@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.4

package/dist/webhooks/events/webhook-rejected.event.descriptor.js

@@ -0,0 +1,15 @@
+/**
+ * Emitted by `processWebhook` when signature verification fails or the
+ * source is unknown / disabled. The request is persisted with status
+ * `rejected` before the event fires so subscribers can correlate via id.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    kind: 'runtime/event',
+    id: 'tools.webhook.rejected',
+    source: 'tools/webhook',
+    name: 'Webhook Rejected',
+    description: 'Emitted when a webhook fails verification or targets an unknown / disabled source.',
+    trigger: 'custom'
+});
+//# sourceMappingURL=webhook-rejected.event.descriptor.js.map

package/dist/webhooks/events/webhook-rejected.event.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-rejected.event.descriptor.js","sourceRoot":"","sources":["../../../src/webhooks/events/webhook-rejected.event.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,eAAe;IACrB,EAAE,EAAE,wBAAwB;IAC5B,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EACV,oFAAoF;IACrF,OAAO,EAAE,QAAQ;CACjB,CAAC,CAAC"}

package/dist/webhooks/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Public surface of the tools/webhooks subsystem.
+ *
+ * Apps and integration packs import from here. Internal-only modules
+ * (router internals, FS store internals) are not re-exported.
+ */
+export * from './schemas/index.ts';
+export { signatureVerifierKind, webhookEventDefinitionKind, webhookConsumerKind, webhookServiceKind } from './kinds/webhook-kinds.ts';
+export { assertWebhookServiceRuntime } from './service-runtime.ts';
+export { verifySharedSecretAsync } from './verifiers/shared-secret.ts';
+export type { WebhookDeliveryCompleteInput, WebhookDeliveryLeaseInput, WebhookDeliveryRetryInput, WebhookIngressRateInput, WebhookRequestAcceptance, WebhookRequestClaim, WebhookStore, WebhookStoreOutboxFilters, WebhookStoreRequestFilters } from './store/index.ts';
+export { commitPreparedWebhook, prepareWebhook, processWebhook, type CommitWebhookOptions, type PrepareWebhookOptions, type ProcessWebhookOptions } from './router.ts';
+export { acceptPreparedWebhook, dispatchAcceptedWebhook, reconcileWebhooks, recordWebhookIngressRejection, MAX_WEBHOOK_BODY_BYTES, type WebhookDeliveryOptions } from './delivery.ts';
+export { applyWebhookRequestUpdate, isTerminalWebhookStatus, WEBHOOK_TERMINAL_RETENTION_MS, WEBHOOK_TERMINAL_STATUSES } from './lifecycle.ts';
+export { createDefaultWebhookConfig } from './store/webhook-default-config.ts';
+export { webhookReceivedEventDescriptor, webhookParsedEventDescriptor, webhookRejectedEventDescriptor, webhookEventDescriptors } from './events/index.ts';
+export { webhooksPlugin } from './webhooks.plugin.ts';
+export { default as webhooksPluginDefault } from './webhooks.plugin.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACN,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,YAAY,EACX,4BAA4B,EAC5B,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,0BAA0B,EAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,6BAA6B,EAC7B,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EACN,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/webhooks/index.js

@@ -0,0 +1,18 @@
+/**
+ * Public surface of the tools/webhooks subsystem.
+ *
+ * Apps and integration packs import from here. Internal-only modules
+ * (router internals, FS store internals) are not re-exported.
+ */
+export * from "./schemas/index.js";
+export { signatureVerifierKind, webhookEventDefinitionKind, webhookConsumerKind, webhookServiceKind } from "./kinds/webhook-kinds.js";
+export { assertWebhookServiceRuntime } from "./service-runtime.js";
+export { verifySharedSecretAsync } from "./verifiers/shared-secret.js";
+export { commitPreparedWebhook, prepareWebhook, processWebhook } from "./router.js";
+export { acceptPreparedWebhook, dispatchAcceptedWebhook, reconcileWebhooks, recordWebhookIngressRejection, MAX_WEBHOOK_BODY_BYTES } from "./delivery.js";
+export { applyWebhookRequestUpdate, isTerminalWebhookStatus, WEBHOOK_TERMINAL_RETENTION_MS, WEBHOOK_TERMINAL_STATUSES } from "./lifecycle.js";
+export { createDefaultWebhookConfig } from "./store/webhook-default-config.js";
+export { webhookReceivedEventDescriptor, webhookParsedEventDescriptor, webhookRejectedEventDescriptor, webhookEventDescriptors } from "./events/index.js";
+export { webhooksPlugin } from "./webhooks.plugin.js";
+export { default as webhooksPluginDefault } from "./webhooks.plugin.js";
+//# sourceMappingURL=index.js.map

