString>;
+            knowledgeItems: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodString;
+                title: import("zod").ZodOptional<import("zod").ZodString>;
+            }, import("zod/v4/core").$strip>>>;
+            knowledgeItemIds: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            knowledgeIngestFailure: import("zod").ZodOptional<import("zod").ZodObject<{
+                code: import("zod").ZodString;
+                reason: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+        }, import("zod/v4/core").$strip>;
+    };
+    readonly mcp: {
+        readonly resource: {
+            readonly uri: "fetch://http";
+            readonly name: "HTTP Fetch";
+            readonly description: "Fetch metadata";
+            readonly mimeType: "application/json";
+            readonly cacheable: false;
+        };
+        readonly promptIds: ["fetch.request"];
+    };
+};
+export default _default;
+//# sourceMappingURL=fetch.descriptor.d.ts.map

package/dist/fetch/tools/fetch/fetch.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/fetch/tools/fetch/fetch.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKH,wBAyCG"}

package/dist/fetch/tools/fetch/fetch.descriptor.js

@@ -0,0 +1,48 @@
+/**
+ * Fetch Tool Descriptor
+ *
+ * Metadata for the fetch tool. Safe to import anywhere.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel/factory';
+import { FetchInputSchema, FetchOutputSchema } from "./schemas/index.js";
+export default createRuntimeAsset({
+    kind: 'tools/tool',
+    id: 'fetch',
+    name: 'Fetch',
+    description: 'HTTPS request by public URL (SSRF-guarded: no loopback/RFC1918/metadata; redirects blocked). ' +
+        'Scan cache is ALWAYS-ON for GETs (served from a recent cached fetch unless forceRefresh:true ' +
+        'or a Cache-Control:no-cache header is set). Set ingestToKnowledge:true to OPT-IN to saving ' +
+        'the fetched content as a knowledge item.',
+    mcpDescription: 'HTTPS request to a PUBLIC host, returning the raw response — use it for APIs, ' +
+        'JSON endpoints, and static pages. SSRF-guarded: loopback, RFC1918, and cloud ' +
+        'metadata addresses are refused and redirects are not followed, so it cannot reach ' +
+        'localhost or internal services (drive those with run-command instead). ' +
+        'It does not execute JavaScript — if a page renders client-side or needs a session, ' +
+        'use the browser tool; to search rather than retrieve a known URL, use web-search. ' +
+        'GETs are served from an always-on scan cache; pass forceRefresh:true (or a ' +
+        'Cache-Control:no-cache header) when you need to observe a change you just made. ' +
+        'Nothing is persisted unless you set ingestToKnowledge:true, which saves the ' +
+        'response as a knowledge item. Ex: {url:"https://example.com",method:"GET"}.',
+    category: 'web',
+    subcategory: 'http',
+    hardware: ['consumer', 'cloud'],
+    purpose: ['direct', 'worker', 'mcp', 'agent'],
+    tags: ['network', 'fetch', 'read', 'http'],
+    safety: 'execute',
+    requiresApproval: true,
+    schemas: {
+        input: FetchInputSchema,
+        output: FetchOutputSchema
+    },
+    mcp: {
+        resource: {
+            uri: 'fetch://http',
+            name: 'HTTP Fetch',
+            description: 'Fetch metadata',
+            mimeType: 'application/json',
+            cacheable: false
+        },
+        promptIds: ['fetch.request']
+    }
+});
+//# sourceMappingURL=fetch.descriptor.js.map

package/dist/fetch/tools/fetch/fetch.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.descriptor.js","sourceRoot":"","sources":["../../../../src/fetch/tools/fetch/fetch.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEzE,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,WAAW,EACV,+FAA+F;QAC/F,+FAA+F;QAC/F,6FAA6F;QAC7F,0CAA0C;IAC3C,cAAc,EACb,gFAAgF;QAChF,+EAA+E;QAC/E,oFAAoF;QACpF,yEAAyE;QACzE,qFAAqF;QACrF,oFAAoF;QACpF,6EAA6E;QAC7E,kFAAkF;QAClF,8EAA8E;QAC9E,6EAA6E;IAC9E,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,MAAM;IACnB,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC;IAC7C,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;IAC1C,MAAM,EAAE,SAAS;IACjB,gBAAgB,EAAE,IAAI;IACtB,OAAO,EAAE;QACR,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,iBAAiB;KACzB;IACD,GAAG,EAAE;QACJ,QAAQ,EAAE;YACT,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,gBAAgB;YAC7B,QAAQ,EAAE,kBAAkB;YAC5B,SAAS,EAAE,KAAK;SAChB;QACD,SAAS,EAAE,CAAC,eAAe,CAAC;KAC5B;CACD,CAAC,CAAC"}

