@vibesdotdev/tools 0.0.0-stage → 1.0.0-rc.4

package/dist/webhooks/webhook-service.fs.impl.consumer.js

@@ -0,0 +1,93 @@
+import { assertWebhookServiceRuntime } from "./service-runtime.js";
+import { acceptPreparedWebhook, dispatchAcceptedWebhook, reconcileWebhooks, recordWebhookIngressRejection } from "./delivery.js";
+import { commitPreparedWebhook, prepareWebhook, processWebhook } from "./router.js";
+import { createFsWebhookStore } from "./store/consumer.js";
+/** Consumer implementation. Cloud hosts intentionally supply another descriptor. */
+export default class FsWebhookService {
+    descriptor;
+    runtime;
+    store;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.runtime = context.runtime;
+    }
+    getStore() {
+        return this.store ??= createFsWebhookStore(this.runtime);
+    }
+    async prepare(source, rawBody, headers, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return prepareWebhook(source, rawBody, headers, {
+            runtime: this.runtime
+        });
+    }
+    async commit(preparation, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return commitPreparedWebhook(preparation, {
+            runtime: this.runtime,
+            store: await this.getStore()
+        });
+    }
+    async accept(preparation, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return acceptPreparedWebhook(preparation, {
+            runtime: this.runtime,
+            store: await this.getStore()
+        });
+    }
+    async dispatch(requestId, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return dispatchAcceptedWebhook(requestId, {
+            runtime: this.runtime,
+            store: await this.getStore()
+        });
+    }
+    async reconcile(options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return reconcileWebhooks({
+            runtime: this.runtime,
+            store: await this.getStore(),
+            limit: options.limit
+        });
+    }
+    async recordIngressRejection(input) {
+        return recordWebhookIngressRejection(input, {
+            runtime: this.runtime,
+            store: await this.getStore()
+        });
+    }
+    async process(source, rawBody, headers, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return processWebhook(source, rawBody, headers, {
+            runtime: this.runtime,
+            store: await this.getStore()
+        });
+    }
+    async loadConfig() {
+        return (await this.getStore()).loadConfig();
+    }
+    async saveConfig(config) {
+        return (await this.getStore()).saveConfig(config);
+    }
+    async listRequests(filters) {
+        return (await this.getStore()).listRequests(filters);
+    }
+    async getRequest(id) {
+        return (await this.getStore()).getRequest(id);
+    }
+    async updateRequest(id, updates) {
+        return (await this.getStore()).updateRequest(id, updates);
+    }
+    async listOutbox(filters) {
+        return (await this.getStore()).listOutboxEntries(filters);
+    }
+    async getOutboxEntry(id) {
+        return (await this.getStore()).getOutboxEntry(id);
+    }
+    async updateOutboxEntry(id, updates) {
+        return (await this.getStore()).updateOutboxEntry(id, updates);
+    }
+    async getPendingOutbox() {
+        return (await this.getStore()).getPendingOutboxEntries();
+    }
+}
+//# sourceMappingURL=webhook-service.fs.impl.consumer.js.map

package/dist/webhooks/webhook-service.fs.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.fs.impl.consumer.js","sourceRoot":"","sources":["../../src/webhooks/webhook-service.fs.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAgBnE,OAAO,EACN,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,6BAA6B,EAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAI3D,oFAAoF;AACpF,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAK1B;IAJO,OAAO,CAAe;IAC/B,KAAK,CAAoC;IAEjD,YACU,UAAoC,EAC7C,OAAkC;QADzB,eAAU,GAAV,UAAU,CAA0B;QAG7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,CAAC;IAEO,QAAQ;QACf,OAAO,IAAI,CAAC,KAAK,KAAK,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,MAAqB,EACrB,OAAe,EACf,OAA+B,EAC/B,UAAiC,EAAE;QAEnC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACX,WAA+B,EAC/B,UAAiC,EAAE;QAEnC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,qBAAqB,CAAC,WAAW,EAAE;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE;SAC5B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACX,WAA+B,EAC/B,UAAiC,EAAE;QAEnC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,qBAAqB,CAAC,WAAW,EAAE;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE;SAC5B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,UAAiC,EAAE;QACpE,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,uBAAuB,CAAC,SAAS,EAAE;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE;SAC5B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAsD,EAAE;QACvE,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,iBAAiB,CAAC;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC3B,KAA8D;QAE9D,OAAO,6BAA6B,CAAC,KAAK,EAAE;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE;SAC5B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,MAAqB,EACrB,OAAe,EACf,OAA+B,EAC/B,UAAiC,EAAE;QAEnC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE;SAC5B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACf,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAqB;QACrC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAoC;QACtD,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,EAAU,EACV,OAAgC;QAEhC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAmC;QACnD,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC9B,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,EAAU,EACV,OAAoC;QAEpC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,uBAAuB,EAAE,CAAC;IAC1D,CAAC;CACD"}

