@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.4

package/dist/webhooks/router.js

@@ -0,0 +1,351 @@
+/**
+ * Transport-agnostic webhook ingress.
+ *
+ * `prepareWebhook` performs only verification and vendor parsing so an HTTP
+ * transport can validate promptly. `acceptPreparedWebhook` is the durability
+ * boundary that MUST complete before a success acknowledgement.
+ * `dispatchAcceptedWebhook` runs receipt-bearing consumers under leases; a
+ * host may accelerate it with `waitUntil`, while a reconciler guarantees that
+ * accepted work survives process loss.
+ */
+import { getLogger } from '@vibesdotdev/logging';
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { isJsonObject } from '@vibesdotdev/kernel/schemas/json';
+import * as z from 'zod/v4';
+import { attempt, attemptSync } from "../shared/attempt.js";
+import { loadToolsConfig, resolveOptionalSecret } from "../config/load.js";
+import { acceptPreparedWebhook, dispatchAcceptedWebhook } from "./delivery.js";
+import { readJsonObject, readJsonValue } from "./read-json.js";
+const LOGGER_ID = 'tools.webhooks.router';
+/** The lane-wide shared secret a request signed with `x-webhook-signature` verifies against. */
+const LANE_SECRET_KEY = 'WEBHOOK_LANE_SECRET';
+/** A body field read as an event name: a non-empty string. */
+const EventTextSchema = z.string().min(1);
+function generateId() {
+    return crypto.randomUUID();
+}
+function nowIso() {
+    return new Date().toISOString();
+}
+function pickSignature(headers) {
+    return (headers['svix-signature'] ||
+        headers['x-slack-signature'] ||
+        headers['x-signature-ed25519'] ||
+        headers['x-webhook-signature'] ||
+        '');
+}
+function redactTokens(value) {
+    if (Array.isArray(value))
+        return value.map(redactTokens);
+    if (!isJsonObject(value))
+        return value;
+    const redacted = {};
+    for (const [key, child] of Object.entries(value)) {
+        redacted[key] = key.toLowerCase() === 'token' ? '[REDACTED]' : redactTokens(child);
+    }
+    return redacted;
+}
+function redactDiscordRawBody(rawBody) {
+    const body = readJsonValue(rawBody);
+    return body === undefined ? '[unparseable Discord payload omitted]' : JSON.stringify(redactTokens(body));
+}
+function rawBodyForPersistence(source, rawBody) {
+    return source === 'discord' ? redactDiscordRawBody(rawBody) : rawBody;
+}
+const PERSISTED_WEBHOOK_HEADERS = new Set([
+    'content-type',
+    'user-agent',
+    'svix-id',
+    'svix-timestamp',
+    'svix-signature',
+    'x-slack-request-timestamp',
+    'x-slack-signature',
+    'x-signature-ed25519',
+    'x-signature-timestamp',
+    'x-webhook-id',
+    'x-webhook-signature'
+]);
+/**
+ * Persist only headers needed to audit provider verification. Transport
+ * credentials, cookies, client IPs, and proxy metadata never cross the durable
+ * acceptance boundary.
+ */
+function headersForPersistence(headers) {
+    return Object.fromEntries(Object.entries(headers)
+        .map(([name, value]) => [name.toLowerCase(), value])
+        .filter(([name]) => PERSISTED_WEBHOOK_HEADERS.has(name)));
+}
+/**
+ * A vendor's own refusal text. It is recorded on the request beside the raw
+ * body it came from and answered to the transport that sent it; logs carry only
+ * value-free facts.
+ */
+function refusalText(failure) {
+    return failure instanceof Error ? failure.message : failure.description;
+}
+/**
+ * The verifier registered for `source`, or `null` when none is. A registered
+ * verifier that does not resolve refuses `webhook-verifier-unresolved`: the
+ * request fails closed instead of falling through to another check.
+ */
+async function resolveSignatureVerifier(runtime, source) {
+    const query = runtime.query('tools/signature-verifier');
+    const descriptor = (await query.filter((candidate) => candidate.source === source).descriptorsAsync())[0];
+    if (!descriptor)
+        return null;
+    try {
+        return { descriptor, implementation: await query.withId(descriptor.id).resolve() };
+    }
+    catch (error) {
+        throw new CapabilityError(`The ${source} signature verifier did not resolve.`, 'UNAVAILABLE', {
+            reason: 'webhook-verifier-unresolved',
+            details: { source, verifierId: descriptor.id },
+            cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+        });
+    }
+}
+/**
+ * The definition registered for `source:eventType`, or `null` when none is. A
+ * registered definition that does not resolve refuses
+ * `webhook-definition-unresolved`.
+ */
+async function resolveEventDefinition(runtime, source, eventType) {
+    const query = runtime.query('tools/webhook-event-definition');
+    const descriptor = (await query
+        .filter((candidate) => candidate.source === source && candidate.event_type === eventType)
+        .descriptorsAsync())[0];
+    if (!descriptor)