package/dist/fetch/tools/fetch/fetch.impl.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Fetch Tool Implementation
+ *
+ * HTTP fetch operations. Hardware-agnostic — uses native `fetch` plus
+ * pure string helpers; works in consumer runtimes and cloud workers.
+ *
+ * Credentials never leave through an output path: a URL with userinfo is
+ * refused before any request; credential-named query values are redacted in
+ * every log line and in the URL returned to the caller, and such a URL is
+ * never written to the scan cache or a knowledge item. Failures are typed
+ * `CapabilityError`s whose text carries no fetch error message (it echoes the
+ * URL); the response body is read through a declared byte cap.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+import type { FetchInput, FetchOutput } from './schemas/index.ts';
+/** The most response bytes the fetch tool reads; a longer body is refused `fetch-response-too-large`. */
+export declare const MAX_FETCH_BODY_BYTES: number;
+/** A URL as it may be shown, and whether showing it required a redaction. */
+export interface DisplayUrl {
+    readonly text: string;
+    readonly carriesCredentials: boolean;
+}
+/**
+ * `url` as it may appear in logs, outputs and storage: credential-named query
+ * values and credential-shaped text replaced. The second value says whether
+ * anything was replaced (such a URL is never persisted).
+ */
+export declare function displayUrl(url: URL): DisplayUrl;
+export declare function fetchUrl(runtime: VibesRuntime, input: FetchInput, ctx?: ToolCallContext): Promise<FetchOutput>;
+declare const _default: {
+    execute(input: FetchInput, runtime: VibesRuntime, ctx: ToolCallContext): Promise<FetchOutput>;
+};
+export default _default;
+//# sourceMappingURL=fetch.impl.d.ts.map

package/dist/fetch/tools/fetch/fetch.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.impl.d.ts","sourceRoot":"","sources":["../../../../src/fetch/tools/fetch/fetch.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAA0D,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAChH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAW7E,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAElE,yGAAyG;AACzG,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAyFrD,6EAA6E;AAC7E,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAY/C;AA0BD,wBAAsB,QAAQ,CAC7B,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,UAAU,EACjB,GAAG,CAAC,EAAE,eAAe,GACnB,OAAO,CAAC,WAAW,CAAC,CAgItB;;mBAIQ,UAAU,WACR,YAAY,OAChB,eAAe,GAClB,OAAO,CAAC,WAAW,CAAC;;AALxB,wBAQE"}

