@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.4

package/dist/utils/walk-glob.js

@@ -0,0 +1,73 @@
+/**
+ * Recursive glob walk through the handed runtime's filesystem adapter, so it
+ * runs wherever the adapter does. A missing root throws the adapter's error; a
+ * nested directory removed mid-walk is skipped.
+ */
+/** Collect files under `cwd` whose relative path matches `pattern`. */
+export async function walkGlob(fs, pattern, options) {
+    const matcher = globToRegExp(normalizeGlob(pattern));
+    const files = [];
+    const root = options.cwd;
+    const visit = async (dir, relative) => {
+        for (const entry of await fs.list(dir)) {
+            if (options.dot === false && entry.name.startsWith('.'))
+                continue;
+            const rel = relative ? `${relative}/${entry.name}` : entry.name;
+            if (entry.kind === 'directory') {
+                const child = fs.join(dir, entry.name);
+                // A directory removed since its parent was listed is no longer part of the tree.
+                if (await fs.exists(child))
+                    await visit(child, rel);
+                continue;
+            }
+            if (entry.kind !== 'file' && options.onlyFiles !== false)
+                continue;
+            if (!matcher.test(rel))
+                continue;
+            files.push(options.absolute ? fs.join(root, rel) : rel);
+        }
+    };
+    await visit(root, '');
+    return files;
+}
+function normalizeGlob(pattern) {
+    return pattern.replaceAll('\\', '/');
+}
+/** Convert a glob (`**`, `*`, `?`) to a full-string RegExp. */
+export function globToRegExp(pattern) {
+    let out = '^';
+    let index = 0;
+    while (index < pattern.length) {
+        if (pattern.startsWith('**/', index)) {
+            out += '(?:.*/)?';
+            index += 3;
+            continue;
+        }
+        if (pattern.startsWith('**', index)) {
+            out += '.*';
+            index += 2;
+            continue;
+        }
+        const char = pattern[index] ?? '';
+        if (char === '*') {
+            out += '[^/]*';
+            index += 1;
+            continue;
+        }
+        if (char === '?') {
+            out += '[^/]';
+            index += 1;
+            continue;
+        }
+        if ('+^$()[]{}|.\\'.includes(char)) {
+            out += `\\${char}`;
+            index += 1;
+            continue;
+        }
+        out += char;
+        index += 1;
+    }
+    out += '$';
+    return new RegExp(out);
+}
+//# sourceMappingURL=walk-glob.js.map

package/dist/utils/walk-glob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk-glob.js","sourceRoot":"","sources":["../../src/utils/walk-glob.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,EAAsB,EACtB,OAAe,EACf,OAAwB;IAExB,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC;IAEzB,MAAM,KAAK,GAAG,KAAK,EAAE,GAAW,EAAE,QAAgB,EAAiB,EAAE;QACpE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAChE,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,iFAAiF;gBACjF,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACpD,SAAS;YACV,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;gBAAE,SAAS;YACnE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACrC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,YAAY,CAAC,OAAe;IAC3C,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACtC,GAAG,IAAI,UAAU,CAAC;YAClB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACV,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACrC,GAAG,IAAI,IAAI,CAAC;YACZ,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACV,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,GAAG,IAAI,OAAO,CAAC;YACf,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACV,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,GAAG,IAAI,MAAM,CAAC;YACd,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACV,CAAC;QACD,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACV,CAAC;QACD,GAAG,IAAI,IAAI,CAAC;QACZ,KAAK,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,GAAG,IAAI,GAAG,CAAC;IACX,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC"}

package/dist/webhooks/delivery.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Durable webhook acceptance and per-consumer delivery.
+ *
+ * The provider claim, outbound intents, and one row per consumer are persisted
+ * before HTTP acknowledgement. Consumers run under compare-and-set leases, so
+ * a retry never replays a sibling that already produced a durable receipt.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel/api/runtime';
+import type { WebhookAcceptResult, WebhookIngressRateDecision } from './schemas/webhook-delivery.ts';
+import type { WebhookDispatchResult, WebhookIngressRejectionInput, WebhookReconcileResult } from './schemas/webhook-service.ts';
+import type { WebhookPreparation } from './schemas/webhook-preparation.ts';
+import type { WebhookStore } from './store/types.ts';
+export declare const MAX_WEBHOOK_BODY_BYTES = 1048576;
+export interface WebhookDeliveryOptions {
+    runtime: VibesRuntime;
+    store: WebhookStore;
+    /**
+     * Hard wall-clock bound for one consumer. The bound is clamped below the
+     * delivery lease so a timed-out I/O operation is aborted before reclaim.
+     * Tests may lower it to exercise timeout behavior without waiting a minute.
+     */
+    consumerTimeoutMs?: number;
+}
+/**
+ * Awaited durability boundary. Rejections and signed no-dispatch handshakes do
+ * not create attacker-amplified request rows.
+ */
+export declare function acceptPreparedWebhook(preparation: WebhookPreparation, options: WebhookDeliveryOptions): Promise<WebhookAcceptResult>;
+export declare function dispatchAcceptedWebhook(requestId: string, options: WebhookDeliveryOptions): Promise<WebhookDispatchResult>;
+export declare function reconcileWebhooks(options: WebhookDeliveryOptions & {
+    limit?: number;
+}): Promise<WebhookReconcileResult>;
+export declare function recordWebhookIngressRejection(input: WebhookIngressRejectionInput, options: WebhookDeliveryOptions): Promise<WebhookIngressRateDecision>;
+//# sourceMappingURL=delivery.d.ts.map

