@vibesdotdev/workers 1.0.0-rc.3 → 1.0.0-rc.7

package/dist/kinds/material.stores.d.ts

@@ -0,0 +1,118 @@
+import { type ArtifactMaterialRef, type CacheMaterialRef, type WorkerMaterial, type WorkerMaterialContext, type WorkerMaterialReceipt } from './schemas/material.ts';
+export declare const cacheMaterialDescriptor: {
+    id: string;
+    kind: "workers/material";
+    materialKinds: ("cache" | "git" | "artifact")[];
+    supportsCapture: boolean;
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    config?: unknown;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    maxBytes?: number | undefined;
+    maxEntries?: number | undefined;
+};
+export declare const artifactMaterialDescriptor: {
+    id: string;
+    kind: "workers/material";
+    materialKinds: ("cache" | "git" | "artifact")[];
+    supportsCapture: boolean;
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    config?: unknown;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    maxBytes?: number | undefined;
+    maxEntries?: number | undefined;
+};
+export declare class CacheWorkerMaterial implements WorkerMaterial {
+    readonly descriptor: {
+        id: string;
+        kind: "workers/material";
+        materialKinds: ("cache" | "git" | "artifact")[];
+        supportsCapture: boolean;
+        name?: string | undefined;
+        description?: string | undefined;
+        tags?: string[] | undefined;
+        hardware?: string[] | undefined;
+        enabled?: boolean | undefined;
+        priority?: number | undefined;
+        capabilityId?: string | undefined;
+        requiredContext?: string[] | undefined;
+        optionalContext?: string[] | undefined;
+        config?: unknown;
+        retention?: string | {
+            reason: string;
+            maxAgeDays?: number | undefined;
+            maxEntries?: number | undefined;
+            maxBytes?: number | undefined;
+            cascadeFrom?: string | undefined;
+            ageField?: string | undefined;
+            enforcedBy?: string | undefined;
+        } | undefined;
+        maxBytes?: number | undefined;
+        maxEntries?: number | undefined;
+    };
+    restore(input: CacheMaterialRef, context: WorkerMaterialContext): Promise<WorkerMaterialReceipt>;
+}
+export declare class ArtifactWorkerMaterial implements WorkerMaterial {
+    readonly descriptor: {
+        id: string;
+        kind: "workers/material";
+        materialKinds: ("cache" | "git" | "artifact")[];
+        supportsCapture: boolean;
+        name?: string | undefined;
+        description?: string | undefined;
+        tags?: string[] | undefined;
+        hardware?: string[] | undefined;
+        enabled?: boolean | undefined;
+        priority?: number | undefined;
+        capabilityId?: string | undefined;
+        requiredContext?: string[] | undefined;
+        optionalContext?: string[] | undefined;
+        config?: unknown;
+        retention?: string | {
+            reason: string;
+            maxAgeDays?: number | undefined;
+            maxEntries?: number | undefined;
+            maxBytes?: number | undefined;
+            cascadeFrom?: string | undefined;
+            ageField?: string | undefined;
+            enforcedBy?: string | undefined;
+        } | undefined;
+        maxBytes?: number | undefined;
+        maxEntries?: number | undefined;
+    };
+    restore(input: ArtifactMaterialRef, context: WorkerMaterialContext): Promise<WorkerMaterialReceipt>;
+}
+export declare const cacheMaterial: CacheWorkerMaterial;
+export declare const artifactMaterial: ArtifactWorkerMaterial;
+//# sourceMappingURL=material.stores.d.ts.map

package/dist/kinds/material.stores.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"material.stores.d.ts","sourceRoot":"","sources":["../../src/kinds/material.stores.ts"],"names":[],"mappings":"AACA,OAAO,EAEN,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,MAAM,uBAAuB,CAAC;AAG/B,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;CAOlC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;CAOrC,CAAC;AAmBH,qBAAa,mBAAoB,YAAW,cAAc;IACzD,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;MAA2B;IAExC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAwBtG;AAED,qBAAa,sBAAuB,YAAW,cAAc;IAC5D,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;MAA8B;IAE3C,OAAO,CACZ,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,qBAAqB,GAC5B,OAAO,CAAC,qBAAqB,CAAC;CA4BjC;AAED,eAAO,MAAM,aAAa,qBAA4B,CAAC;AACvD,eAAO,MAAM,gBAAgB,wBAA+B,CAAC"}