package/dist/webhooks/webhook-service.memory.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { WebhookServiceDescriptor } from './schemas/webhook-service.ts';
+declare const descriptor: WebhookServiceDescriptor;
+export default descriptor;
+//# sourceMappingURL=webhook-service.memory.descriptor.d.ts.map

package/dist/webhooks/webhook-service.memory.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.memory.descriptor.d.ts","sourceRoot":"","sources":["../../src/webhooks/webhook-service.memory.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAE7E,QAAA,MAAM,UAAU,EAAE,wBASjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/webhooks/webhook-service.memory.descriptor.js

@@ -0,0 +1,11 @@
+const descriptor = {
+    id: 'webhook-service.memory',
+    kind: 'tools/webhook-service',
+    name: 'Memory webhook service',
+    description: 'Workerd-safe fallback webhook ingress + config with an ephemeral request log. Production hosts should override it with durable persistence.',
+    hardware: ['cloud'],
+    tags: ['webhooks', 'memory', 'cloud'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=webhook-service.memory.descriptor.js.map

package/dist/webhooks/webhook-service.memory.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.memory.descriptor.js","sourceRoot":"","sources":["../../src/webhooks/webhook-service.memory.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA6B;IAC5C,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,uBAAuB;IAC7B,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACV,6IAA6I;IAC9I,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC;IACrC,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/webhooks/webhook-service.memory.impl.cloud.d.ts

@@ -0,0 +1,33 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { KindContext } from '@vibesdotdev/kernel/schemas/kind';
+import type { WebhookService, WebhookServiceDescriptor, WebhookProcessOptions } from './schemas/webhook-service.ts';
+import type { WebhookProcessResult } from './schemas/webhook-process-result.ts';
+import type { WebhookPreparation } from './schemas/webhook-preparation.ts';
+import type { WebhookConfig, WebhookOutboxEntry, WebhookRequest, WebhookSource } from './schemas/webhook-request.ts';
+import type { WebhookStoreOutboxFilters, WebhookStoreRequestFilters } from './store/types.ts';
+/** Cloud/workerd service with persistence owned by this runtime-resolved instance. */
+export default class MemoryWebhookService implements WebhookService {
+    readonly descriptor: WebhookServiceDescriptor;
+    private readonly runtime;
+    private readonly store;
+    constructor(descriptor: WebhookServiceDescriptor, context: KindContext<VibesRuntime>);
+    prepare(source: WebhookSource, rawBody: string, headers: Record<string, string>, options?: WebhookProcessOptions): Promise<WebhookPreparation>;
+    commit(preparation: WebhookPreparation, options?: WebhookProcessOptions): Promise<WebhookProcessResult>;
+    accept(preparation: WebhookPreparation, options?: WebhookProcessOptions): Promise<import("./index.ts").WebhookAcceptResult>;
+    dispatch(requestId: string, options?: WebhookProcessOptions): Promise<import("./index.ts").WebhookDispatchResult>;
+    reconcile(options?: WebhookProcessOptions & {
+        limit?: number;
+    }): Promise<import("./index.ts").WebhookReconcileResult>;
+    recordIngressRejection(input: Parameters<WebhookService['recordIngressRejection']>[0]): Promise<import("./index.ts").WebhookIngressRateDecision>;
+    process(source: WebhookSource, rawBody: string, headers: Record<string, string>, options?: WebhookProcessOptions): Promise<WebhookProcessResult>;
+    loadConfig(): Promise<WebhookConfig>;
+    saveConfig(config: WebhookConfig): Promise<void>;
+    listRequests(filters?: WebhookStoreRequestFilters): Promise<WebhookRequest[]>;
+    getRequest(id: string): Promise<WebhookRequest | null>;
+    updateRequest(id: string, updates: Partial<WebhookRequest>): Promise<WebhookRequest | null>;
+    listOutbox(filters?: WebhookStoreOutboxFilters): Promise<WebhookOutboxEntry[]>;
+    getOutboxEntry(id: string): Promise<WebhookOutboxEntry | null>;
+    updateOutboxEntry(id: string, updates: Partial<WebhookOutboxEntry>): Promise<WebhookOutboxEntry | null>;
+    getPendingOutbox(): Promise<WebhookOutboxEntry[]>;
+}
+//# sourceMappingURL=webhook-service.memory.impl.cloud.d.ts.map