+        return null;
+    try {
+        return await query.withId(descriptor.id).resolve();
+    }
+    catch (error) {
+        throw new CapabilityError(`The ${source}:${eventType} event definition did not resolve.`, 'UNAVAILABLE', {
+            reason: 'webhook-definition-unresolved',
+            details: { source, eventType, definitionId: descriptor.id },
+            cause: valueFreeFailure(CaughtFailureSchema.parse(error))
+        });
+    }
+}
+/**
+ * Verify a request with the handed runtime's credentials. A signing secret
+ * resolves through the host's secrets store (`credential-not-set` is "no
+ * secret"; any other store failure refuses); unsigned ingress is the tools
+ * `webhookAllowUnsigned` setting, off by default.
+ */
+async function verifyRequest(runtime, source, rawBody, headers) {
+    // Slack's URL verification challenge is self-authenticating and intentionally
+    // remains compatible with the pre-runtime migration behavior. A body that is
+    // not JSON is answered after the signature branch.
+    if (source === 'slack' && headers['content-type']?.includes('json')) {
+        if (readJsonObject(rawBody)?.type === 'url_verification')
+            return { valid: true };
+    }
+    const resolved = await resolveSignatureVerifier(runtime, source);
+    if (resolved) {
+        const key = resolved.descriptor.signingSecretEnv;
+        const secret = key ? await resolveOptionalSecret(runtime, key) : undefined;
+        if (!secret)
+            return { valid: false, error: `Missing ${source} signing credential` };
+        const valid = await resolved.implementation.verify(rawBody, headers, secret);
+        return valid ? { valid: true } : { valid: false, error: `Invalid ${source} signature` };
+    }
+    const webhookSignature = headers['x-webhook-signature'] ?? '';
+    const laneSecret = webhookSignature ? await resolveOptionalSecret(runtime, LANE_SECRET_KEY) : undefined;
+    if (laneSecret) {
+        const { verifySharedSecretAsync } = await import("./verifiers/shared-secret.js");
+        const valid = await verifySharedSecretAsync(webhookSignature, laneSecret);
+        return valid ? { valid: true } : { valid: false, error: 'Invalid webhook signature' };
+    }
+    if ((await loadToolsConfig(runtime)).webhookAllowUnsigned)
+        return { valid: true };
+    return { valid: false, error: 'No valid signature found' };
+}
+/** A body field read as an event name, or `undefined` when it is not a non-empty string. */
+function eventText(value) {
+    const text = EventTextSchema.safeParse(value);
+    return text.success ? text.data : undefined;
+}
+function extractEventType(source, body) {
+    if (source === 'resend')
+        return eventText(body.type) ?? 'email.received';
+    if (source === 'cloudflare-email') {
+        return eventText(body.type) ?? eventText(body.event_type) ?? 'inboundEmail';
+    }
+    if (source === 'slack') {
+        if (body.type === 'url_verification')
+            return 'url_verification';
+        const event = body.event;
+        return (isJsonObject(event) ? eventText(event.type) : undefined) ?? 'event_callback';
+    }
+    if (source === 'discord')
+        return body.type === 1 ? 'PING' : 'interactionCreate';
+    return eventText(body.type) ?? 'unknown';
+}
+function baseRequest(source, rawBody, headers) {
+    const timestamp = nowIso();
+    return {
+        id: generateId(),
+        source,
+        event_type: 'unknown',
+        raw_body: rawBodyForPersistence(source, rawBody),
+        raw_headers: headersForPersistence(headers),
+        signature: pickSignature(headers),
+        status: 'received',
+        created_at: timestamp,
+        updated_at: timestamp
+    };
+}
+function failedPreparation(request, error, status = 'failed') {
+    const timestamp = nowIso();
+    return {
+        request: {
+            ...request,
+            status,
+            error,
+            updated_at: timestamp,
+            completed_at: timestamp
+        },
+        result: {
+            request_id: request.id,
+            status: status === 'rejected' ? 'rejected' : 'error',
+            event_type: request.event_type,
+            error
+        },
+        outbox_specs: [],
+        dispatch_mode: 'none'
+    };
+}
+/**
+ * Verify, route and parse one request. A thrown failure (a store, a resolve, a
+ * vendor verifier) is the caller's to record; vendor parse steps are recorded
+ * here with their own text.
+ */
+async function prepareRequest(request, source, rawBody, headers, runtime) {
+    const verification = await verifyRequest(runtime, source, rawBody, headers);
+    if (!verification.valid) {
+        return failedPreparation(request, verification.error ?? 'Unknown verification failure', 'rejected');
+    }
+    const body = readJsonObject(rawBody);
+    if (!body)
+        return failedPreparation(request, 'Invalid JSON');