package/dist/fetch/tools/fetch/fetch.impl.js

@@ -0,0 +1,273 @@
+/**
+ * Fetch Tool Implementation
+ *
+ * HTTP fetch operations. Hardware-agnostic — uses native `fetch` plus
+ * pure string helpers; works in consumer runtimes and cloud workers.
+ *
+ * Credentials never leave through an output path: a URL with userinfo is
+ * refused before any request; credential-named query values are redacted in
+ * every log line and in the URL returned to the caller, and such a URL is
+ * never written to the scan cache or a knowledge item. Failures are typed
+ * `CapabilityError`s whose text carries no fetch error message (it echoes the
+ * URL); the response body is read through a declared byte cap.
+ */
+import * as z from 'zod/v4';
+import { getLogger } from '@vibesdotdev/logging';
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { checkPublicHttpsUrl } from '@vibesdotdev/shared/networking/ssrf';
+import { redactCredentials } from '@vibesdotdev/shared/utils';
+import {} from "../../../kinds/fetch-scan-cache.kind.js";
+import { extractHtmlContent } from "../../helpers.js";
+import { resolveToolCallerBearer } from "../../../agents/trusted-context.js";
+import { readBoundedText } from "../../../shared/http-failure.js";
+/** The most response bytes the fetch tool reads; a longer body is refused `fetch-response-too-large`. */
+export const MAX_FETCH_BODY_BYTES = 10 * 1024 * 1024;
+/** Query parameter names whose values are credentials (signed URLs, API keys, session tokens). */
+const CREDENTIAL_QUERY_NAME = /token|key|secret|sig|signature|password|passwd|auth|credential|session|code|jwt|bearer|x-amz-/i;
+/**
+ * Scan-cache + knowledge wiring for fetch. Mirrors the browser tool's policy:
+ *   - scan cache ALWAYS-ON (transparent), bypassed only by `forceRefresh` or a
+ *     `Cache-Control: no-cache` request header;
+ *   - knowledge creation OPT-IN per call (`ingestToKnowledge`).
+ * The scan-cache service lives behind the `tools/fetch-scan-cache` runtime kind;
+ * a missing implementation degrades to a plain fetch, logged once per call. Auth bearer is
+ * the caller's (`resolveToolCallerBearer`): the active request's, else the run-bound bearer.
+ */
+/** The scan-cache implementation, or the typed absence (`NOT_FOUND scan-cache-absent`) when not registered. */
+async function loadScanCache(runtime) {
+    try {
+        if (!runtime.assets('tools/fetch-scan-cache').has('fetch-scan-cache')) {
+            return new CapabilityError('The knowledge scan cache is not installed.', 'NOT_FOUND', {
+                reason: 'scan-cache-absent'
+            });
+        }
+        return await runtime.resolve('tools/fetch-scan-cache', 'fetch-scan-cache');
+    }
+    catch (error) {
+        return new CapabilityError('The knowledge scan cache is not installed.', 'NOT_FOUND', {
+            reason: 'scan-cache-absent',
+            cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+        });
+    }
+}
+/** A fresh cached scan, `null` on a miss, or the typed lookup failure (the declared-optional cache then falls through to a live fetch). */
+async function lookupCachedScan(access, url, input, headers) {
+    try {
+        const result = await access.service.lookupScan(url, { runtime: access.runtime, jwt: access.jwt, projectId: access.projectId }, { method: 'GET', forceRefresh: input.forceRefresh, headers });
+        return result ?? null;
+    }
+    catch (error) {
+        return new CapabilityError('The scan cache lookup failed.', 'UNAVAILABLE', {
+            reason: 'scan-cache-lookup-failed',
+            cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+        });
+    }
+}
+/** Persist a scan (idempotent); a failure is reported and the fetch result still returned (the cache is declared optional). */
+async function persistScan(access, url, scan, headers) {
+    const logger = getLogger('tools:fetch', access.runtime);
+    try {
+        await access.service.persistScan(url, { finalUrl: url, ...scan }, { runtime: access.runtime, jwt: access.jwt, projectId: access.projectId }, { method: 'GET', headers });
+    }
+    catch (error) {
+        logger.warn('Fetch tool: scan cache persist failed', { url: access.shownUrl, error: valueFreeFailure(CaughtFailureSchema.parse(error)) });
+    }
+}
+/** The opt-in knowledge item for the fetched content, or the typed failure the output carries. */
+async function ingestToKnowledge(access, url, content, knowledgeBaseId) {
+    try {