package/dist/kinds/material.stores.js

@@ -0,0 +1,76 @@
+import { getRuntimePath } from '@vibesdotdev/paths';
+import { WorkerMaterialDescriptorSchema } from "./schemas/material.js";
+import { workersMaterialRefusal } from "./schemas/material.js";
+export const cacheMaterialDescriptor = WorkerMaterialDescriptorSchema.parse({
+    id: 'workers.material.cache',
+    kind: 'workers/material',
+    name: 'Cache material',
+    description: 'Restore a content-addressed CI cache entry into a job workspace.',
+    materialKinds: ['cache'],
+    supportsCapture: false
+});
+export const artifactMaterialDescriptor = WorkerMaterialDescriptorSchema.parse({
+    id: 'workers.material.artifact',
+    kind: 'workers/material',
+    name: 'Artifact material',
+    description: 'Restore an immutable CI artifact by digest into a job workspace.',
+    materialKinds: ['artifact'],
+    supportsCapture: false
+});
+async function writeBytes(context, relative, bytes) {
+    if (!context.fs) {
+        throw workersMaterialRefusal('workers-material-unavailable', 'The material claimant provides no filesystem.', {
+            path: relative
+        });
+    }
+    const paths = await getRuntimePath(context.runtime);
+    const absolute = paths.resolve(context.workspace, relative);
+    await context.fs.mkdir(paths.dirname(absolute), { recursive: true });
+    await context.fs.writeFile(absolute, bytes);
+    return absolute;
+}
+export class CacheWorkerMaterial {
+    descriptor = cacheMaterialDescriptor;
+    async restore(input, context) {
+        if (input.kind !== 'cache') {
+            throw workersMaterialRefusal('workers-material-ref-invalid', 'The cache material received a non-cache ref.', {
+                kind: input.kind
+            });
+        }
+        if (context.trust.untrusted && input.sensitivity === 'trusted-only') {
+            throw workersMaterialRefusal('workers-material-trust-refused', 'An untrusted ref cannot read a trusted-only cache.', { key: input.key });
+        }
+        if (!context.cacheStore) {
+            throw workersMaterialRefusal('workers-material-unavailable', 'The material claimant provides no cache store.', {
+                key: input.key
+            });
+        }
+        const entry = await context.cacheStore.get(input.key);
+        const path = await writeBytes(context, input.path ?? '.forge-ci/cache', entry.bytes);
+        return entry.entries === undefined
+            ? { kind: 'cache', digest: entry.digest, path, bytes: entry.bytes.byteLength }
+            : { kind: 'cache', digest: entry.digest, path, bytes: entry.bytes.byteLength, entries: entry.entries };
+    }
+}
+export class ArtifactWorkerMaterial {
+    descriptor = artifactMaterialDescriptor;
+    async restore(input, context) {
+        if (input.kind !== 'artifact') {
+            throw workersMaterialRefusal('workers-material-ref-invalid', 'The artifact material received a non-artifact ref.', { kind: input.kind });
+        }
+        if (!context.artifactStore) {
+            throw workersMaterialRefusal('workers-material-unavailable', 'The material claimant provides no artifact store.', { artifactId: input.artifactId });
+        }
+        const entry = await context.artifactStore.get(input.artifactId);
+        if (entry.digest.toLowerCase() !== input.digest.toLowerCase()) {
+            throw workersMaterialRefusal('workers-material-digest-mismatch', `Artifact ${input.artifactId} returned ${entry.digest} instead of ${input.digest}.`, { expected: input.digest, actual: entry.digest });
+        }
+        const path = await writeBytes(context, input.path ?? '.forge-ci/artifacts', entry.bytes);
+        return entry.entries === undefined
+            ? { kind: 'artifact', digest: entry.digest, path, bytes: entry.bytes.byteLength }
+            : { kind: 'artifact', digest: entry.digest, path, bytes: entry.bytes.byteLength, entries: entry.entries };
+    }
+}
+export const cacheMaterial = new CacheWorkerMaterial();
+export const artifactMaterial = new ArtifactWorkerMaterial();
+//# sourceMappingURL=material.stores.js.map