package/dist/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,oBAAoB,CAAC;AACnC,OAAO,EACN,qBAAqB,EACrB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAYvE,OAAO,EACN,qBAAqB,EACrB,cAAc,EACd,cAAc,EAId,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,6BAA6B,EAC7B,sBAAsB,EAEtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EACN,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,OAAO,IAAI,qBAAqB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/webhooks/kinds/webhook-kinds.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Webhook Runtime Kind Definitions
+ *
+ * Registers two new runtime kinds for the webhook ingestion subsystem:
+ *
+ *   - `tools/signature-verifier` — vendor-owned signature verification.
+ *   - `tools/webhook-event-definition` — per-(source, event_type) parser /
+ *     task / outbox projection.
+ *
+ * Both are data-only kinds: the default implementation parses and stores the
+ * descriptor, and refuses every call. Custom behavior is provided by loaders that bind a descriptor
+ * id to a class whose constructor signature matches the runtime contract.
+ *
+ * Webhook *sources* themselves are modeled as `agent/event-source` descriptors
+ * with `sourceType: 'webhook'` (defined in `tools/src/agents/schemas`).
+ * The kinds here are about the verification and parsing pipeline, not the
+ * source registration itself.
+ */
+import type { RuntimeDescriptor } from '@vibesdotdev/kernel/schemas/descriptor';
+import { type SignatureVerifierDescriptor, type SignatureVerifierImplementation } from '../schemas/signature-verifier.ts';
+import { type WebhookEventDefinitionDescriptor, type WebhookEventDefinitionImplementation } from '../schemas/webhook-event-definition.ts';
+declare class DefaultSignatureVerifier implements SignatureVerifierImplementation {
+    readonly descriptor: SignatureVerifierDescriptor;
+    constructor(descriptor: RuntimeDescriptor);
+    verify(_rawBody: string, _headers: Record<string, string>, _secret: string): boolean;
+}
+declare class DefaultWebhookEventDefinition implements WebhookEventDefinitionImplementation {
+    readonly descriptor: WebhookEventDefinitionDescriptor;
+    constructor(descriptor: RuntimeDescriptor);
+    parse(): never;
+    buildTask(): never;
+}
+export declare const signatureVerifierKind: {
+    id: string;
+    descriptorSchema: import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        kind: import("zod").ZodLiteral<"tools/signature-verifier">;
+        name: import("zod").ZodString;
+        description: import("zod").ZodOptional<import("zod").ZodString>;
+        source: import("zod").ZodString;
+        headerName: import("zod").ZodOptional<import("zod").ZodString>;
+        signingSecretEnv: import("zod").ZodOptional<import("zod").ZodString>;
+        tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+    }, import("zod/v4/core").$strip>;
+    defaultImplementation: typeof DefaultSignatureVerifier;
+    resolve: (candidates: RuntimeDescriptor[]) => RuntimeDescriptor;
+    contexts: never[];
+};
+export declare const webhookEventDefinitionKind: {
+    id: string;
+    descriptorSchema: import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        kind: import("zod").ZodLiteral<"tools/webhook-event-definition">;
+        name: import("zod").ZodString;
+        description: import("zod").ZodString;
+        source: import("zod").ZodString;
+        event_type: import("zod").ZodString;
+        dispatchMode: import("zod").ZodOptional<import("zod").ZodEnum<{
+            none: "none";
+            hook: "hook";
+        }>>;
+        tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+    }, import("zod/v4/core").$strip>;
+    defaultImplementation: typeof DefaultWebhookEventDefinition;
+    resolve: (candidates: RuntimeDescriptor[]) => RuntimeDescriptor;
+    contexts: never[];
+};
+/**
+ * A receipt-bearing consumer of a verified webhook event.
+ *
+ * Unlike a generic runtime subscription, this kind is invoked one target at a