+        const item = await access.service.createKnowledgeItemFromScan({ title: url, content, url, knowledgeBaseId, projectId: access.projectId }, { runtime: access.runtime, jwt: access.jwt });
+        if (!item) {
+            return new CapabilityError('The fetched content could not be ingested to knowledge.', 'UNAVAILABLE', {
+                reason: 'knowledge-ingest-failed'
+            });
+        }
+        return item;
+    }
+    catch (error) {
+        return new CapabilityError('The fetched content could not be ingested to knowledge.', 'UNAVAILABLE', {
+            reason: 'knowledge-ingest-failed',
+            cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+        });
+    }
+}
+const ProjectMetadataSchema = z.object({ projectId: z.string().min(1) });
+function readProjectId(ctx) {
+    const parsed = ProjectMetadataSchema.safeParse(ctx?.metadata);
+    return parsed.success ? parsed.data.projectId : undefined;
+}
+/**
+ * `url` as it may appear in logs, outputs and storage: credential-named query
+ * values and credential-shaped text replaced. The second value says whether
+ * anything was replaced (such a URL is never persisted).
+ */
+export function displayUrl(url) {
+    const credentialValues = [];
+    for (const [name, value] of url.searchParams) {
+        if (CREDENTIAL_QUERY_NAME.test(name) && value.length > 0)
+            credentialValues.push(value);
+    }
+    const raw = url.toString();
+    let text = raw;
+    for (const value of credentialValues) {
+        text = text.split(value).join('[redacted]').split(encodeURIComponent(value)).join('[redacted]');
+    }
+    text = redactCredentials(text);
+    return { text, carriesCredentials: text !== raw };
+}
+/** The URL checked as a public https URL with no userinfo, or the typed refusal. */
+function admitUrl(url) {
+    if (!url) {
+        throw new CapabilityError('No URL was provided.', 'INVALID_INPUT', { reason: 'url-missing', retryable: false });
+    }
+    // SSRF floor: https + public host only (blocks loopback/RFC1918/metadata).
+    // `redirect: 'error'` below blocks redirect pivots to private hosts.
+    const check = checkPublicHttpsUrl(url);
+    if (!check.ok) {
+        throw new CapabilityError(`URL rejected: ${check.reason}`, 'INVALID_INPUT', {
+            reason: 'unsafe-url',
+            details: { reason: check.reason }
+        });
+    }
+    if (check.url.username !== '' || check.url.password !== '') {
+        throw new CapabilityError('URL rejected: credentials in the URL (user:password@) are not allowed.', 'INVALID_INPUT', {
+            reason: 'url-userinfo',
+            retryable: false,
+            recoveryHint: 'Pass credentials as a request header instead of in the URL.'
+        });
+    }
+    return check.url;
+}
+export async function fetchUrl(runtime, input, ctx) {
+    const { method = 'GET', headers = {}, body, timeout = 30000 } = input;
+    const logger = getLogger('tools:fetch', runtime);
+    const urlObj = admitUrl(input.url);
+    const canonicalUrl = urlObj.toString();
+    const shown = displayUrl(urlObj);
+    logger.info('Fetch tool: fetching content', { url: shown.text, method });
+    if (input.ingestToKnowledge && shown.carriesCredentials) {
+        throw new CapabilityError('A URL that carries credentials is never stored, so it cannot be ingested to knowledge.', 'INVALID_INPUT', {
+            reason: 'ingest-credential-url',
+            retryable: false,
+            recoveryHint: 'Pass the credential as a request header, or fetch without ingestToKnowledge.'
+        });
+    }
+    // Scan cache (always-on) for plain GETs of URLs that carry no credential. POST/PUT/etc. are never cached.
+    const jwt = method === 'GET' && !shown.carriesCredentials
+        ? ((await resolveToolCallerBearer(runtime, ctx)).bearer ?? undefined)
+        : undefined;
+    const cacheEligible = Boolean(jwt);
+    const scanService = cacheEligible && jwt ? await loadScanCache(runtime) : undefined;
+    if (scanService instanceof CapabilityError)
+        logger.warn('Fetch tool: scan cache unavailable; fetching live', { url: shown.text, error: scanService });
+    const access = scanService && !(scanService instanceof CapabilityError) && jwt
+        ? { service: scanService, runtime, jwt, projectId: readProjectId(ctx), shownUrl: shown.text }
+        : undefined;
+    if (access) {
+        const cached = await lookupCachedScan(access, canonicalUrl, input, headers);
+        if (cached instanceof CapabilityError) {