package/dist/kinds/material.stores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"material.stores.js","sourceRoot":"","sources":["../../src/kinds/material.stores.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACN,8BAA8B,EAM9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC,KAAK,CAAC;IAC3E,EAAE,EAAE,wBAAwB;IAC5B,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,kEAAkE;IAC/E,aAAa,EAAE,CAAC,OAAO,CAAC;IACxB,eAAe,EAAE,KAAK;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,8BAA8B,CAAC,KAAK,CAAC;IAC9E,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,kEAAkE;IAC/E,aAAa,EAAE,CAAC,UAAU,CAAC;IAC3B,eAAe,EAAE,KAAK;CACtB,CAAC,CAAC;AAEH,KAAK,UAAU,UAAU,CACxB,OAA8B,EAC9B,QAAgB,EAChB,KAAiB;IAEjB,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,sBAAsB,CAAC,8BAA8B,EAAE,+CAA+C,EAAE;YAC7G,IAAI,EAAE,QAAQ;SACd,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,mBAAmB;IACtB,UAAU,GAAG,uBAAuB,CAAC;IAE9C,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,OAA8B;QACpE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,sBAAsB,CAAC,8BAA8B,EAAE,8CAA8C,EAAE;gBAC5G,IAAI,EAAE,KAAK,CAAC,IAAI;aAChB,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,cAAc,EAAE,CAAC;YACrE,MAAM,sBAAsB,CAC3B,gCAAgC,EAChC,oDAAoD,EACpD,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAClB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACzB,MAAM,sBAAsB,CAAC,8BAA8B,EAAE,gDAAgD,EAAE;gBAC9G,GAAG,EAAE,KAAK,CAAC,GAAG;aACd,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE;YAC9E,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACzG,CAAC;CACD;AAED,MAAM,OAAO,sBAAsB;IACzB,UAAU,GAAG,0BAA0B,CAAC;IAEjD,KAAK,CAAC,OAAO,CACZ,KAA0B,EAC1B,OAA8B;QAE9B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,sBAAsB,CAC3B,8BAA8B,EAC9B,oDAAoD,EACpD,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACpB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5B,MAAM,sBAAsB,CAC3B,8BAA8B,EAC9B,mDAAmD,EACnD,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAChC,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/D,MAAM,sBAAsB,CAC3B,kCAAkC,EAClC,YAAY,KAAK,CAAC,UAAU,aAAa,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,MAAM,GAAG,EACnF,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAChD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,qBAAqB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE;YACjF,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC5G,CAAC;CACD;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,mBAAmB,EAAE,CAAC;AACvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,sBAAsB,EAAE,CAAC"}