package/dist/webhooks/webhook-service.memory.impl.cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.memory.impl.cloud.d.ts","sourceRoot":"","sources":["../../src/webhooks/webhook-service.memory.impl.cloud.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EACX,cAAc,EACd,wBAAwB,EACxB,qBAAqB,EACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EACX,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,MAAM,8BAA8B,CAAC;AAUtC,OAAO,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE9F,sFAAsF;AACtF,MAAM,CAAC,OAAO,OAAO,oBAAqB,YAAW,cAAc;IAKjE,QAAQ,CAAC,UAAU,EAAE,wBAAwB;IAJ9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBAG3B,UAAU,EAAE,wBAAwB,EAC7C,OAAO,EAAE,WAAW,CAAC,YAAY,CAAC;IAM7B,OAAO,CACZ,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,GAAE,qBAA0B,GACjC,OAAO,CAAC,kBAAkB,CAAC;IAOxB,MAAM,CACX,WAAW,EAAE,kBAAkB,EAC/B,OAAO,GAAE,qBAA0B,GACjC,OAAO,CAAC,oBAAoB,CAAC;IAQ1B,MAAM,CACX,WAAW,EAAE,kBAAkB,EAC/B,OAAO,GAAE,qBAA0B;IAS9B,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B;IAQ/D,SAAS,CAAC,OAAO,GAAE,qBAAqB,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO;IASlE,sBAAsB,CAC3B,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC;IAQzD,OAAO,CACZ,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,GAAE,qBAA0B,GACjC,OAAO,CAAC,oBAAoB,CAAC;IAQ1B,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC;IAIpC,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,YAAY,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAI7E,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAItD,aAAa,CAClB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAC9B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAI3B,UAAU,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAI9E,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAI9D,iBAAiB,CACtB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAClC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAI/B,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAGvD"}

package/dist/webhooks/webhook-service.memory.impl.cloud.js

@@ -0,0 +1,91 @@
+import { assertWebhookServiceRuntime } from "./service-runtime.js";
+import { acceptPreparedWebhook, dispatchAcceptedWebhook, reconcileWebhooks, recordWebhookIngressRejection } from "./delivery.js";
+import { commitPreparedWebhook, prepareWebhook, processWebhook } from "./router.js";
+import { createMemoryWebhookStore } from "./store/memory-store.js";
+/** Cloud/workerd service with persistence owned by this runtime-resolved instance. */
+export default class MemoryWebhookService {
+    descriptor;
+    runtime;
+    store;
+    constructor(descriptor, context) {
+        this.descriptor = descriptor;
+        this.runtime = context.runtime;
+        this.store = createMemoryWebhookStore();
+    }
+    async prepare(source, rawBody, headers, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return prepareWebhook(source, rawBody, headers, {
+            runtime: this.runtime
+        });
+    }
+    async commit(preparation, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return commitPreparedWebhook(preparation, {
+            runtime: this.runtime,
+            store: this.store
+        });
+    }
+    async accept(preparation, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return acceptPreparedWebhook(preparation, {
+            runtime: this.runtime,
+            store: this.store
+        });
+    }
+    async dispatch(requestId, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return dispatchAcceptedWebhook(requestId, {
+            runtime: this.runtime,
+            store: this.store
+        });
+    }
+    async reconcile(options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return reconcileWebhooks({
+            runtime: this.runtime,
+            store: this.store,
+            limit: options.limit
+        });
+    }
+    async recordIngressRejection(input) {
+        return recordWebhookIngressRejection(input, {
+            runtime: this.runtime,
+            store: this.store
+        });
+    }
+    async process(source, rawBody, headers, options = {}) {
+        assertWebhookServiceRuntime(this.runtime, options.runtime);
+        return processWebhook(source, rawBody, headers, {
+            runtime: this.runtime,
+            store: this.store
+        });
+    }
+    async loadConfig() {
+        return this.store.loadConfig();
+    }
+    async saveConfig(config) {
+        return this.store.saveConfig(config);
+    }
+    async listRequests(filters) {
+        return this.store.listRequests(filters);
+    }
+    async getRequest(id) {
+        return this.store.getRequest(id);
+    }
+    async updateRequest(id, updates) {
+        return this.store.updateRequest(id, updates);
+    }
+    async listOutbox(filters) {
+        return this.store.listOutboxEntries(filters);
+    }
+    async getOutboxEntry(id) {
+        return this.store.getOutboxEntry(id);
+    }
+    async updateOutboxEntry(id, updates) {
+        return this.store.updateOutboxEntry(id, updates);
+    }
+    async getPendingOutbox() {
+        return this.store.getPendingOutboxEntries();
+    }
+}
+//# sourceMappingURL=webhook-service.memory.impl.cloud.js.map