+            logger.warn('Fetch tool: scan cache lookup failed; fetching live', { url: shown.text, error: cached });
+        }
+        else if (cached) {
+            return {
+                content: cached.pageText ?? cached.analysisText ?? '',
+                statusCode: cached.statusCode ?? 200,
+                contentType: cached.mimeType ?? 'text/plain',
+                url: cached.finalUrl ?? cached.url,
+                fromCache: true,
+                scannedAt: cached.scannedAt
+            };
+        }
+    }
+    const controller = new AbortController();
+    const disarmTimeout = runtime.lifecycle.timeout(() => controller.abort(), timeout);
+    let response;
+    let text;
+    try {
+        const requestOptions = {
+            method,
+            headers: {
+                // Product identification, not a service endpoint. Callers may override it.
+                'User-Agent': 'Vibes/1.0',
+                Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
+                'Accept-Language': 'en-US,en;q=0.5',
+                ...headers
+            },
+            signal: controller.signal,
+            redirect: 'error'
+        };
+        if (body && ['POST', 'PUT', 'PATCH'].includes(method)) {
+            requestOptions.body = body;
+        }
+        response = await fetch(canonicalUrl, requestOptions);
+        const read = await readBoundedText(response, MAX_FETCH_BODY_BYTES);
+        if (read.truncated) {
+            throw new CapabilityError(`The response is larger than ${MAX_FETCH_BODY_BYTES} bytes.`, 'INVALID_INPUT', {
+                reason: 'fetch-response-too-large',
+                retryable: false,
+                details: { maxBytes: MAX_FETCH_BODY_BYTES, url: shown.text }
+            });
+        }
+        text = read.text;
+    }
+    catch (fetchError) {
+        if (fetchError instanceof CapabilityError)
+            throw fetchError;
+        // The fetch error's own text echoes the URL (query secrets included): only its value-free facts are kept.
+        const facts = valueFreeFailure(CaughtFailureSchema.parse(fetchError));
+        if (facts.name === 'AbortError' || facts.name === 'TimeoutError') {
+            throw new CapabilityError(`The request timed out after ${timeout}ms.`, 'TIMEOUT', {
+                reason: 'fetch-timeout',
+                retryable: true,
+                details: { url: shown.text },
+                cause: valueFreeFailure(CaughtFailureSchema.parse(fetchError))
+            });
+        }
+        throw new CapabilityError('The URL could not be fetched.', 'UNAVAILABLE', {
+            reason: 'fetch-failed',
+            retryable: true,
+            details: { url: shown.text, failure: facts.name },
+            cause: valueFreeFailure(CaughtFailureSchema.parse(fetchError))
+        });
+    }
+    finally {
+        disarmTimeout();
+    }
+    const contentType = response.headers.get('content-type') || 'text/plain';
+    let content = text;
+    if (contentType.includes('text/html')) {
+        content = extractHtmlContent(text).content;
+    }
+    logger.info('Fetch tool: fetched', { url: shown.text, status: response.status, length: content.length });
+    const output = {
+        content,
+        statusCode: response.status,
+        contentType,
+        url: shown.text,
+        fromCache: false,
+        scannedAt: new Date().toISOString()
+    };
+    // Persist to the scan cache (idempotent) + opt-in knowledge create.
+    // Only successful GETs of credential-free URLs are cached/ingested.
+    if (access && response.ok) {
+        await persistScan(access, canonicalUrl, { statusCode: response.status, pageText: content, mimeType: contentType }, headers);
+        if (input.ingestToKnowledge && content.trim().length > 0) {
+            const item = await ingestToKnowledge(access, canonicalUrl, content, input.knowledgeBaseId);
+            if (item instanceof CapabilityError) {
+                logger.warn('Fetch tool: knowledge ingest failed', { url: shown.text, error: item });
+                output.knowledgeIngestFailure = { code: item.code, reason: item.reason };
+            }
+            else if (item) {
+                output.knowledgeItems = [{ id: item.id, title: item.title }];
+                output.knowledgeItemIds = [item.id];
+            }
+        }
+    }
+    return output;
+}
+export default {
+    async execute(input, runtime, ctx) {
+        return fetchUrl(runtime, input, ctx);
+    }
+};
+//# sourceMappingURL=fetch.impl.js.map