+ * time under a durable delivery lease. That lets the ingress retry one failed
+ * consumer without replaying siblings that already succeeded.
+ */
+export declare const webhookConsumerKind: {
+    id: string;
+    descriptorSchema: import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        name: import("zod").ZodOptional<import("zod").ZodString>;
+        description: import("zod").ZodOptional<import("zod").ZodString>;
+        tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        hardware: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        enabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        priority: import("zod").ZodOptional<import("zod").ZodNumber>;
+        capabilityId: import("zod").ZodOptional<import("zod").ZodString>;
+        requiredContext: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        optionalContext: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        config: import("zod").ZodOptional<import("zod").ZodUnknown>;
+        retention: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodObject<{
+            maxAgeDays: import("zod").ZodOptional<import("zod").ZodNumber>;
+            maxEntries: import("zod").ZodOptional<import("zod").ZodNumber>;
+            maxBytes: import("zod").ZodOptional<import("zod").ZodNumber>;
+            cascadeFrom: import("zod").ZodOptional<import("zod").ZodString>;
+            ageField: import("zod").ZodOptional<import("zod").ZodString>;
+            reason: import("zod").ZodString;
+            enforcedBy: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>]>>;
+        kind: import("zod").ZodLiteral<"tools/webhook-consumer">;
+        sources: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        eventTypes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        maxAttempts: import("zod").ZodDefault<import("zod").ZodNumber>;
+    }, import("zod/v4/core").$strip>;
+    resolve: (candidates: RuntimeDescriptor[]) => RuntimeDescriptor;
+    contexts: never[];
+};
+/**
+ * Host-selected webhook orchestration and persistence.
+ *
+ * There is deliberately no default implementation: resolving this capability
+ * without a host descriptor fails closed instead of quietly selecting a
+ * filesystem, HTTP, or RPC transport on the caller's behalf.
+ */
+export declare const webhookServiceKind: {
+    id: string;
+    descriptorSchema: import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        name: import("zod").ZodOptional<import("zod").ZodString>;
+        description: import("zod").ZodOptional<import("zod").ZodString>;
+        tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        hardware: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        enabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        priority: import("zod").ZodOptional<import("zod").ZodNumber>;
+        capabilityId: import("zod").ZodOptional<import("zod").ZodString>;
+        requiredContext: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        optionalContext: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        config: import("zod").ZodOptional<import("zod").ZodUnknown>;
+        retention: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodObject<{
+            maxAgeDays: import("zod").ZodOptional<import("zod").ZodNumber>;
+            maxEntries: import("zod").ZodOptional<import("zod").ZodNumber>;
+            maxBytes: import("zod").ZodOptional<import("zod").ZodNumber>;
+            cascadeFrom: import("zod").ZodOptional<import("zod").ZodString>;
+            ageField: import("zod").ZodOptional<import("zod").ZodString>;
+            reason: import("zod").ZodString;
+            enforcedBy: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>]>>;
+        kind: import("zod").ZodLiteral<"tools/webhook-service">;
+    }, import("zod/v4/core").$strip>;
+    resolve: (candidates: RuntimeDescriptor[]) => RuntimeDescriptor;
+    contexts: never[];
+};
+export {};
+//# sourceMappingURL=webhook-kinds.d.ts.map