package/dist/webhooks/webhook-service.memory.impl.cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.memory.impl.cloud.js","sourceRoot":"","sources":["../../src/webhooks/webhook-service.memory.impl.cloud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAgBnE,OAAO,EACN,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,6BAA6B,EAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAInE,sFAAsF;AACtF,MAAM,CAAC,OAAO,OAAO,oBAAoB;IAK9B;IAJO,OAAO,CAAe;IACtB,KAAK,CAAe;IAErC,YACU,UAAoC,EAC7C,OAAkC;QADzB,eAAU,GAAV,UAAU,CAA0B;QAG7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,wBAAwB,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,MAAqB,EACrB,OAAe,EACf,OAA+B,EAC/B,UAAiC,EAAE;QAEnC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACX,WAA+B,EAC/B,UAAiC,EAAE;QAEnC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,qBAAqB,CAAC,WAAW,EAAE;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CACX,WAA+B,EAC/B,UAAiC,EAAE;QAEnC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,qBAAqB,CAAC,WAAW,EAAE;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,UAAiC,EAAE;QACpE,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,uBAAuB,CAAC,SAAS,EAAE;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAsD,EAAE;QACvE,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,iBAAiB,CAAC;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC3B,KAA8D;QAE9D,OAAO,6BAA6B,CAAC,KAAK,EAAE;YAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,MAAqB,EACrB,OAAe,EACf,OAA+B,EAC/B,UAAiC,EAAE;QAEnC,2BAA2B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SACjB,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAqB;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAoC;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,aAAa,CAClB,EAAU,EACV,OAAgC;QAEhC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAmC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,iBAAiB,CACtB,EAAU,EACV,OAAoC;QAEpC,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,CAAC;IAC7C,CAAC;CACD"}

package/dist/webhooks/webhooks.plugin.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tools Webhooks Subplugin
+ *
+ * Registers the runtime kinds and hook-event descriptors for the generic
+ * webhook ingestion subsystem. Vendor packs (`@vibesdotdev/integrations-slack`,
+ * `@vibesdotdev/integrations-email-resend`, …) register signature verifier
+ * and event-definition descriptors against the two new kinds — they depend
+ * on `tools/webhooks` and `tools/agents` (for `agent/event-source`).
+ *
+ * No loaders are declared here: the kinds are data-only and there are no
+ * tools-owned verifier or event-definition impls (those belong with the
+ * vendor that owns the wire format).
+ */
+export declare const webhooksPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default webhooksPlugin;
+//# sourceMappingURL=webhooks.plugin.d.ts.map

package/dist/webhooks/webhooks.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.plugin.d.ts","sourceRoot":"","sources":["../../src/webhooks/webhooks.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAWH,eAAO,MAAM,cAAc,6CAczB,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/dist/webhooks/webhooks.plugin.js