package/dist/kinds/schemas/material.d.ts

@@ -0,0 +1,153 @@
+import * as z from 'zod/v4';
+import type { CacheByteStore } from '@vibesdotdev/infra-core/kinds';
+import { CapabilityError, type RuntimeRef } from '@vibesdotdev/kernel';
+export declare const WORKERS_MATERIAL_KIND = "workers/material";
+/** A repository-relative path a material may write or capture. */
+export declare const MaterialPathSchema: z.ZodString;
+export declare const GitMaterialRefSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"git">;
+    repositoryId: z.ZodString;
+    cloneUrl: z.ZodURL;
+    sha: z.ZodString;
+    path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type GitMaterialRef = z.infer<typeof GitMaterialRefSchema>;
+export declare const CacheMaterialRefSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"cache">;
+    key: z.ZodString;
+    namespace: z.ZodOptional<z.ZodString>;
+    sensitivity: z.ZodOptional<z.ZodEnum<{
+        "public-reproducible": "public-reproducible";
+        "trusted-only": "trusted-only";
+    }>>;
+    path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type CacheMaterialRef = z.infer<typeof CacheMaterialRefSchema>;
+export declare const ArtifactMaterialRefSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"artifact">;
+    artifactId: z.ZodString;
+    digest: z.ZodString;
+    producerAttemptId: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ArtifactMaterialRef = z.infer<typeof ArtifactMaterialRefSchema>;
+export declare const MaterialRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"git">;
+    repositoryId: z.ZodString;
+    cloneUrl: z.ZodURL;
+    sha: z.ZodString;
+    path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"cache">;
+    key: z.ZodString;
+    namespace: z.ZodOptional<z.ZodString>;
+    sensitivity: z.ZodOptional<z.ZodEnum<{
+        "public-reproducible": "public-reproducible";
+        "trusted-only": "trusted-only";
+    }>>;
+    path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"artifact">;
+    artifactId: z.ZodString;
+    digest: z.ZodString;
+    producerAttemptId: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>], "kind">;
+export type MaterialRef = z.infer<typeof MaterialRefSchema>;
+export declare const MaterialOutputSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"artifact">;
+    name: z.ZodString;
+    paths: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type MaterialOutput = z.infer<typeof MaterialOutputSchema>;
+export declare const WorkerMaterialDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"workers/material">;
+    materialKinds: z.ZodArray<z.ZodEnum<{
+        cache: "cache";
+        git: "git";
+        artifact: "artifact";
+    }>>;
+    maxBytes: z.ZodOptional<z.ZodNumber>;
+    maxEntries: z.ZodOptional<z.ZodNumber>;
+    supportsCapture: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type WorkerMaterialDescriptor = z.infer<typeof WorkerMaterialDescriptorSchema>;
+export declare const WorkerMaterialTrustSchema: z.ZodObject<{
+    untrusted: z.ZodDefault<z.ZodBoolean>;
+    promoteQuarantine: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type WorkerMaterialTrust = z.infer<typeof WorkerMaterialTrustSchema>;
+export interface WorkerMaterialStoreEntry {
+    readonly digest: string;
+    readonly bytes: Uint8Array;
+    readonly entries?: number;
+}
+/** The claimant's artifact-store port; the `ci/artifacts` owner satisfies it structurally. */
+export interface WorkerMaterialArtifactStore {
+    get(artifactId: string): Promise<WorkerMaterialStoreEntry & {
+        readonly name: string;
+    }>;
+    put(input: {
+        name: string;
+        bytes: Uint8Array;
+    }): Promise<WorkerMaterialStoreEntry & {
+        readonly artifactId: string;
+    }>;
+}
+export interface WorkerMaterialFilesystem {
+    mkdir(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    writeFile(path: string, bytes: Uint8Array): Promise<void>;
+}
+export interface WorkerMaterialContext {
+    readonly runtime: RuntimeRef;
+    readonly jobId: string;
+    readonly attemptId: string;
+    /** The job's declared workspace root; never an ambient home or another job's directory. */
+    readonly workspace: string;
+    readonly trust: WorkerMaterialTrust;
+    /** Claimant-supplied credential/environment values; never serialized into the ref. */
+    readonly env?: Readonly<Record<string, string>>;
+    /** Claimant-owned store ports; the material never constructs a provider. */
+    readonly cacheStore?: CacheByteStore;
+    readonly artifactStore?: WorkerMaterialArtifactStore;
+    readonly fs?: WorkerMaterialFilesystem;
+    readonly signal?: AbortSignal;
+}
+export interface WorkerMaterialReceipt {
+    readonly kind: MaterialRef['kind'];
+    /** Content digest the implementation verified after restore/capture. */
+    readonly digest: string;
+    /** Absolute destination or source path inside the job workspace. */
+    readonly path: string;
+    /** Present when the material has a byte/entry count (archives); a git commit is identified by its SHA. */
+    readonly bytes?: number;
+    readonly entries?: number;
+}
+export interface WorkerMaterial {
+    restore(input: MaterialRef, context: WorkerMaterialContext): Promise<WorkerMaterialReceipt>;
+    capture?(input: MaterialOutput, context: WorkerMaterialContext): Promise<WorkerMaterialReceipt>;
+}
+export declare function workersMaterialRefusal(reason: 'workers-material-unavailable' | 'workers-material-ref-invalid' | 'workers-material-cap-exceeded' | 'workers-material-digest-mismatch' | 'workers-material-trust-refused' | 'workers-material-capture-refused', message: string, details: Record<string, string | number | boolean | string[]>): CapabilityError;
+//# sourceMappingURL=material.d.ts.map