package/dist/webhooks/kinds/webhook-kinds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-kinds.d.ts","sourceRoot":"","sources":["../../../src/webhooks/kinds/webhook-kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAEN,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAEN,KAAK,gCAAgC,EACrC,KAAK,oCAAoC,EACzC,MAAM,wCAAwC,CAAC;AAOhD,cAAM,wBAAyB,YAAW,+BAA+B;IACxE,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;gBAErC,UAAU,EAAE,iBAAiB;IAIzC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;CAMpF;AAED,cAAM,6BAA8B,YAAW,oCAAoC;IAClF,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAC;gBAE1C,UAAU,EAAE,iBAAiB;IAIzC,KAAK,IAAI,KAAK;IAOd,SAAS,IAAI,KAAK;CAMlB;AAED,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;CAMsC,CAAC;AAEzE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;CAMsC,CAAC;AAE9E;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKsC,CAAC;AAEvE;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKwB,CAAC"}

package/dist/webhooks/kinds/webhook-kinds.js

@@ -0,0 +1,87 @@
+/**
+ * Webhook Runtime Kind Definitions
+ *
+ * Registers two new runtime kinds for the webhook ingestion subsystem:
+ *
+ *   - `tools/signature-verifier` — vendor-owned signature verification.
+ *   - `tools/webhook-event-definition` — per-(source, event_type) parser /
+ *     task / outbox projection.
+ *
+ * Both are data-only kinds: the default implementation parses and stores the
+ * descriptor, and refuses every call. Custom behavior is provided by loaders that bind a descriptor
+ * id to a class whose constructor signature matches the runtime contract.
+ *
+ * Webhook *sources* themselves are modeled as `agent/event-source` descriptors
+ * with `sourceType: 'webhook'` (defined in `tools/src/agents/schemas`).
+ * The kinds here are about the verification and parsing pipeline, not the
+ * source registration itself.
+ */
+import { SignatureVerifierDescriptorSchema } from "../schemas/signature-verifier.js";
+import { WebhookEventDefinitionDescriptorSchema } from "../schemas/webhook-event-definition.js";
+import { WebhookServiceDescriptorSchema } from "../schemas/webhook-service.js";
+import { WebhookConsumerDescriptorSchema } from "../schemas/webhook-delivery.js";
+class DefaultSignatureVerifier {
+    descriptor;
+    constructor(descriptor) {
+        this.descriptor = SignatureVerifierDescriptorSchema.parse(descriptor);
+    }
+    verify(_rawBody, _headers, _secret) {
+        throw new Error(`Default tools/signature-verifier impl invoked for '${this.descriptor.id}'. ` +
+            `No verifier registered for source '${this.descriptor.source}'.`);
+    }
+}
+class DefaultWebhookEventDefinition {
+    descriptor;
+    constructor(descriptor) {
+        this.descriptor = WebhookEventDefinitionDescriptorSchema.parse(descriptor);
+    }
+    parse() {
+        throw new Error(`Default tools/webhook-event-definition impl invoked for '${this.descriptor.id}'. ` +
+            `No definition registered for ${this.descriptor.source}:${this.descriptor.event_type}.`);
+    }
+    buildTask() {
+        throw new Error(`Default tools/webhook-event-definition impl invoked for '${this.descriptor.id}'. ` +
+            `No definition registered for ${this.descriptor.source}:${this.descriptor.event_type}.`);
+    }
+}
+export const signatureVerifierKind = {
+    id: 'tools/signature-verifier',
+    descriptorSchema: SignatureVerifierDescriptorSchema,
+    defaultImplementation: DefaultSignatureVerifier,
+    resolve: (candidates) => candidates[0],
+    contexts: []
+};
+export const webhookEventDefinitionKind = {
+    id: 'tools/webhook-event-definition',
+    descriptorSchema: WebhookEventDefinitionDescriptorSchema,
+    defaultImplementation: DefaultWebhookEventDefinition,
+    resolve: (candidates) => candidates[0],
+    contexts: []
+};
+/**
+ * A receipt-bearing consumer of a verified webhook event.
+ *
+ * Unlike a generic runtime subscription, this kind is invoked one target at a
+ * time under a durable delivery lease. That lets the ingress retry one failed
+ * consumer without replaying siblings that already succeeded.
+ */
+export const webhookConsumerKind = {
+    id: 'tools/webhook-consumer',
+    descriptorSchema: WebhookConsumerDescriptorSchema,
+    resolve: (candidates) => candidates[0],
+    contexts: []
+};
+/**
+ * Host-selected webhook orchestration and persistence.
+ *
+ * There is deliberately no default implementation: resolving this capability
+ * without a host descriptor fails closed instead of quietly selecting a
+ * filesystem, HTTP, or RPC transport on the caller's behalf.
+ */
+export const webhookServiceKind = {
+    id: 'tools/webhook-service',
+    descriptorSchema: WebhookServiceDescriptorSchema,
+    resolve: (candidates) => [...candidates].sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0))[0],
+    contexts: []
+};
+//# sourceMappingURL=webhook-kinds.js.map