package/dist/webhooks/delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../../src/webhooks/delivery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAGpE,OAAO,KAAK,EACX,mBAAmB,EAMnB,0BAA0B,EAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACX,qBAAqB,EACrB,4BAA4B,EAC5B,sBAAsB,EACtB,MAAM,8BAA8B,CAAC;AAMtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAWrD,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAEhD,MAAM,WAAW,sBAAsB;IACtC,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;IACpB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AA6DD;;;GAGG;AACH,wBAAsB,qBAAqB,CAC1C,WAAW,EAAE,kBAAkB,EAC/B,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAwH9B;AAqHD,wBAAsB,uBAAuB,CAC5C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,qBAAqB,CAAC,CA2ChC;AAED,wBAAsB,iBAAiB,CACtC,OAAO,EAAE,sBAAsB,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD,OAAO,CAAC,sBAAsB,CAAC,CAsBjC;AAOD,wBAAsB,6BAA6B,CAClD,KAAK,EAAE,4BAA4B,EACnC,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CA8BrC"}

package/dist/webhooks/delivery.js

@@ -0,0 +1,361 @@
+/**
+ * Durable webhook acceptance and per-consumer delivery.
+ *
+ * The provider claim, outbound intents, and one row per consumer are persisted
+ * before HTTP acknowledgement. Consumers run under compare-and-set leases, so
+ * a retry never replays a sibling that already produced a durable receipt.
+ */
+import { getLogger } from '@vibesdotdev/logging';
+import { CapabilityError, valueFreeFailure } from '@vibesdotdev/kernel';
+import { attempt, failureText } from "../shared/attempt.js";
+import { isTerminalWebhookStatus } from "./lifecycle.js";
+const WEBHOOK_BUS = 'tools/webhook';
+const DELIVERY_LEASE_MS = 120_000;
+const DEFAULT_CONSUMER_TIMEOUT_MS = 60_000;
+const MAX_RETRY_DELAY_MS = 60 * 60_000;
+const INGRESS_RATE_WINDOW_MS = 60_000;
+const INGRESS_RATE_RING_SLOTS = 15;
+const INGRESS_RATE_SHARDS = 64;
+const INGRESS_REJECTION_LIMIT = 20;
+export const MAX_WEBHOOK_BODY_BYTES = 1_048_576;
+function nowIso() {
+    return new Date().toISOString();
+}
+function consumerMatches(descriptor, source, eventType) {
+    return ((!descriptor.sources || descriptor.sources.includes(source)) &&
+        (!descriptor.eventTypes || descriptor.eventTypes.includes(eventType)));
+}
+async function matchingConsumers(runtime, source, eventType) {
+    return (await runtime
+        .query('tools/webhook-consumer')
+        .descriptorsAsync())
+        .filter((descriptor) => consumerMatches(descriptor, source, eventType))
+        .sort((a, b) => a.id.localeCompare(b.id));
+}
+function deliveryPayload(preparation) {
+    const request = preparation.request;
+    const payload = {
+        request_id: request.id,
+        source: request.source,
+        event_type: request.event_type,
+        parsed_payload: preparation.result.parsed_payload ?? {},
+        outbox_specs: preparation.outbox_specs,
+        created_at: request.created_at
+    };
+    if (preparation.task_spec)
+        payload.task_spec = preparation.task_spec;
+    return payload;
+}
+async function policyErrorFor(store, request) {
+    const config = await store.loadConfig();
+    const sourceConfig = config.sources[request.source];
+    return !sourceConfig
+        ? `Unknown source: ${request.source}`
+        : !sourceConfig.enabled
+            ? `Source ${request.source} is disabled`
+            : sourceConfig.allowed_events.length > 0 &&
+                !sourceConfig.allowed_events.includes(request.event_type)
+                ? `Event ${request.source}:${request.event_type} is disabled`
+                : null;
+}
+/**
+ * Awaited durability boundary. Rejections and signed no-dispatch handshakes do
+ * not create attacker-amplified request rows.
+ */
+export async function acceptPreparedWebhook(preparation, options) {
+    const runtime = options.runtime;
+    const store = options.store;
+    const request = preparation.request;
+    if (preparation.result.status !== 'accepted') {
+        const refused = {
+            request_id: request.id,
+            claimed: false,
+            duplicate: false,
+            dispatch_required: false,
+            status: preparation.result.status,
+            event_type: request.event_type
+        };
+        if (preparation.result.error)
+            refused.error = preparation.result.error;
+        return refused;
+    }
+    if (preparation.dispatch_mode === 'none') {
+        return {
+            request_id: request.id,
+            claimed: true,
+            duplicate: false,
+            dispatch_required: false,
+            status: 'accepted',
+            event_type: request.event_type
+        };
+    }
+    const policyError = await policyErrorFor(store, request);
+    if (policyError) {
+        return {
+            request_id: request.id,
+            claimed: false,
+            duplicate: false,
+            dispatch_required: false,
+            status: 'rejected',
+            event_type: request.event_type,
+            error: policyError
+        };
+    }
+    if (!request.idempotency_key) {
+        return {
+            request_id: request.id,
+            claimed: false,
+            duplicate: false,
+            dispatch_required: false,
+            status: 'error',
+            event_type: request.event_type,
+            error: `Dispatchable webhook ${request.source}:${request.event_type} has no provider idempotency key`