+    if (source === 'slack' && body.type === 'url_verification') {
+        const timestamp = nowIso();
+        return {
+            request: {
+                ...request,
+                event_type: 'url_verification',
+                status: 'completed',
+                updated_at: timestamp,
+                completed_at: timestamp,
+                completion_reason: 'transport-handshake'
+            },
+            result: {
+                request_id: request.id,
+                status: 'accepted',
+                event_type: 'url_verification',
+                challenge: eventText(body.challenge)
+            },
+            outbox_specs: [],
+            dispatch_mode: 'none'
+        };
+    }
+    const eventType = extractEventType(source, body);
+    request.event_type = eventType;
+    const eventDefinition = await resolveEventDefinition(runtime, source, eventType);
+    if (!eventDefinition) {
+        return failedPreparation(request, `No handler for ${source}:${eventType}`);
+    }
+    const parsed = attemptSync(() => eventDefinition.parse(body));
+    if (!parsed.ok)
+        return failedPreparation(request, `Parse: ${refusalText(parsed.failure)}`);
+    const parsedPayload = parsed.value;
+    const task = attemptSync(() => eventDefinition.buildTask?.(parsedPayload) ?? undefined);
+    if (!task.ok)
+        return failedPreparation(request, `Task: ${refusalText(task.failure)}`);
+    const outbox = attemptSync(() => eventDefinition.buildOutbox?.(parsedPayload).map((spec) => ({
+        ...spec,
+        webhook_request_id: request.id
+    })) ?? []);
+    if (!outbox.ok)
+        return failedPreparation(request, `Outbox: ${refusalText(outbox.failure)}`);
+    const response = attemptSync(() => eventDefinition.buildResponse?.(parsedPayload) ?? undefined);
+    if (!response.ok)
+        return failedPreparation(request, `Response: ${refusalText(response.failure)}`);
+    const idempotencyKey = eventDefinition.idempotencyKey?.(parsedPayload, body)?.trim();
+    if (idempotencyKey)
+        request.idempotency_key = idempotencyKey;
+    request.parsed_payload = parsedPayload;
+    const prepared = {
+        request,
+        result: {
+            request_id: request.id,
+            status: 'accepted',
+            event_type: eventType,
+            source,
+            parsed_payload: parsedPayload,
+            response: response.value
+        },
+        outbox_specs: outbox.value,
+        dispatch_mode: eventDefinition.descriptor.dispatchMode ?? 'hook'
+    };
+    if (task.value)
+        prepared.task_spec = task.value;
+    return prepared;
+}
+export async function prepareWebhook(source, rawBody, headers, options) {
+    const request = baseRequest(source, rawBody, headers);
+    const prepared = await attempt(() => prepareRequest(request, source, rawBody, headers, options.runtime));
+    if (prepared.ok)
+        return prepared.value;
+    getLogger(LOGGER_ID, options.runtime).error('prepareWebhook unhandled', {
+        source,
+        failure: valueFreeFailure(prepared.failure)
+    });
+    return failedPreparation(request, refusalText(prepared.failure));
+}
+/** Accept a prepared request durably, then dispatch it when consumers wait on it. */
+async function commitRequest(preparation, options) {
+    const acceptance = await acceptPreparedWebhook(preparation, options);
+    if (acceptance.status !== 'accepted') {
+        const refused = {
+            request_id: acceptance.request_id,
+            status: acceptance.status,
+            event_type: acceptance.event_type
+        };
+        if (acceptance.error)
+            refused.error = acceptance.error;
+        return refused;
+    }
+    if (acceptance.dispatch_required) {
+        await dispatchAcceptedWebhook(acceptance.request_id, options);
+    }
+    const committed = {
+        ...preparation.result,
+        request_id: acceptance.request_id
+    };
+    if (acceptance.duplicate)
+        committed.duplicate = true;
+    return committed;
+}
+export async function commitPreparedWebhook(preparation, options) {
+    const committed = await attempt(() => commitRequest(preparation, options));
+    if (committed.ok)
+        return committed.value;
+    getLogger(LOGGER_ID, options.runtime).error('commitPreparedWebhook unhandled', {
+        source: preparation.request.source,
+        requestId: preparation.request.id,
+        failure: valueFreeFailure(committed.failure)
+    });
+    return {
+        request_id: preparation.request.id,
+        status: 'error',
+        event_type: preparation.request.event_type,
+        error: refusalText(committed.failure)
+    };
+}
+export async function processWebhook(source, rawBody, headers, options) {
+    const preparation = await prepareWebhook(source, rawBody, headers, options);
+    return commitPreparedWebhook(preparation, options);
+}
+//# sourceMappingURL=router.js.map