package/dist/webhooks/kinds/webhook-kinds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-kinds.js","sourceRoot":"","sources":["../../../src/webhooks/kinds/webhook-kinds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EACN,iCAAiC,EAGjC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACN,sCAAsC,EAGtC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,8BAA8B,EAAuB,MAAM,+BAA+B,CAAC;AACpG,OAAO,EACN,+BAA+B,EAE/B,MAAM,gCAAgC,CAAC;AAExC,MAAM,wBAAwB;IACpB,UAAU,CAA8B;IAEjD,YAAY,UAA6B;QACxC,IAAI,CAAC,UAAU,GAAG,iCAAiC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,CAAC,QAAgB,EAAE,QAAgC,EAAE,OAAe;QACzE,MAAM,IAAI,KAAK,CACd,sDAAsD,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK;YAC5E,sCAAsC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CACjE,CAAC;IACH,CAAC;CACD;AAED,MAAM,6BAA6B;IACzB,UAAU,CAAmC;IAEtD,YAAY,UAA6B;QACxC,IAAI,CAAC,UAAU,GAAG,sCAAsC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK;QACJ,MAAM,IAAI,KAAK,CACd,4DAA4D,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK;YAClF,gCAAgC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,CACxF,CAAC;IACH,CAAC;IAED,SAAS;QACR,MAAM,IAAI,KAAK,CACd,4DAA4D,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK;YAClF,gCAAgC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,CACxF,CAAC;IACH,CAAC;CACD;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,EAAE,EAAE,0BAA0B;IAC9B,gBAAgB,EAAE,iCAAiC;IACnD,qBAAqB,EAAE,wBAAwB;IAC/C,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACtC,QAAQ,EAAE,EAAE;CAC2D,CAAC;AAEzE,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACzC,EAAE,EAAE,gCAAgC;IACpC,gBAAgB,EAAE,sCAAsC;IACxD,qBAAqB,EAAE,6BAA6B;IACpD,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACtC,QAAQ,EAAE,EAAE;CACgE,CAAC;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,EAAE,EAAE,wBAAwB;IAC5B,gBAAgB,EAAE,+BAA+B;IACjD,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACtC,QAAQ,EAAE,EAAE;CACyD,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IACjC,EAAE,EAAE,uBAAuB;IAC3B,gBAAgB,EAAE,8BAA8B;IAChD,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,QAAQ,EAAE,EAAE;CAC0C,CAAC"}

package/dist/webhooks/lifecycle.d.ts

@@ -0,0 +1,7 @@
+import type { WebhookEventStatus, WebhookRequest } from './schemas/webhook-request.ts';
+export declare const WEBHOOK_TERMINAL_STATUSES: readonly ["completed", "failed", "dead_lettered", "rejected"];
+/** Terminal webhook audit data is retained for 30 days, then pruned in bounded batches. */
+export declare const WEBHOOK_TERMINAL_RETENTION_MS: number;
+export declare function isTerminalWebhookStatus(status: WebhookEventStatus): boolean;
+export declare function applyWebhookRequestUpdate(current: WebhookRequest, updates: Partial<WebhookRequest>, now?: string): WebhookRequest;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/webhooks/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../src/webhooks/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEvF,eAAO,MAAM,yBAAyB,+DAKY,CAAC;AAEnD,2FAA2F;AAC3F,eAAO,MAAM,6BAA6B,QAA4B,CAAC;AAevE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAE3E;AAED,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,EAChC,GAAG,SAA2B,GAC5B,cAAc,CAkBhB"}