@@ -0,0 +1,32 @@
+/**
+ * Tools Webhooks Subplugin
+ *
+ * Registers the runtime kinds and hook-event descriptors for the generic
+ * webhook ingestion subsystem. Vendor packs (`@vibesdotdev/integrations-slack`,
+ * `@vibesdotdev/integrations-email-resend`, …) register signature verifier
+ * and event-definition descriptors against the two new kinds — they depend
+ * on `tools/webhooks` and `tools/agents` (for `agent/event-source`).
+ *
+ * No loaders are declared here: the kinds are data-only and there are no
+ * tools-owned verifier or event-definition impls (those belong with the
+ * vendor that owns the wire format).
+ */
+import { createRuntimePlugin } from '@vibesdotdev/kernel';
+import { signatureVerifierKind, webhookConsumerKind, webhookEventDefinitionKind, webhookServiceKind } from "./kinds/webhook-kinds.js";
+import { webhookEventDescriptors } from "./events/index.js";
+export const webhooksPlugin = createRuntimePlugin({
+    id: 'tools/webhooks',
+    name: 'Tools Webhooks',
+    description: 'Generic webhook ingestion: signature-verifier and webhook-event-definition runtime kinds, plus the tools.webhook.{received,parsed,rejected} hook events.',
+    dependencies: ['tools'],
+    kinds: [
+        signatureVerifierKind,
+        webhookEventDefinitionKind,
+        webhookConsumerKind,
+        webhookServiceKind
+    ],
+    descriptors: webhookEventDescriptors,
+    loaders: []
+});
+export default webhooksPlugin;
+//# sourceMappingURL=webhooks.plugin.js.map

package/dist/webhooks/webhooks.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.plugin.js","sourceRoot":"","sources":["../../src/webhooks/webhooks.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACN,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;IACjD,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACV,0JAA0J;IAC3J,YAAY,EAAE,CAAC,OAAO,CAAC;IACvB,KAAK,EAAE;QACN,qBAAqB;QACrB,0BAA0B;QAC1B,mBAAmB;QACnB,kBAAkB;KAClB;IACD,WAAW,EAAE,uBAAuB;IACpC,OAAO,EAAE,EAAE;CACX,CAAC,CAAC;AAEH,eAAe,cAAc,CAAC"}

package/dist/workspaces/index.d.ts

@@ -0,0 +1,4 @@
+export * from './workspace-status.descriptor.ts';
+export * from './workspace-exec.descriptor.ts';
+export * from './workspace-pull.descriptor.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/workspaces/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workspaces/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC"}

package/dist/workspaces/index.js

@@ -0,0 +1,4 @@
+export * from "./workspace-status.descriptor.js";
+export * from "./workspace-exec.descriptor.js";
+export * from "./workspace-pull.descriptor.js";
+//# sourceMappingURL=index.js.map

package/dist/workspaces/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workspaces/index.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC"}

package/dist/workspaces/workspace-exec.descriptor.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Workspace Exec Tool Descriptor
+ *
+ * Universal tool descriptor for remote command execution on a cloud workspace host.
+ */
+import * as z from 'zod/v4';
+export declare const WorkspaceExecInputSchema: z.ZodObject<{
+    workspaceId: z.ZodString;
+    command: z.ZodString;
+    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const WorkspaceExecOutputSchema: z.ZodObject<{
+    exitCode: z.ZodNumber;
+    stdout: z.ZodString;
+    stderr: z.ZodString;
+    timedOut: z.ZodBoolean;
+}, z.core.$strip>;
+export type WorkspaceExecInput = z.infer<typeof WorkspaceExecInputSchema>;
+export type WorkspaceExecOutput = z.infer<typeof WorkspaceExecOutputSchema>;
+export declare const workspaceExecDescriptor: {
+    readonly kind: "tools/tool";
+    readonly id: "workspace-exec";
+    readonly name: "Workspace Exec";
+    readonly description: "Execute a shell command inside a cloud workspace host";
+    readonly mcpDescription: "Execute a command on a remote cloud workspace host and return the stdout, stderr, and exit code.";
+    readonly hardware: ["consumer", "cloud"];
+    readonly purpose: ["mcp", "agent", "direct"];
+    readonly category: "workspace";
+    readonly subcategory: "execution";
+    readonly safety: "write";
+    readonly requiresApproval: true;
+    readonly tags: ["workspace", "cloud", "exec", "command", "remote"];
+    readonly schemas: {
+        readonly input: z.ZodObject<{
+            workspaceId: z.ZodString;
+            command: z.ZodString;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            cwd: z.ZodOptional<z.ZodString>;
+            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            timeoutMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>;
+        readonly output: z.ZodObject<{
+            exitCode: z.ZodNumber;
+            stdout: z.ZodString;
+            stderr: z.ZodString;
+            timedOut: z.ZodBoolean;
+        }, z.core.$strip>;
+    };
+};
+export default workspaceExecDescriptor;
+//# sourceMappingURL=workspace-exec.descriptor.d.ts.map