package/dist/webhooks/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/webhooks/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAEhB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAmC,MAAM,kCAAkC,CAAC;AACjG,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAa3E,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/D,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAE1C,gGAAgG;AAChG,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,8DAA8D;AAC9D,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE1C,SAAS,UAAU;IAClB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,MAAM;IACd,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,OAA+B;IACrD,OAAO,CACN,OAAO,CAAC,gBAAgB,CAAC;QACzB,OAAO,CAAC,mBAAmB,CAAC;QAC5B,OAAO,CAAC,qBAAqB,CAAC;QAC9B,OAAO,CAAC,qBAAqB,CAAC;QAC9B,EAAE,CACF,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAgB;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,QAAQ,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAqB,EAAE,OAAe;IACpE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC;AAED,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACzC,cAAc;IACd,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,gBAAgB;IAChB,2BAA2B;IAC3B,mBAAmB;IACnB,qBAAqB;IACrB,uBAAuB;IACvB,cAAc;IACd,qBAAqB;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,OAA+B;IAC7D,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,CAAU,CAAC;SAC5D,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACzD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,OAAsB;IAC1C,OAAO,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,wBAAwB,CACtC,OAAqB,EACrB,MAAqB;IAKrB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAC1B,0BAA0B,CAC1B,CAAC;IACF,MAAM,UAAU,GAAG,CAClB,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,gBAAgB,EAAE,CACjF,CAAC,CAAC,CAAC,CAAC;IACL,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC;QACJ,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,OAAO,MAAM,sCAAsC,EAAE,aAAa,EAAE;YAC7F,MAAM,EAAE,6BAA6B;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,EAAE;YAC9C,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACzD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CACpC,OAAqB,EACrB,MAAqB,EACrB,SAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAGzB,gCAAgC,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,CAClB,MAAM,KAAK;SACT,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,CAAC;SACxF,gBAAgB,EAAE,CACpB,CAAC,CAAC,CAAC,CAAC;IACL,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC;QACJ,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,OAAO,MAAM,IAAI,SAAS,oCAAoC,EAAE,aAAa,EAAE;YACxG,MAAM,EAAE,+BAA+B;YACvC,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE;YAC3D,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SACzD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC3B,OAAqB,EACrB,MAAqB,EACrB,OAAe,EACf,OAA+B;IAE/B,8EAA8E;IAC9E,6EAA6E;IAC7E,mDAAmD;IACnD,IAAI,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,kBAAkB;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACjD,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,MAAM,qBAAqB,EAAE,CAAC;QACpF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,MAAM,YAAY,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxG,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;AAC5D,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAAC,KAA4B;IAC9C,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAqB,EAAE,IAAgB;IAChE,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;IACzE,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,kBAAkB,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAChF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CACnB,MAAqB,EACrB,OAAe,EACf,OAA+B;IAE/B,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;IAC3B,OAAO;QACN,EAAE,EAAE,UAAU,EAAE;QAChB,MAAM;QACN,UAAU,EAAE,SAAS;QACrB,QAAQ,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC;QAChD,WAAW,EAAE,qBAAqB,CAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC;QACjC,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,SAAS;KACrB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACzB,OAAuB,EACvB,KAAa,EACb,SAAgC,QAAQ;IAExC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;IAC3B,OAAO;QACN,OAAO,EAAE;YACR,GAAG,OAAO;YACV,MAAM;YACN,KAAK;YACL,UAAU,EAAE,SAAS;YACrB,YAAY,EAAE,SAAS;SACvB;QACD,MAAM,EAAE;YACP,