package/dist/webhooks/lifecycle.js

@@ -0,0 +1,40 @@
+export const WEBHOOK_TERMINAL_STATUSES = [
+    'completed',
+    'failed',
+    'dead_lettered',
+    'rejected'
+];
+/** Terminal webhook audit data is retained for 30 days, then pruned in bounded batches. */
+export const WEBHOOK_TERMINAL_RETENTION_MS = 30 * 24 * 60 * 60 * 1_000;
+const ALLOWED_TRANSITIONS = {
+    received: ['received', 'queued', 'parsed', 'completed', 'failed', 'rejected'],
+    queued: ['queued', 'processing', 'retrying', 'completed', 'dead_lettered', 'failed'],
+    parsed: ['parsed', 'queued', 'processing', 'dispatched', 'completed', 'failed'],
+    processing: ['processing', 'retrying', 'dispatched', 'completed', 'dead_lettered', 'failed'],
+    retrying: ['retrying', 'processing', 'completed', 'dead_lettered', 'failed'],
+    dispatched: ['dispatched', 'processing', 'retrying', 'completed', 'dead_lettered', 'failed'],
+    completed: ['completed'],
+    failed: ['failed'],
+    dead_lettered: ['dead_lettered'],
+    rejected: ['rejected']
+};
+export function isTerminalWebhookStatus(status) {
+    return WEBHOOK_TERMINAL_STATUSES.some((terminal) => terminal === status);
+}
+export function applyWebhookRequestUpdate(current, updates, now = new Date().toISOString()) {
+    const nextStatus = updates.status ?? current.status;
+    if (!ALLOWED_TRANSITIONS[current.status].some((allowed) => allowed === nextStatus)) {
+        throw new Error(`Invalid webhook lifecycle transition ${current.status} -> ${nextStatus} for ${current.id}`);
+    }
+    const next = {
+        ...current,
+        ...updates,
+        id: current.id,
+        updated_at: now
+    };
+    if (isTerminalWebhookStatus(nextStatus)) {
+        next.completed_at ??= now;
+    }
+    return next;
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/webhooks/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/webhooks/lifecycle.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACxC,WAAW;IACX,QAAQ;IACR,eAAe;IACf,UAAU;CACuC,CAAC;AAEnD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAEvE,MAAM,mBAAmB,GAAG;IAC3B,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC7E,MAAM,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC;IACpF,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC;IAC/E,UAAU,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC;IAC5F,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC;IAC5E,UAAU,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,CAAC;IAC5F,SAAS,EAAE,CAAC,WAAW,CAAC;IACxB,MAAM,EAAE,CAAC,QAAQ,CAAC;IAClB,aAAa,EAAE,CAAC,eAAe,CAAC;IAChC,QAAQ,EAAE,CAAC,UAAU,CAAC;CAC8C,CAAC;AAEtE,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IACjE,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,OAAuB,EACvB,OAAgC,EAChC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAE9B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IACpD,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,UAAU,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CACd,wCAAwC,OAAO,CAAC,MAAM,OAAO,UAAU,QAAQ,OAAO,CAAC,EAAE,EAAE,CAC3F,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAmB;QAC5B,GAAG,OAAO;QACV,GAAG,OAAO;QACV,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,UAAU,EAAE,GAAG;KACf,CAAC;IACF,IAAI,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,YAAY,KAAK,GAAG,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/webhooks/read-json.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Webhook JSON text, read once into the runtime's JSON contract. Whether the
+ * text is JSON is asked first (`isJsonText`), so a non-JSON body or record is
+ * an answer, never a caught throw.
+ */
+import { type JsonObject, type JsonValue } from '@vibesdotdev/kernel/schemas/json';
+import type * as z from 'zod/v4';
+/** The text as one JSON value, or `undefined` when it is not one (a number JSON cannot hold included). */
+export declare function readJsonValue(text: string): JsonValue | undefined;
+/** The text as one JSON object, or `undefined` when it is not JSON or not an object. */
+export declare function readJsonObject(text: string): JsonObject | undefined;
+/**
+ * A stored webhook record read through its schema. A record that is not JSON,
+ * or not the schema's shape, refuses `webhook-store-record-corrupt`, naming the
+ * record's store-relative path and never its bytes.
+ */
+export declare function readStoredRecord<Schema extends z.ZodType>(schema: Schema, text: string, path: string): z.output<Schema>;
+//# sourceMappingURL=read-json.d.ts.map

package/dist/webhooks/read-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-json.d.ts","sourceRoot":"","sources":["../../src/webhooks/read-json.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAiC,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClH,OAAO,KAAK,KAAK,CAAC,MAAM,QAAQ,CAAC;AAGjC,0GAA0G;AAC1G,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAIjE;AAED,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAGnE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,SAAS,CAAC,CAAC,OAAO,EACxD,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACV,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CASlB"}