package/dist/workspaces/workspace-exec.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-exec.descriptor.d.ts","sourceRoot":"","sources":["../../src/workspaces/workspace-exec.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,wBAAwB;;;;;;;iBAOnC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiBlC,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/dist/workspaces/workspace-exec.descriptor.js

@@ -0,0 +1,41 @@
+/**
+ * Workspace Exec Tool Descriptor
+ *
+ * Universal tool descriptor for remote command execution on a cloud workspace host.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel/factory';
+import * as z from 'zod/v4';
+export const WorkspaceExecInputSchema = z.object({
+    workspaceId: z.string().min(1),
+    command: z.string().min(1),
+    args: z.array(z.string()).optional(),
+    cwd: z.string().optional(),
+    env: z.record(z.string(), z.string()).optional(),
+    timeoutMs: z.number().int().positive().optional()
+});
+export const WorkspaceExecOutputSchema = z.object({
+    exitCode: z.number().int(),
+    stdout: z.string(),
+    stderr: z.string(),
+    timedOut: z.boolean()
+});
+export const workspaceExecDescriptor = createRuntimeAsset({
+    kind: 'tools/tool',
+    id: 'workspace-exec',
+    name: 'Workspace Exec',
+    description: 'Execute a shell command inside a cloud workspace host',
+    mcpDescription: 'Execute a command on a remote cloud workspace host and return the stdout, stderr, and exit code.',
+    hardware: ['consumer', 'cloud'],
+    purpose: ['mcp', 'agent', 'direct'],
+    category: 'workspace',
+    subcategory: 'execution',
+    safety: 'write',
+    requiresApproval: true,
+    tags: ['workspace', 'cloud', 'exec', 'command', 'remote'],
+    schemas: {
+        input: WorkspaceExecInputSchema,
+        output: WorkspaceExecOutputSchema
+    }
+});
+export default workspaceExecDescriptor;
+//# sourceMappingURL=workspace-exec.descriptor.js.map

package/dist/workspaces/workspace-exec.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-exec.descriptor.js","sourceRoot":"","sources":["../../src/workspaces/workspace-exec.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;IACzD,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,uDAAuD;IACpE,cAAc,EAAE,kGAAkG;IAClH,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IACnC,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,OAAO;IACf,gBAAgB,EAAE,IAAI;IACtB,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;IACzD,OAAO,EAAE;QACR,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,yBAAyB;KACjC;CACD,CAAC,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/dist/workspaces/workspace-exec.impl.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Workspace Exec Tool Implementation
+ *
+ * Dispatches remote command execution onto a cloud workspace host via fleet runtime/rpc.
+ */
+import type { VibesRuntime, ToolCallContext } from '@vibesdotdev/kernel';
+import { type WorkspaceExecInput, type WorkspaceExecOutput } from './workspace-exec.descriptor.ts';
+declare const _default: {
+    execute(input: WorkspaceExecInput, runtime: VibesRuntime, ctx: ToolCallContext): Promise<WorkspaceExecOutput>;
+};
+export default _default;
+//# sourceMappingURL=workspace-exec.impl.d.ts.map

package/dist/workspaces/workspace-exec.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-exec.impl.d.ts","sourceRoot":"","sources":["../../src/workspaces/workspace-exec.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAA0B,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEjG,OAAO,EACN,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EAExB,MAAM,gCAAgC,CAAC;;mBAQ/B,kBAAkB,WAChB,YAAY,OAChB,eAAe,GAClB,OAAO,CAAC,mBAAmB,CAAC;;AALhC,wBA4BE"}