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;YACpD,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK;SACL;QACD,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,MAAM;KACrB,CAAC;AACH,CAAC;AAcD;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC5B,OAAuB,EACvB,MAAqB,EACrB,OAAe,EACf,OAA+B,EAC/B,OAAqB;IAErB,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,iBAAiB,CACvB,OAAO,EACP,YAAY,CAAC,KAAK,IAAI,8BAA8B,EACpD,UAAU,CACV,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAE7D,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAC3B,OAAO;YACN,OAAO,EAAE;gBACR,GAAG,OAAO;gBACV,UAAU,EAAE,kBAAkB;gBAC9B,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,SAAS;gBACvB,iBAAiB,EAAE,qBAAqB;aACxC;YACD,MAAM,EAAE;gBACP,UAAU,EAAE,OAAO,CAAC,EAAE;gBACtB,MAAM,EAAE,UAAU;gBAClB,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;aACpC;YACD,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,MAAM;SACrB,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAC/B,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjF,IAAI,CAAC,eAAe,EAAE,CAAC;QACtB,OAAO,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,UAAU,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3F,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;IAEnC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,CAAC;IACxF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,SAAS,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEtF,MAAM,MAAM,GAAG,WAAW,CACzB,GAAG,EAAE,CACJ,eAAe,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3D,GAAG,IAAI;QACP,kBAAkB,EAAE,OAAO,CAAC,EAAE;KAC9B,CAAC,CAAC,IAAI,EAAE,CACV,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,WAAW,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAE5F,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,CAAC;IAChG,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,aAAa,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAElG,MAAM,cAAc,GAAG,eAAe,CAAC,cAAc,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACrF,IAAI,cAAc;QAAE,OAAO,CAAC,eAAe,GAAG,cAAc,CAAC;IAC7D,OAAO,CAAC,cAAc,GAAG,aAAa,CAAC;IAEvC,MAAM,QAAQ,GAAuB;QACpC,OAAO;QACP,MAAM,EAAE;YACP,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,SAAS;YACrB,MAAM;YACN,cAAc,EAAE,aAAa;YAC7B,QAAQ,EAAE,QAAQ,CAAC,KAAK;SACxB;QACD,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,aAAa,EAAE,eAAe,CAAC,UAAU,CAAC,YAAY,IAAI,MAAM;KAChE,CAAC;IACF,IAAI,IAAI,CAAC,KAAK;QAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;IAChD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,MAAqB,EACrB,OAAe,EACf,OAA+B,EAC/B,OAA8B;IAE9B,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACzG,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACvC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,0BAA0B,EAAE;QACvE,MAAM;QACN,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC;KAC3C,CAAC,CAAC;IACH,OAAO,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,aAAa,CAC3B,WAA+B,EAC/B,OAA6B;IAE7B,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACrE,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,OAAO,GAAyB;YACrC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,UAAU,CAAC,UAAU;SACjC,CAAC;QACF,IAAI,UAAU,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QACvD,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,uBAAuB,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,SAAS,GAAyB;QACvC,GAAG,WAAW,CAAC,MAAM;QACrB,UAAU,EAAE,UAAU,CAAC,UAAU;KACjC,CAAC;IACF,IAAI,UAAU,CAAC,SAAS;QAAE,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC;IACrD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,WAA+B,EAC/B,OAA6B;IAE7B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,IAAI,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC;IACzC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,iCAAiC,EAAE;QAC9E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM;QAClC,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;QACjC,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO;QACN,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;QAClC,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU;QAC1C,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC;KACrC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,MAAqB,EACrB,OAAe,EACf,OAA+B,EAC/B,OAA8B;IAE9B,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5E,OAAO,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC"}