+        };
+    }
+    const timestamp = nowIso();
+    const queuedRequest = {
+        ...request,
+        status: 'queued',
+        updated_at: timestamp
+    };
+    const consumers = await matchingConsumers(runtime, request.source, request.event_type);
+    const payload = deliveryPayload(preparation);
+    const deliveries = consumers.map((consumer) => ({
+        id: `${request.id}.${consumer.id}`,
+        webhook_request_id: request.id,
+        consumer_id: consumer.id,
+        payload,
+        status: 'pending',
+        attempt_count: 0,
+        max_attempts: consumer.maxAttempts,
+        next_attempt_at: timestamp,
+        created_at: timestamp,
+        updated_at: timestamp
+    }));
+    const acceptance = await store.acceptRequest(queuedRequest, preparation.outbox_specs.map((entry) => ({
+        ...entry,
+        webhook_request_id: request.id
+    })), deliveries);
+    if (acceptance.claimed) {
+        // The receipt hook is advisory: the request is already durable, so a failed
+        // emit is logged by its value-free facts and acceptance continues.
+        const emitted = await attempt(() => runtime.hooks(WEBHOOK_BUS).emit('received', {
+            request_id: acceptance.request.id,
+            source: request.source,
+            event_type: request.event_type,
+            raw_body: request.raw_body,
+            raw_headers: request.raw_headers,
+            created_at: request.created_at
+        }));
+        if (!emitted.ok) {
+            getLogger('tools.webhooks.delivery', runtime).warn('webhook received emit failed', {
+                failure: valueFreeFailure(emitted.failure)
+            });
+        }
+    }
+    if (acceptance.deliveries.length === 0 && acceptance.claimed) {
+        await store.updateRequest(acceptance.request.id, {
+            status: 'completed',
+            completion_reason: 'no-durable-consumers'
+        });
+    }
+    return {
+        request_id: acceptance.request.id,
+        claimed: acceptance.claimed,
+        duplicate: !acceptance.claimed,
+        dispatch_required: acceptance.deliveries.some((delivery) => delivery.status !== 'succeeded' && delivery.status !== 'dead_lettered'),
+        status: 'accepted',
+        event_type: request.event_type
+    };
+}
+function retryDelayMs(attempt, requested) {
+    if (requested !== undefined)
+        return Math.max(1_000, Math.min(MAX_RETRY_DELAY_MS, requested));
+    return Math.min(MAX_RETRY_DELAY_MS, 5_000 * 2 ** Math.max(0, attempt - 1));
+}
+async function projectRequestStatus(store, requestId) {
+    const request = await store.getRequest(requestId);
+    if (!request || isTerminalWebhookStatus(request.status))
+        return;
+    const deliveries = await store.listDeliveriesForRequest(requestId);
+    if (deliveries.length === 0) {
+        await store.updateRequest(requestId, {
+            status: 'completed',
+            completion_reason: 'no-durable-consumers'
+        });
+        return;
+    }
+    const allSucceeded = deliveries.every((delivery) => delivery.status === 'succeeded');
+    const allTerminal = deliveries.every((delivery) => delivery.status === 'succeeded' || delivery.status === 'dead_lettered');
+    const anyDead = deliveries.some((delivery) => delivery.status === 'dead_lettered');
+    const anyRetry = deliveries.some((delivery) => delivery.status === 'retry_wait');
+    const anyLeased = deliveries.some((delivery) => delivery.status === 'leased');
+    await store.updateRequest(requestId, {
+        status: allSucceeded
+            ? 'completed'
+            : allTerminal && anyDead
+                ? 'dead_lettered'
+                : anyRetry
+                    ? 'retrying'
+                    : anyLeased
+                        ? 'processing'
+                        : 'queued',
+        ...(allSucceeded
+            ? { completion_reason: 'all-consumers-acknowledged' }
+            : allTerminal && anyDead
+                ? { completion_reason: 'consumer-dead-lettered' }
+                : {})
+    });
+}
+async function applyConsumerResult(store, delivery, workerId, result) {
+    const now = nowIso();
+    switch (result.status) {
+        case 'succeeded':
+        case 'skipped': {
+            const completed = await store.completeDelivery({
+                deliveryId: delivery.id,
+                workerId,
+                now,
+                receipt: { outcome: result.status, ...result.receipt }
+            });
+            if (!completed)
+                throw new Error(`Lost webhook delivery lease for '${delivery.id}'`);
+            return 'succeeded';
+        }
+        case 'permanent-failure': {
+            const failed = await store.deadLetterDelivery(delivery.id, workerId, now, result.error);
+            if (!failed)
+                throw new Error(`Lost webhook delivery lease for '${delivery.id}'`);
+            return 'dead_lettered';
+        }
+        case 'retry': {
+            if (delivery.attempt_count >= delivery.max_attempts) {
+                const failed = await store.deadLetterDelivery(delivery.id, workerId, now, result.error);
+                if (!failed)
+                    throw new Error(`Lost webhook delivery lease for '${delivery.id}'`);
+                return 'dead_lettered';
+            }
+            const retried = await store.retryDelivery({
+                deliveryId: delivery.id,
+                workerId,