package/dist/webhooks/read-json.js

@@ -0,0 +1,37 @@
+/**
+ * Webhook JSON text, read once into the runtime's JSON contract. Whether the
+ * text is JSON is asked first (`isJsonText`), so a non-JSON body or record is
+ * an answer, never a caught throw.
+ */
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { isJsonObject, JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { isJsonText } from "../utils/json-text.js";
+/** The text as one JSON value, or `undefined` when it is not one (a number JSON cannot hold included). */
+export function readJsonValue(text) {
+    if (!isJsonText(text))
+        return undefined;
+    const value = JsonValueSchema.safeParse(JSON.parse(text));
+    return value.success ? value.data : undefined;
+}
+/** The text as one JSON object, or `undefined` when it is not JSON or not an object. */
+export function readJsonObject(text) {
+    const value = readJsonValue(text);
+    return value !== undefined && isJsonObject(value) ? value : undefined;
+}
+/**
+ * A stored webhook record read through its schema. A record that is not JSON,
+ * or not the schema's shape, refuses `webhook-store-record-corrupt`, naming the
+ * record's store-relative path and never its bytes.
+ */
+export function readStoredRecord(schema, text, path) {
+    const value = readJsonValue(text);
+    const record = value === undefined ? undefined : schema.safeParse(value);
+    if (record?.success)
+        return record.data;
+    throw new CapabilityError(`The stored webhook record ${path} is corrupt.`, 'INTERNAL', {
+        reason: 'webhook-store-record-corrupt',
+        retryable: false,
+        details: { path }
+    });
+}
+//# sourceMappingURL=read-json.js.map

package/dist/webhooks/read-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-json.js","sourceRoot":"","sources":["../../src/webhooks/read-json.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAmC,MAAM,kCAAkC,CAAC;AAElH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,0GAA0G;AAC1G,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,KAAK,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC/B,MAAc,EACd,IAAY,EACZ,IAAY;IAEZ,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACxC,MAAM,IAAI,eAAe,CAAC,6BAA6B,IAAI,cAAc,EAAE,UAAU,EAAE;QACtF,MAAM,EAAE,8BAA8B;QACtC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE;KACjB,CAAC,CAAC;AACJ,CAAC"}

package/dist/webhooks/router.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Transport-agnostic webhook ingress.
+ *
+ * `prepareWebhook` performs only verification and vendor parsing so an HTTP
+ * transport can validate promptly. `acceptPreparedWebhook` is the durability
+ * boundary that MUST complete before a success acknowledgement.
+ * `dispatchAcceptedWebhook` runs receipt-bearing consumers under leases; a
+ * host may accelerate it with `waitUntil`, while a reconciler guarantees that
+ * accepted work survives process loss.
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel/api/runtime';
+import type { WebhookPreparation } from './schemas/webhook-preparation.ts';
+import type { WebhookProcessResult } from './schemas/webhook-process-result.ts';
+import type { WebhookSource } from './schemas/webhook-request.ts';
+import type { WebhookStore } from './store/types.ts';
+export interface PrepareWebhookOptions {
+    /** The handed runtime that verifies and routes the request. */
+    runtime: VibesRuntime;
+}
+export interface CommitWebhookOptions extends PrepareWebhookOptions {
+    /** Host-owned persistence adapter. */
+    store: WebhookStore;
+}
+export type ProcessWebhookOptions = CommitWebhookOptions;
+export declare function prepareWebhook(source: WebhookSource, rawBody: string, headers: Record<string, string>, options: PrepareWebhookOptions): Promise<WebhookPreparation>;
+export declare function commitPreparedWebhook(preparation: WebhookPreparation, options: CommitWebhookOptions): Promise<WebhookProcessResult>;
+export declare function processWebhook(source: WebhookSource, rawBody: string, headers: Record<string, string>, options: ProcessWebhookOptions): Promise<WebhookProcessResult>;
+//# sourceMappingURL=router.d.ts.map

package/dist/webhooks/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/webhooks/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAapE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,KAAK,EAAkB,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AA0PrD,MAAM,WAAW,qBAAqB;IACrC,+DAA+D;IAC/D,OAAO,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IAClE,sCAAsC;IACtC,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AA+FzD,wBAAsB,cAAc,CACnC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAS7B;AA4BD,wBAAsB,qBAAqB,CAC1C,WAAW,EAAE,kBAAkB,EAC/B,OAAO,EAAE,oBAAoB,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAc/B;AAED,wBAAsB,cAAc,CACnC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAG/B"}