package/dist/webhooks/schemas/index.d.ts

@@ -0,0 +1,9 @@
+export * from './webhook-request.ts';
+export * from './signature-verifier.ts';
+export * from './webhook-event-definition.ts';
+export * from './webhook-process-result.ts';
+export * from './webhook-preparation.ts';
+export * from './webhook-events.ts';
+export * from './webhook-service.ts';
+export * from './webhook-delivery.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/webhooks/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/webhooks/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/webhooks/schemas/index.js

@@ -0,0 +1,9 @@
+export * from "./webhook-request.js";
+export * from "./signature-verifier.js";
+export * from "./webhook-event-definition.js";
+export * from "./webhook-process-result.js";
+export * from "./webhook-preparation.js";
+export * from "./webhook-events.js";
+export * from "./webhook-service.js";
+export * from "./webhook-delivery.js";
+//# sourceMappingURL=index.js.map

package/dist/webhooks/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/webhooks/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC"}

package/dist/webhooks/schemas/signature-verifier.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Signature Verifier Descriptor + Implementation Interface
+ *
+ * `tools/signature-verifier` is a data-only runtime kind. Descriptors live
+ * with the vendor pack that owns the verification scheme (e.g. the Resend
+ * Svix verifier ships from `@vibesdotdev/integrations-email-resend`,
+ * the Slack v0 HMAC verifier ships from `@vibesdotdev/integrations-slack`).
+ *
+ * The router resolves the verifier for an incoming source by querying the
+ * runtime for descriptors whose `source` matches the URL parameter, then
+ * resolving the bound implementation via a loader.
+ */
+import * as z from 'zod/v4';
+export declare const SignatureVerifierDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodLiteral<"tools/signature-verifier">;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    source: z.ZodString;
+    headerName: z.ZodOptional<z.ZodString>;
+    signingSecretEnv: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type SignatureVerifierDescriptor = z.infer<typeof SignatureVerifierDescriptorSchema>;
+/**
+ * Runtime implementation of a `tools/signature-verifier` descriptor.
+ *
+ * The router calls `verify(rawBody, headers, secret)` and expects a boolean.
+ * Implementations must be pure (no side effects) and constant-time when
+ * comparing digests. Throwing is acceptable for malformed inputs; return
+ * `false` for verification failures.
+ */
+export interface SignatureVerifierImplementation {
+    readonly descriptor: SignatureVerifierDescriptor;
+    verify(rawBody: string, headers: Record<string, string>, secret: string): boolean | Promise<boolean>;
+}
+//# sourceMappingURL=signature-verifier.d.ts.map