+                now,
+                nextAttemptAt: new Date(Date.now() + retryDelayMs(delivery.attempt_count, result.retryAfterMs)).toISOString(),
+                error: result.error
+            });
+            if (!retried)
+                throw new Error(`Lost webhook delivery lease for '${delivery.id}'`);
+            return 'retrying';
+        }
+    }
+}
+async function deliverBeforeLeaseExpiry(runtime, consumer, payload, requestedTimeoutMs) {
+    const timeoutMs = Math.max(1, Math.min(requestedTimeoutMs ?? DEFAULT_CONSUMER_TIMEOUT_MS, DELIVERY_LEASE_MS - 1_000));
+    const controller = new AbortController();
+    const deadline = Promise.withResolvers();
+    const disarm = runtime.lifecycle.timeout(() => {
+        controller.abort(new Error(`Webhook consumer exceeded ${timeoutMs}ms deadline`));
+        deadline.reject(new CapabilityError(`Webhook consumer timed out after ${timeoutMs}ms.`, 'TIMEOUT', {
+            reason: 'webhook-consumer-timeout',
+            details: { timeoutMs }
+        }));
+    }, timeoutMs);
+    try {
+        const context = { signal: controller.signal };
+        return await Promise.race([consumer.deliver(payload, context), deadline.promise]);
+    }
+    finally {
+        disarm();
+    }
+}
+export async function dispatchAcceptedWebhook(requestId, options) {
+    const runtime = options.runtime;
+    const store = options.store;
+    const workerId = `webhook:${crypto.randomUUID()}`;
+    const deliveries = await store.listDeliveriesForRequest(requestId);
+    const result = {
+        request_id: requestId,
+        attempted: 0,
+        succeeded: 0,
+        retrying: 0,
+        dead_lettered: 0
+    };
+    for (const candidate of deliveries) {
+        // A preceding consumer may take meaningful wall time. Lease each delivery
+        // from its actual claim instant so later siblings never begin with a stale
+        // (or already expired) lease.
+        const claimTime = new Date();
+        const claim = await store.claimDelivery({
+            deliveryId: candidate.id,
+            workerId,
+            now: claimTime.toISOString(),
+            leaseExpiresAt: new Date(claimTime.getTime() + DELIVERY_LEASE_MS).toISOString()
+        });
+        if (!claim.claimed)
+            continue;
+        result.attempted++;
+        // A consumer that fails to resolve or to deliver is retried; the delivery
+        // records a typed failure's own (value-free) message, else its class and code.
+        const delivered = await attempt(async () => {
+            const consumer = await runtime
+                .query('tools/webhook-consumer')
+                .withId(claim.delivery.consumer_id)
+                .resolve();
+            return deliverBeforeLeaseExpiry(runtime, consumer, claim.delivery.payload, options.consumerTimeoutMs);
+        });
+        const outcome = delivered.ok
+            ? delivered.value
+            : { status: 'retry', error: failureText(delivered.failure) };
+        const state = await applyConsumerResult(store, claim.delivery, workerId, outcome);
+        result[state]++;
+    }
+    await projectRequestStatus(store, requestId);
+    return result;
+}
+export async function reconcileWebhooks(options) {
+    const store = options.store;
+    const limit = Math.max(1, Math.min(options.limit ?? 50, 200));
+    const due = await store.listDueDeliveries(nowIso(), limit);
+    const requestIds = [...new Set(due.map((delivery) => delivery.webhook_request_id))];
+    const result = {
+        request_id: requestIds[0] ?? 'none',
+        attempted: 0,
+        succeeded: 0,
+        retrying: 0,
+        dead_lettered: 0,
+        pruned: 0
+    };
+    for (const requestId of requestIds) {
+        const dispatch = await dispatchAcceptedWebhook(requestId, options);
+        result.attempted += dispatch.attempted;
+        result.succeeded += dispatch.succeeded;
+        result.retrying += dispatch.retrying;
+        result.dead_lettered += dispatch.dead_lettered;
+    }
+    result.pruned = (await store.pruneWebhookData(nowIso(), limit)).removed;
+    return result;
+}
+async function rateShard(clientKey) {
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(clientKey));
+    return new Uint8Array(digest)[0] % INGRESS_RATE_SHARDS;
+}
+export async function recordWebhookIngressRejection(input, options) {
+    const runtime = options.runtime;
+    const store = options.store;
+    const sources = new Set((await runtime
+        .query('tools/webhook-event-definition')
+        .descriptorsAsync()).map((descriptor) => descriptor.source));
+    const source = sources.has(input.source) ? input.source : 'unknown';
+    const now = input.now ?? new Date();
+    const epochWindow = Math.floor(now.getTime() / INGRESS_RATE_WINDOW_MS);
+    return store.consumeIngressRejection({
+        source,
+        reason: input.reason,
+        shard: await rateShard(input.clientKey || 'unknown'),
+        windowStart: new Date(epochWindow * INGRESS_RATE_WINDOW_MS).toISOString(),
+        windowSlot: epochWindow % INGRESS_RATE_RING_SLOTS,
+        expiresAt: new Date((epochWindow + INGRESS_RATE_RING_SLOTS) * INGRESS_RATE_WINDOW_MS).toISOString(),
+        limit: INGRESS_REJECTION_LIMIT,
+        retryAfterSeconds: Math.max(1, Math.ceil(((epochWindow + 1) * INGRESS_RATE_WINDOW_MS - now.getTime()) / 1_000))
+    });
+}
+//# sourceMappingURL=delivery.js.map