package/dist/workspaces/workspace-exec.impl.js

@@ -0,0 +1,30 @@
+/**
+ * Workspace Exec Tool Implementation
+ *
+ * Dispatches remote command execution onto a cloud workspace host via fleet runtime/rpc.
+ */
+import { WorkspaceExecInputSchema } from "./workspace-exec.descriptor.js";
+export default {
+    async execute(input, runtime, ctx) {
+        const parsed = WorkspaceExecInputSchema.parse(input);
+        const workspaceId = parsed.workspaceId.trim();
+        const fleet = await runtime.query('runtime/client').withId('fleet').resolve();
+        // A declaration, never an environment: the fleet workspace host composes
+        // the child's environment from its own runtime, and the caller's `env`
+        // travels as the child's declared variables.
+        const result = await fleet.executeCommand(workspaceId, {
+            command: parsed.command,
+            args: parsed.args,
+            cwd: parsed.cwd,
+            timeout: parsed.timeoutMs,
+            declaration: { env: parsed.env }
+        }, ctx);
+        return {
+            exitCode: result.exitCode ?? (result.timedOut ? 124 : -1),
+            stdout: result.stdout ?? '',
+            stderr: result.stderr ?? '',
+            timedOut: Boolean(result.timedOut)
+        };
+    }
+};
+//# sourceMappingURL=workspace-exec.impl.js.map

package/dist/workspaces/workspace-exec.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-exec.impl.js","sourceRoot":"","sources":["../../src/workspaces/workspace-exec.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAGN,wBAAwB,EACxB,MAAM,gCAAgC,CAAC;AAMxC,eAAe;IACd,KAAK,CAAC,OAAO,CACZ,KAAyB,EACzB,OAAqB,EACrB,GAAoB;QAEpB,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAE9C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAA8B,gBAAgB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3G,yEAAyE;QACzE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE;YACtD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,SAAS;YACzB,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;SAChC,EAAE,GAAG,CAAC,CAAC;QAER,OAAO;YACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;SAClC,CAAC;IACH,CAAC;CACD,CAAC"}

package/dist/workspaces/workspace-pull.descriptor.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Workspace Pull Tool Descriptor
+ *
+ * Copies one file off a fleet host (a GLB, FBX or BVH a GPU job wrote) to a
+ * path on the caller's runtime, through the host's proxied `filesystem/adapter`.
+ */
+import * as z from 'zod/v4';
+export declare const WorkspacePullInputSchema: z.ZodObject<{
+    workspaceId: z.ZodString;
+    path: z.ZodString;
+    destination: z.ZodString;
+}, z.core.$strip>;
+export declare const WorkspacePullOutputSchema: z.ZodObject<{
+    workspaceId: z.ZodString;
+    path: z.ZodString;
+    destination: z.ZodString;
+    bytes: z.ZodNumber;
+    sha256: z.ZodString;
+}, z.core.$strip>;
+export type WorkspacePullInput = z.infer<typeof WorkspacePullInputSchema>;
+export type WorkspacePullOutput = z.infer<typeof WorkspacePullOutputSchema>;
+export declare const workspacePullDescriptor: {
+    readonly kind: "tools/tool";
+    readonly id: "workspace-pull";
+    readonly name: "Workspace Pull";
+    readonly description: "Copy a file from a fleet host to a local path";
+    readonly mcpDescription: "Copy one file from a fleet host (for example a generated GLB, FBX or BVH) to a path on this runtime; returns its size and sha256.";
+    readonly hardware: ["consumer", "cloud"];
+    readonly purpose: ["mcp", "agent", "direct"];
+    readonly category: "workspace";
+    readonly subcategory: "execution";
+    readonly safety: "write";
+    readonly capability: {
+        readonly tier: "1";
+    };
+    readonly requiresApproval: true;
+    readonly tags: ["workspace", "cloud", "fleet", "file", "artifact", "remote"];
+    readonly schemas: {
+        readonly input: z.ZodObject<{
+            workspaceId: z.ZodString;
+            path: z.ZodString;
+            destination: z.ZodString;
+        }, z.core.$strip>;
+        readonly output: z.ZodObject<{
+            workspaceId: z.ZodString;
+            path: z.ZodString;
+            destination: z.ZodString;
+            bytes: z.ZodNumber;
+            sha256: z.ZodString;
+        }, z.core.$strip>;
+    };
+};
+export default workspacePullDescriptor;
+//# sourceMappingURL=workspace-pull.descriptor.d.ts.map

package/dist/workspaces/workspace-pull.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-pull.descriptor.d.ts","sourceRoot":"","sources":["../../src/workspaces/workspace-pull.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;iBAMpC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmBlC,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/dist/workspaces/workspace-pull.descriptor.js