package/dist/fetch/tools/fetch/fetch.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.impl.js","sourceRoot":"","sources":["../../../../src/fetch/tools/fetch/fetch.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AAEhH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAIN,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAGlE,yGAAyG;AACzG,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,kGAAkG;AAClG,MAAM,qBAAqB,GAAG,gGAAgG,CAAC;AAE/H;;;;;;;;GAQG;AAEH,+GAA+G;AAC/G,KAAK,UAAU,aAAa,CAAC,OAAqB;IACjD,IAAI,CAAC;QACJ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,eAAe,CAAC,4CAA4C,EAAE,WAAW,EAAE;gBACrF,MAAM,EAAE,mBAAmB;aAC3B,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,OAAO,CAAC,OAAO,CAA0B,wBAAwB,EAAE,kBAAkB,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,eAAe,CAAC,4CAA4C,EAAE,WAAW,EAAE;YACrF,MAAM,EAAE,mBAAmB;YAC3B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACzD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAWD,2IAA2I;AAC3I,KAAK,UAAU,gBAAgB,CAAC,MAAuB,EAAE,GAAW,EAAE,KAAiB,EAAE,OAA+B;IACvH,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7L,OAAO,MAAM,IAAI,IAAI,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,eAAe,CAAC,+BAA+B,EAAE,aAAa,EAAE;YAC1E,MAAM,EAAE,0BAA0B;YAClC,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACzD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,+HAA+H;AAC/H,KAAK,UAAU,WAAW,CAAC,MAAuB,EAAE,GAAW,EAAE,IAAgE,EAAE,OAA+B;IACjK,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1K,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3I,CAAC;AACF,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,iBAAiB,CAAC,MAAuB,EAAE,GAAW,EAAE,OAAe,EAAE,eAAmC;IAC1H,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACxL,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,IAAI,eAAe,CAAC,yDAAyD,EAAE,aAAa,EAAE;gBACpG,MAAM,EAAE,yBAAyB;aACjC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,eAAe,CAAC,yDAAyD,EAAE,aAAa,EAAE;YACpG,MAAM,EAAE,yBAAyB;YACjC,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACzD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEzE,SAAS,aAAa,CAAC,GAAqB;IAC3C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,GAAQ;IAClC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QAC9C,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,KAAK,GAAG,EAAE,CAAC;AACnD,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAC,GAAuB;IACxC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,iBAAiB,KAAK,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE;YAC3E,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;SACjC,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CAAC,wEAAwE,EAAE,eAAe,EAAE;YACpH,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,6DAA6D;SAC3E,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,OAAqB,EACrB,KAAiB,EACjB,GAAqB;IAErB,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC;IACtE,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CAAC,wFAAwF,EAAE,eAAe,EAAE;YACpI,MAAM,EAAE,uBAAuB;YAC/B,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,8EAA8E;SAC5F,CAAC,CAAC;IACJ,CAAC;IAED,0GAA0G;IAC1G,MAAM,GAAG,GAAG,MAAM,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,kBAAkB;QACxD,CAAC,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QACrE,CAAC,CAAC,SAAS,CAAC;IACb,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,aAAa,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,WAAW,YAAY,eAAe;QAAE,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAgC,WAAW,IAAI,CAAC,CAAC,WAAW,YAAY,eAAe,CAAC,IAAI,GAAG;QAC1G,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;QAC7F,CAAC,CAAC,SAAS,CAAC;IACb,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5E,IAAI,MAAM,YAAY,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACxG,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YACnB,OAAO;gBACN,OAAO,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,IAAI,EAAE;gBACrD,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;gBACpC,WAAW,EAAE,MAAM,CAAC,QAAQ,IAAI,YAAY;gBAC5C,GAAG,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG;gBAClC,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,MAAM,CAAC,SAAS;aAC3B,CAAC;QACH,CAAC;IACF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;IAEnF,IAAI,QAAkB,CAAC;IACvB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACJ,MAAM,cAAc,GAAgB;YACnC,MAAM;YACN,OAAO,EAAE;gBACR,2EAA2E;gBAC3E,YAAY,EAAE,WAAW;gBACzB,MAAM,EAAE,iEAAiE;gBACzE,iBAAiB,EAAE,gBAAgB;gBACnC,GAAG,OAAO;aACV;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,OAAO;SACjB,CAAC;QACF,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,cAAc,CAAC,IAAI,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,eAAe,CAAC,+BAA+B,oBAAoB,SAAS,EAAE,eAAe,EAAE;gBACxG,MAAM,EAAE,0BAA0B;gBAClC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE;aAC5D,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACrB,IAAI,UAAU,YAAY,eAAe;YAAE,MAAM,UAAU,CAAC;QAC5D,0GAA0G;QAC1G,MAAM,KAAK,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClE,MAAM,IAAI,eAAe,CAAC,+BAA+B,OAAO,KAAK,EAAE,SAAS,EAAE;gBACjF,MAAM,EAAE,eAAe;gBACvB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE;gBAC5B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;aAC9D,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,+BAA+B,EAAE,aAAa,EAAE;YACzE,MAAM,EAAE,cAAc;YACtB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE;YACjD,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;SAC9D,CAAC,CAAC;IACJ,CAAC;YAAS,CAAC;QACV,aAAa,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC;IACzE,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAEzG,MAAM,MAAM,GAAgB;QAC3B,OAAO;QACP,UAAU,EAAE,QAAQ,CAAC,MAAM;QAC3B,WAAW;QACX,GAAG,EAAE,KAAK,CAAC,IAAI;QACf,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IAEF,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,MAAM,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;QAC5H,IAAI,KAAK,CAAC,iBAAiB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;YAC3F,IAAI,IAAI,YAAY,eAAe,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrF,MAAM,CAAC,sBAAsB,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1E,CAAC;iBAAM,IAAI,IAAI,EAAE,CAAC;gBACjB,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7D,MAAM,CAAC,gBAAgB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,eAAe;IACd,KAAK,CAAC,OAAO,CACZ,KAAiB,EACjB,OAAqB,EACrB,GAAoB;QAEpB,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;CACD,CAAC"}