package/dist/webhooks/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../src/webhooks/delivery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAwBzD,MAAM,WAAW,GAAG,eAAe,CAAC;AACpC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAC3C,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AACvC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAahD,SAAS,MAAM;IACd,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CACvB,UAAqC,EACrC,MAAc,EACd,SAAiB;IAEjB,OAAO,CACN,CAAC,CAAC,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5D,CAAC,CAAC,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC/B,OAAqB,EACrB,MAAc,EACd,SAAiB;IAEjB,OAAO,CACN,MAAM,OAAO;SACX,KAAK,CAA2D,wBAAwB,CAAC;SACzF,gBAAgB,EAAE,CACpB;SACC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;SACtE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,WAA+B;IACvD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IACpC,MAAM,OAAO,GAAuB;QACnC,UAAU,EAAE,OAAO,CAAC,EAAE;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE;QACvD,YAAY,EAAE,WAAW,CAAC,YAAY;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU;KAC9B,CAAC;IACF,IAAI,WAAW,CAAC,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;IACrE,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAC5B,KAAmB,EACnB,OAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,CAAC,YAAY;QACnB,CAAC,CAAC,mBAAmB,OAAO,CAAC,MAAM,EAAE;QACrC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO;YACtB,CAAC,CAAC,UAAU,OAAO,CAAC,MAAM,cAAc;YACxC,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;gBACrC,CAAC,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;gBAC3D,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,cAAc;gBAC7D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,WAA+B,EAC/B,OAA+B;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;IAEpC,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAwB;YACpC,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,KAAK;YAChB,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM;YACjC,UAAU,EAAE,OAAO,CAAC,UAAU;SAC9B,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;QACvE,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,IAAI,WAAW,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC1C,OAAO;YACN,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK;YAChB,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC9B,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,WAAW,EAAE,CAAC;QACjB,OAAO;YACN,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,KAAK;YAChB,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,WAAW;SAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9B,OAAO;YACN,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,KAAK;YAChB,iBAAiB,EAAE,KAAK;YACxB,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,wBAAwB,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,kCAAkC;SACrG,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;IAC3B,MAAM,aAAa,GAAmB;QACrC,GAAG,OAAO;QACV,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,SAAS;KACrB,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAsB,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClE,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,EAAE;QAClC,kBAAkB,EAAE,OAAO,CAAC,EAAE;QAC9B,WAAW,EAAE,QAAQ,CAAC,EAAE;QACxB,OAAO;QACP,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,QAAQ,CAAC,WAAW;QAClC,eAAe,EAAE,SAAS;QAC1B,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,SAAS;KACrB,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,aAAa,CAC3C,aAAa,EACb,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,GAAG,KAAK;QACR,kBAAkB,EAAE,OAAO,CAAC,EAAE;KAC9B,CAAC,CAAC,EACH,UAAU,CACV,CAAC;IAEF,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,4EAA4E;QAC5E,mEAAmE;QACnE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAClC,OAAO,CAAC,KAAK,CAAgB,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE;YAC1D,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,OAAO,CAAC,UAAU;SAC9B,CAAC,CACF,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,SAAS,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAClF,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;aAC1C,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QAC9D,MAAM,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE;YAChD,MAAM,EAAE,WAAW;YACnB,iBAAiB,EAAE,sBAAsB;SACzC,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACN,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE;QACjC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,SAAS,EAAE,CAAC,UAAU,CAAC,OAAO;QAC9B,iBAAiB,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAC5C,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,CACpF;QACD,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC9B,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,SAAkB;IACxD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAmB,EAAE,SAAiB;IACzE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,IAAI,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO;IAChE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE;YACpC,MAAM,EAAE,WAAW;YACnB,iBAAiB,EAAE,sBAAsB;SACzC,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CACnC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