package/dist/webhooks/schemas/signature-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-verifier.d.ts","sourceRoot":"","sources":["../../../src/webhooks/schemas/signature-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,iCAAiC;;;;;;;;;iBAmB5C,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;;;;;GAOG;AACH,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrG"}

package/dist/webhooks/schemas/signature-verifier.js

@@ -0,0 +1,30 @@
+/**
+ * Signature Verifier Descriptor + Implementation Interface
+ *
+ * `tools/signature-verifier` is a data-only runtime kind. Descriptors live
+ * with the vendor pack that owns the verification scheme (e.g. the Resend
+ * Svix verifier ships from `@vibesdotdev/integrations-email-resend`,
+ * the Slack v0 HMAC verifier ships from `@vibesdotdev/integrations-slack`).
+ *
+ * The router resolves the verifier for an incoming source by querying the
+ * runtime for descriptors whose `source` matches the URL parameter, then
+ * resolving the bound implementation via a loader.
+ */
+import * as z from 'zod/v4';
+export const SignatureVerifierDescriptorSchema = z.object({
+    id: z.string(),
+    kind: z.literal('tools/signature-verifier'),
+    name: z.string(),
+    description: z.string().optional(),
+    /** The webhook source this verifier handles (e.g. 'resend', 'slack'). */
+    source: z.string(),
+    /** Header name that carries the signature (e.g. 'svix-signature', 'x-slack-signature'). */
+    headerName: z.string().optional(),
+    /**
+     * Secret key holding the signing secret, resolved through the host's secrets
+     * store (`runtime.resolveCredential`). The field keeps its historical name.
+     */
+    signingSecretEnv: z.string().optional(),
+    tags: z.array(z.string()).optional()
+});
+//# sourceMappingURL=signature-verifier.js.map

package/dist/webhooks/schemas/signature-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-verifier.js","sourceRoot":"","sources":["../../../src/webhooks/schemas/signature-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC,yEAAyE;IACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAElB,2FAA2F;IAC3F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEjC;;;OAGG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC"}