@@ -0,0 +1,41 @@
+/**
+ * Workspace Pull Tool Descriptor
+ *
+ * Copies one file off a fleet host (a GLB, FBX or BVH a GPU job wrote) to a
+ * path on the caller's runtime, through the host's proxied `filesystem/adapter`.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel/factory';
+import * as z from 'zod/v4';
+export const WorkspacePullInputSchema = z.object({
+    workspaceId: z.string().min(1).describe('Fleet host id (kebab hostId) to read from'),
+    path: z.string().min(1).describe("File path on the host, as the host's filesystem adapter admits it"),
+    destination: z.string().min(1).describe("Path on the caller's runtime to write the file to")
+});
+export const WorkspacePullOutputSchema = z.object({
+    workspaceId: z.string(),
+    path: z.string(),
+    destination: z.string(),
+    bytes: z.number().int().nonnegative(),
+    sha256: z.string().regex(/^[0-9a-f]{64}$/)
+});
+export const workspacePullDescriptor = createRuntimeAsset({
+    kind: 'tools/tool',
+    id: 'workspace-pull',
+    name: 'Workspace Pull',
+    description: 'Copy a file from a fleet host to a local path',
+    mcpDescription: 'Copy one file from a fleet host (for example a generated GLB, FBX or BVH) to a path on this runtime; returns its size and sha256.',
+    hardware: ['consumer', 'cloud'],
+    purpose: ['mcp', 'agent', 'direct'],
+    category: 'workspace',
+    subcategory: 'execution',
+    safety: 'write',
+    capability: { tier: '1' },
+    requiresApproval: true,
+    tags: ['workspace', 'cloud', 'fleet', 'file', 'artifact', 'remote'],
+    schemas: {
+        input: WorkspacePullInputSchema,
+        output: WorkspacePullOutputSchema
+    }
+});
+export default workspacePullDescriptor;
+//# sourceMappingURL=workspace-pull.descriptor.js.map

package/dist/workspaces/workspace-pull.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-pull.descriptor.js","sourceRoot":"","sources":["../../src/workspaces/workspace-pull.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACpF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACrG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;CAC5F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CAC1C,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;IACzD,IAAI,EAAE,YAAY;IAClB,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,+CAA+C;IAC5D,cAAc,EACb,mIAAmI;IACpI,QAAQ,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IACnC,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,OAAO;IACf,UAAU,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACzB,gBAAgB,EAAE,IAAI;IACtB,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC;IACnE,OAAO,EAAE;QACR,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,yBAAyB;KACjC;CACD,CAAC,CAAC;AAEH,eAAe,uBAAuB,CAAC"}

package/dist/workspaces/workspace-pull.impl.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Workspace Pull Tool Implementation
+ *
+ * Reads one file from a fleet host through the fleet client (the host daemon's
+ * proxied `filesystem/adapter`) and writes it through this runtime's own
+ * `filesystem/adapter`. Both adapters decide which paths they admit.
+ */
+import type { VibesRuntime, ToolCallContext } from '@vibesdotdev/kernel';
+import { type WorkspacePullInput, type WorkspacePullOutput } from './workspace-pull.descriptor.ts';
+declare const _default: {
+    execute(input: WorkspacePullInput, runtime: VibesRuntime, ctx: ToolCallContext): Promise<WorkspacePullOutput>;
+};
+export default _default;
+//# sourceMappingURL=workspace-pull.impl.d.ts.map

package/dist/workspaces/workspace-pull.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-pull.impl.d.ts","sourceRoot":"","sources":["../../src/workspaces/workspace-pull.impl.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EACN,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EAExB,MAAM,gCAAgC,CAAC;;mBAa/B,kBAAkB,WAChB,YAAY,OAChB,eAAe,GAClB,OAAO,CAAC,mBAAmB,CAAC;;AALhC,wBAwBE"}