,CACpF,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAC9E,MAAM,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE;QACpC,MAAM,EAAE,YAAY;YACnB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,WAAW,IAAI,OAAO;gBACvB,CAAC,CAAC,eAAe;gBACjB,CAAC,CAAC,QAAQ;oBACT,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,SAAS;wBACV,CAAC,CAAC,YAAY;wBACd,CAAC,CAAC,QAAQ;QACd,GAAG,CAAC,YAAY;YACf,CAAC,CAAC,EAAE,iBAAiB,EAAE,4BAA4B,EAAE;YACrD,CAAC,CAAC,WAAW,IAAI,OAAO;gBACvB,CAAC,CAAC,EAAE,iBAAiB,EAAE,wBAAwB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;KACP,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CACjC,KAAmB,EACnB,QAAyB,EACzB,QAAgB,EAChB,MAA6B;IAE7B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC;gBAC9C,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ;gBACR,GAAG;gBACH,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE;aACtD,CAAC,CAAC;YACH,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YACpF,OAAO,WAAW,CAAC;QACpB,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YACjF,OAAO,eAAe,CAAC;QACxB,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACd,IAAI,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACrD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxF,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;gBACjF,OAAO,eAAe,CAAC;YACxB,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;gBACzC,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ;gBACR,GAAG;gBACH,aAAa,EAAE,IAAI,IAAI,CACtB,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,CACtE,CAAC,WAAW,EAAE;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YAClF,OAAO,UAAU,CAAC;QACnB,CAAC;IACF,CAAC;AACF,CAAC;AAED,KAAK,UAAU,wBAAwB,CACtC,OAAqB,EACrB,QAAuC,EACvC,OAAmC,EACnC,kBAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,2BAA2B,EAAE,iBAAiB,GAAG,KAAK,CAAC,CACtF,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAS,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QAC7C,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,6BAA6B,SAAS,aAAa,CAAC,CAAC,CAAC;QACjF,QAAQ,CAAC,MAAM,CACd,IAAI,eAAe,CAAC,oCAAoC,SAAS,KAAK,EAAE,SAAS,EAAE;YAClF,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,EAAE,SAAS,EAAE;SACtB,CAAC,CACF,CAAC;IACH,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,IAAI,CAAC;QACJ,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;QACtE,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,CAAC;YAAS,CAAC;QACV,MAAM,EAAE,CAAC;IACV,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,SAAiB,EACjB,OAA+B;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,QAAQ,GAAG,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,MAAM,GAA0B;QACrC,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,aAAa,EAAE,CAAC;KAChB,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,0EAA0E;QAC1E,2EAA2E;QAC3E,8BAA8B;QAC9B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;YACvC,UAAU,EAAE,SAAS,CAAC,EAAE;YACxB,QAAQ;YACR,GAAG,EAAE,SAAS,CAAC,WAAW,EAAE;YAC5B,cAAc,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,CAAC,WAAW,EAAE;SAC/E,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,SAAS;QAC7B,MAAM,CAAC,SAAS,EAAE,CAAC;QACnB,0EAA0E;QAC1E,+EAA+E;QAC/E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;YAC1C,MAAM,QAAQ,GAAG,MAAM,OAAO;iBAC5B,KAAK,CAA2D,wBAAwB,CAAC;iBACzF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;iBAClC,OAAO,EAAE,CAAC;YACZ,OAAO,wBAAwB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAA0B,SAAS,CAAC,EAAE;YAClD,CAAC,CAAC,SAAS,CAAC,KAAK;YACjB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,MAAM,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAoD;IAEpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,MAAM,GAA2B;QACtC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,MAAM;QACnC,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,CAAC;QACZ,QAAQ,EAAE,CAAC;QACX,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC;KACT,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QACrC,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IACxE,OAAO,MAAM,CAAC;AACf,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB;IACzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1F,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,GAAG,mBAAmB,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,KAAmC,EACnC,OAA+B;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CACtB,CACC,MAAM,OAAO;SACX,KAAK,CACL,gCAAgC,CAChC;SACA,gBAAgB,EAAE,CACpB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CACxC,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,sBAAsB,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,uBAAuB,CAAC;QACpC,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;QACpD,WAAW,EAAE,IAAI,IAAI,CAAC,WAAW,GAAG,sBAAsB,CAAC,CAAC,WAAW,EAAE;QACzE,UAAU,EAAE,WAAW,GAAG,uBAAuB;QACjD,SAAS,EAAE,IAAI,IAAI,CAClB,CAAC,WAAW,GAAG,uBAAuB,CAAC,GAAG,sBAAsB,CAChE,CAAC,WAAW,EAAE;QACf,KAAK,EAAE,uBAAuB;QAC9B,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAC1B,CAAC,EACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,sBAAsB,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,CAC/E;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/webhooks/events/index.d.ts