package/dist/fetch/tools/fetch/schemas/index.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Fetch Tool Schemas
+ *
+ * Input/output schemas for the fetch tool.
+ * Separated from implementation to avoid pulling server-only code into manifests.
+ */
+import * as z from 'zod/v4';
+export declare const FetchInputSchema: z.ZodObject<{
+    url: z.ZodURL;
+    method: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+        OPTIONS: "OPTIONS";
+        HEAD: "HEAD";
+    }>>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    body: z.ZodOptional<z.ZodString>;
+    timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    forceRefresh: z.ZodOptional<z.ZodBoolean>;
+    ingestToKnowledge: z.ZodOptional<z.ZodBoolean>;
+    knowledgeBaseId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const FetchOutputSchema: z.ZodObject<{
+    content: z.ZodString;
+    statusCode: z.ZodNumber;
+    contentType: z.ZodString;
+    url: z.ZodString;
+    fromCache: z.ZodOptional<z.ZodBoolean>;
+    scannedAt: z.ZodOptional<z.ZodString>;
+    knowledgeItems: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    knowledgeItemIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    knowledgeIngestFailure: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type FetchInput = z.infer<typeof FetchInputSchema>;
+export type FetchOutput = z.infer<typeof FetchOutputSchema>;
+//# sourceMappingURL=index.d.ts.map