package/dist/webhooks/schemas/webhook-delivery.d.ts

@@ -0,0 +1,152 @@
+/**
+ * Durable webhook fan-out contracts.
+ *
+ * A verified provider request is accepted once, then expanded into one delivery
+ * per `tools/webhook-consumer`. Delivery leases are the authority for retries;
+ * the generic runtime hook bus is deliberately not used as a receipt channel.
+ */
+import type { ReadonlyJsonObject } from '@vibesdotdev/kernel/schemas/json';
+import * as z from 'zod/v4';
+import { type WebhookParsedEvent } from './webhook-events.ts';
+export declare const WebhookDeliveryStatusSchema: z.ZodEnum<{
+    pending: "pending";
+    leased: "leased";
+    dead_lettered: "dead_lettered";
+    retry_wait: "retry_wait";
+    succeeded: "succeeded";
+}>;
+export type WebhookDeliveryStatus = z.infer<typeof WebhookDeliveryStatusSchema>;
+export declare const WebhookDeliverySchema: z.ZodObject<{
+    id: z.ZodString;
+    webhook_request_id: z.ZodString;
+    consumer_id: z.ZodString;
+    payload: z.ZodObject<{
+        request_id: z.ZodString;
+        source: z.ZodString;
+        event_type: z.ZodString;
+        parsed_payload: z.ZodType<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/schemas/json").JsonObject, import("@vibesdotdev/kernel/schemas/json").JsonObject>>;
+        task_spec: z.ZodOptional<z.ZodObject<{
+            title: z.ZodString;
+            lane: z.ZodString;
+            description: z.ZodString;
+            priority: z.ZodEnum<{
+                low: "low";
+                medium: "medium";
+                high: "high";
+                critical: "critical";
+            }>;
+            assigned_to: z.ZodString;
+        }, z.core.$strip>>;
+        outbox_specs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            source: z.ZodString;
+            webhook_request_id: z.ZodString;
+            action: z.ZodUnion<readonly [z.ZodLiteral<"send_email">, z.ZodLiteral<"post_message">, z.ZodLiteral<"create_task">, z.ZodLiteral<"update_lead">, z.ZodLiteral<"custom">]>;
+            payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            status: z.ZodEnum<{
+                failed: "failed";
+                pending: "pending";
+                sent: "sent";
+            }>;
+            created_at: z.ZodString;
+        }, z.core.$strip>>;
+        created_at: z.ZodString;
+    }, z.core.$strip>;
+    status: z.ZodEnum<{
+        pending: "pending";
+        leased: "leased";
+        dead_lettered: "dead_lettered";
+        retry_wait: "retry_wait";
+        succeeded: "succeeded";
+    }>;
+    attempt_count: z.ZodNumber;
+    max_attempts: z.ZodNumber;
+    next_attempt_at: z.ZodString;
+    lease_owner: z.ZodOptional<z.ZodString>;
+    lease_expires_at: z.ZodOptional<z.ZodString>;
+    last_error: z.ZodOptional<z.ZodString>;
+    receipt: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+    completed_at: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type WebhookDelivery = z.infer<typeof WebhookDeliverySchema>;
+export declare const WebhookConsumerDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"tools/webhook-consumer">;
+    sources: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    eventTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    maxAttempts: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type WebhookConsumerDescriptor = z.infer<typeof WebhookConsumerDescriptorSchema>;
+export type WebhookConsumerResult = {
+    status: 'succeeded' | 'skipped';
+    /** JSON data the consumer records as proof of acceptance; serialization omits an undefined field. */
+    receipt?: ReadonlyJsonObject;
+} | {
+    status: 'retry';
+    error: string;
+    retryAfterMs?: number;
+} | {
+    status: 'permanent-failure';
+    error: string;
+};
+export interface WebhookDeliveryContext {
+    /**
+     * Aborts before the durable delivery lease can expire. Consumers that make
+     * I/O calls must pass this signal through to the underlying operation.
+     */
+    signal: AbortSignal;
+}
+export interface WebhookConsumerImplementation {
+    deliver(payload: WebhookParsedEvent, context: WebhookDeliveryContext): Promise<WebhookConsumerResult>;
+}
+export interface WebhookDeliveryClaim {
+    claimed: boolean;
+    delivery: WebhookDelivery;
+}
+export interface WebhookAcceptResult {
+    request_id: string;
+    claimed: boolean;
+    duplicate: boolean;
+    dispatch_required: boolean;
+    status: 'accepted' | 'rejected' | 'error';
+    event_type: string;
+    error?: string;
+}
+export declare const WebhookIngressRejectionReasonSchema: z.ZodEnum<{
+    other: "other";
+    "invalid-signature": "invalid-signature";
+    "missing-credential": "missing-credential";
+    "stale-timestamp": "stale-timestamp";
+    "invalid-json": "invalid-json";
+    "unknown-source": "unknown-source";
+    "oversized-body": "oversized-body";
+}>;
+export type WebhookIngressRejectionReason = z.infer<typeof WebhookIngressRejectionReasonSchema>;
+export interface WebhookIngressRateDecision {
+    allowed: boolean;
+    count: number;
+    limit: number;
+    retry_after_seconds: number;
+}
+//# sourceMappingURL=webhook-delivery.d.ts.map

package/dist/webhooks/schemas/webhook-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery.d.ts","sourceRoot":"","sources":["../../../src/webhooks/schemas/webhook-delivery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAExF,eAAO,MAAM,2BAA2B;;;;;;EAMtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;iBAK1C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,MAAM,MAAM,qBAAqB,GAC9B;IACA,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,qGAAqG;IACrG,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC5B,GACD;IACA,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IACA,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;CACb,CAAC;AAEL,MAAM,WAAW,sBAAsB;IACtC;;;OAGG;IACH,MAAM,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,WAAW,6BAA6B;IAC7C,OAAO,CACN,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,mCAAmC;;;;;;;;EAQ9C,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;CAC5B"}