@@ -0,0 +1,13 @@
+import webhookReceivedEventDescriptor from './webhook-received.event.descriptor.ts';
+import webhookParsedEventDescriptor from './webhook-parsed.event.descriptor.ts';
+import webhookRejectedEventDescriptor from './webhook-rejected.event.descriptor.ts';
+export { webhookReceivedEventDescriptor, webhookParsedEventDescriptor, webhookRejectedEventDescriptor };
+export declare const webhookEventDescriptors: {
+    kind: "runtime/event";
+    id: string;
+    source: string;
+    name: string;
+    description: string;
+    trigger: string;
+}[];
+//# sourceMappingURL=index.d.ts.map

package/dist/webhooks/events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/webhooks/events/index.ts"],"names":[],"mappings":"AAAA,OAAO,8BAA8B,MAAM,wCAAwC,CAAC;AACpF,OAAO,4BAA4B,MAAM,sCAAsC,CAAC;AAChF,OAAO,8BAA8B,MAAM,wCAAwC,CAAC;AAEpF,OAAO,EACN,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;;;;GAInC,CAAC"}

package/dist/webhooks/events/index.js

@@ -0,0 +1,10 @@
+import webhookReceivedEventDescriptor from "./webhook-received.event.descriptor.js";
+import webhookParsedEventDescriptor from "./webhook-parsed.event.descriptor.js";
+import webhookRejectedEventDescriptor from "./webhook-rejected.event.descriptor.js";
+export { webhookReceivedEventDescriptor, webhookParsedEventDescriptor, webhookRejectedEventDescriptor };
+export const webhookEventDescriptors = [
+    webhookReceivedEventDescriptor,
+    webhookParsedEventDescriptor,
+    webhookRejectedEventDescriptor
+];
+//# sourceMappingURL=index.js.map

package/dist/webhooks/events/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/webhooks/events/index.ts"],"names":[],"mappings":"AAAA,OAAO,8BAA8B,MAAM,wCAAwC,CAAC;AACpF,OAAO,4BAA4B,MAAM,sCAAsC,CAAC;AAChF,OAAO,8BAA8B,MAAM,wCAAwC,CAAC;AAEpF,OAAO,EACN,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,8BAA8B;IAC9B,4BAA4B;IAC5B,8BAA8B;CAC9B,CAAC"}