package/dist/fetch/tools/fetch/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/fetch/tools/fetch/schemas/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;iBA2B3B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;iBAmB5B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/fetch/tools/fetch/schemas/index.js

@@ -0,0 +1,54 @@
+/**
+ * Fetch Tool Schemas
+ *
+ * Input/output schemas for the fetch tool.
+ * Separated from implementation to avoid pulling server-only code into manifests.
+ */
+import * as z from 'zod/v4';
+export const FetchInputSchema = z.object({
+    url: z.url().describe('The URL to fetch content from'),
+    method: z
+        .enum(['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'HEAD', 'OPTIONS'])
+        .optional()
+        .default('GET')
+        .describe('HTTP method to use'),
+    headers: z
+        .record(z.string(), z.string())
+        .optional()
+        .describe('Request headers (string key/value pairs)'),
+    body: z.string().optional().describe('Request body for POST/PUT/PATCH requests'),
+    timeout: z.number().optional().default(30000).describe('Request timeout in milliseconds'),
+    forceRefresh: z
+        .boolean()
+        .optional()
+        .describe('Bypass the scan cache and re-fetch even if a fresh cached scan exists.'),
+    ingestToKnowledge: z
+        .boolean()
+        .optional()
+        .describe('Opt-in: create a knowledge item from the fetched content. Off by default so routine fetches do not flood the knowledge base.'),
+    knowledgeBaseId: z
+        .string()
+        .optional()
+        .describe('Target knowledge base for ingestToKnowledge. Omit to use the user default base.')
+});
+export const FetchOutputSchema = z.object({
+    content: z.string().describe('The fetched content'),
+    statusCode: z.number().describe('HTTP status code'),
+    contentType: z.string().describe('The content type of the response'),
+    url: z.string().describe('The fetched URL'),
+    fromCache: z.boolean().optional().describe('True when served from the scan cache (no re-fetch).'),
+    scannedAt: z
+        .string()
+        .optional()
+        .describe('ISO timestamp the (possibly cached) fetch completed at.'),
+    knowledgeItems: z
+        .array(z.object({ id: z.string(), title: z.string().optional() }))
+        .optional()
+        .describe('Knowledge items created from the fetched content (when ingestToKnowledge).'),
+    knowledgeItemIds: z.array(z.string()).optional(),
+    knowledgeIngestFailure: z
+        .object({ code: z.string(), reason: z.string() })
+        .optional()
+        .describe('Set when ingestToKnowledge was requested and the knowledge item could not be created; the fetch itself succeeded.')
+});
+//# sourceMappingURL=index.js.map

package/dist/fetch/tools/fetch/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/fetch/tools/fetch/schemas/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACtD,MAAM,EAAE,CAAC;SACP,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;SAClE,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,oBAAoB,CAAC;IAChC,OAAO,EAAE,CAAC;SACR,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9B,QAAQ,EAAE;SACV,QAAQ,CAAC,0CAA0C,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IAChF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACzF,YAAY,EAAE,CAAC;SACb,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACpF,iBAAiB,EAAE,CAAC;SAClB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CACR,8HAA8H,CAC9H;IACF,eAAe,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iFAAiF,CAAC;CAC7F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACnD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACpE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IACjG,SAAS,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yDAAyD,CAAC;IACrE,cAAc,EAAE,CAAC;SACf,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SACjE,QAAQ,EAAE;SACV,QAAQ,CAAC,4EAA4E,CAAC;IACxF,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,sBAAsB,EAAE,CAAC;SACvB,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SAChD,QAAQ,EAAE;SACV,QAAQ,CAAC,mHAAmH,CAAC;CAC/H,CAAC,CAAC"}

package/dist/fetch/tools/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Fetch Tools
+ *
+ * Tools are discovered via runtime file pattern:
+ *   {id}.tools.tool.descriptor.ts    -> createRuntimeAsset({...})
+ *   {id}.tools.tools.tool.impl.consumer.ts -> export default function(...)
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/fetch/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/fetch/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC"}

package/dist/fetch/tools/index.js

@@ -0,0 +1,9 @@
+/**
+ * Fetch Tools
+ *
+ * Tools are discovered via runtime file pattern:
+ *   {id}.tools.tool.descriptor.ts    -> createRuntimeAsset({...})
+ *   {id}.tools.tools.tool.impl.consumer.ts -> export default function(...)
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/fetch/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/fetch/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC"}

package/dist/hints/model.d.ts

@@ -0,0 +1,2 @@
+export * from '@vibesdotdev/ai-schemas/hints/model';
+//# sourceMappingURL=model.d.ts.map

package/dist/hints/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/hints/model.ts"],"names":[],"mappings":"AACA,cAAc,qCAAqC,CAAC"}

package/dist/hints/model.js

@@ -0,0 +1,3 @@
+// Re-export shim — moved to @vibesdotdev/ai-schemas (contract floor).
+export * from '@vibesdotdev/ai-schemas/hints/model';
+//# sourceMappingURL=model.js.map