package/dist/webhooks/events/webhook-parsed.event.descriptor.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Emitted by `processWebhook` after the matching webhook-event-definition has
+ * parsed the body and produced a task spec + optional outbox specs. The
+ * payload carries everything needed for downstream side-effects (e.g. a
+ * marshal-system subscriber creates the actual marshal task and writes the
+ * task id back via `tools.webhooks.updateRequest`).
+ */
+declare const _default: {
+    kind: "runtime/event";
+    id: string;
+    source: string;
+    name: string;
+    description: string;
+    trigger: string;
+};
+export default _default;
+//# sourceMappingURL=webhook-parsed.event.descriptor.d.ts.map

package/dist/webhooks/events/webhook-parsed.event.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-parsed.event.descriptor.d.ts","sourceRoot":"","sources":["../../../src/webhooks/events/webhook-parsed.event.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;;;;;;;;AAIH,wBAQG"}

package/dist/webhooks/events/webhook-parsed.event.descriptor.js

@@ -0,0 +1,17 @@
+/**
+ * Emitted by `processWebhook` after the matching webhook-event-definition has
+ * parsed the body and produced a task spec + optional outbox specs. The
+ * payload carries everything needed for downstream side-effects (e.g. a
+ * marshal-system subscriber creates the actual marshal task and writes the
+ * task id back via `tools.webhooks.updateRequest`).
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    kind: 'runtime/event',
+    id: 'tools.webhook.parsed',
+    source: 'tools/webhook',
+    name: 'Webhook Parsed',
+    description: 'Emitted after a webhook is parsed by its event definition. Payload carries the parsed payload, task spec, and outbox specs for downstream dispatch.',
+    trigger: 'custom'
+});
+//# sourceMappingURL=webhook-parsed.event.descriptor.js.map

package/dist/webhooks/events/webhook-parsed.event.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-parsed.event.descriptor.js","sourceRoot":"","sources":["../../../src/webhooks/events/webhook-parsed.event.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,eAAe;IACrB,EAAE,EAAE,sBAAsB;IAC1B,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACV,qJAAqJ;IACtJ,OAAO,EAAE,QAAQ;CACjB,CAAC,CAAC"}

package/dist/webhooks/events/webhook-received.event.descriptor.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Emitted by `processWebhook` after a webhook passes signature verification
+ * and is persisted with status `received`. Subscribers see the raw body and
+ * headers before any parsing happens — useful for audit logs and analytics.
+ */
+declare const _default: {
+    kind: "runtime/event";
+    id: string;
+    source: string;
+    name: string;
+    description: string;
+    trigger: string;
+};
+export default _default;
+//# sourceMappingURL=webhook-received.event.descriptor.d.ts.map

package/dist/webhooks/events/webhook-received.event.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-received.event.descriptor.d.ts","sourceRoot":"","sources":["../../../src/webhooks/events/webhook-received.event.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;AAIH,wBAQG"}

package/dist/webhooks/events/webhook-received.event.descriptor.js

@@ -0,0 +1,15 @@
+/**
+ * Emitted by `processWebhook` after a webhook passes signature verification
+ * and is persisted with status `received`. Subscribers see the raw body and
+ * headers before any parsing happens — useful for audit logs and analytics.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    kind: 'runtime/event',
+    id: 'tools.webhook.received',
+    source: 'tools/webhook',
+    name: 'Webhook Received',
+    description: 'Emitted after a webhook passes signature verification and is persisted with status received.',
+    trigger: 'custom'
+});
+//# sourceMappingURL=webhook-received.event.descriptor.js.map

package/dist/webhooks/events/webhook-received.event.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-received.event.descriptor.js","sourceRoot":"","sources":["../../../src/webhooks/events/webhook-received.event.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,eAAe;IACrB,EAAE,EAAE,wBAAwB;IAC5B,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACV,8FAA8F;IAC/F,OAAO,EAAE,QAAQ;CACjB,CAAC,CAAC"}

package/dist/webhooks/events/webhook-rejected.event.descriptor.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Emitted by `processWebhook` when signature verification fails or the
+ * source is unknown / disabled. The request is persisted with status
+ * `rejected` before the event fires so subscribers can correlate via id.
+ */
+declare const _default: {
+    kind: "runtime/event";
+    id: string;
+    source: string;
+    name: string;
+    description: string;
+    trigger: string;
+};
+export default _default;
+//# sourceMappingURL=webhook-rejected.event.descriptor.d.ts.map

package/dist/webhooks/events/webhook-rejected.event.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-rejected.event.descriptor.d.ts","sourceRoot":"","sources":["../../../src/webhooks/events/webhook-rejected.event.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;;;;;;;;AAIH,wBAQG"}