package/dist/kinds/schemas/material.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"material.d.ts","sourceRoot":"","sources":["../../../src/kinds/schemas/material.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGvE,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AAExD,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,aAa7B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,sBAAsB;;;;;;;;;iBAQjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,yBAAyB;;;;;;iBAQpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;2BAI5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBASzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,yBAAyB;;;iBAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,8FAA8F;AAC9F,MAAM,WAAW,2BAA2B;IAC3C,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,GAAG,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,wBAAwB,GAAG;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrH;AAED,MAAM,WAAW,wBAAwB;IACxC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,sFAAsF;IACtF,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,2BAA2B,CAAC;IACrD,QAAQ,CAAC,EAAE,CAAC,EAAE,wBAAwB,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0GAA0G;IAC1G,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC9B,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC5F,OAAO,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAChG;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EACH,8BAA8B,GAC9B,8BAA8B,GAC9B,+BAA+B,GAC/B,kCAAkC,GAClC,gCAAgC,GAChC,kCAAkC,EACrC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,GAC3D,eAAe,CAUjB"}

package/dist/kinds/schemas/material.js

@@ -0,0 +1,79 @@
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+export const WORKERS_MATERIAL_KIND = 'workers/material';
+/** A repository-relative path a material may write or capture. */
+export const MaterialPathSchema = z
+    .string()
+    .min(1)
+    .max(512)
+    .refine((path) => !path.startsWith('/') &&
+    path !== '.' &&
+    !path.split('/').includes('..') &&
+    path !== '.git' &&
+    !path.startsWith('.git/') &&
+    /^[A-Za-z0-9._/-]+$/.test(path), 'expected a safe repository-relative material path');
+export const GitMaterialRefSchema = z.object({
+    kind: z.literal('git'),
+    repositoryId: z.string().min(1),
+    /** The canonical source URL; the claimant supplies the credential separately. */
+    cloneUrl: z.url(),
+    /** Full immutable commit SHA; a branch or tag is never execution authority. */
+    sha: z.string().regex(/^[0-9a-f]{40}$/i, 'expected a full commit SHA'),
+    /** Checkout destination under the job workspace; omitted means the workspace root. */
+    path: MaterialPathSchema.optional()
+});
+export const CacheMaterialRefSchema = z.object({
+    kind: z.literal('cache'),
+    /** The canonical cache task hash, not a mutable branch or label. */
+    key: z.string().min(1).max(128).regex(/^[a-z0-9][a-z0-9._-]*$/, 'expected a cache task key'),
+    namespace: z.string().min(1).max(128).optional(),
+    sensitivity: z.enum(['public-reproducible', 'trusted-only']).optional(),
+    /** Destination file under the job workspace; omitted means the CI cache directory. */
+    path: MaterialPathSchema.optional()
+});
+export const ArtifactMaterialRefSchema = z.object({
+    kind: z.literal('artifact'),
+    artifactId: z.string().min(1),
+    /** The content digest the producing attempt reported. */
+    digest: z.string().regex(/^[0-9a-f]{64}$/i, 'expected a SHA-256 artifact digest'),
+    producerAttemptId: z.string().min(1).optional(),
+    /** Destination file under the job workspace; omitted means the CI artifact path. */
+    path: MaterialPathSchema.optional()
+});
+export const MaterialRefSchema = z.discriminatedUnion('kind', [
+    GitMaterialRefSchema,
+    CacheMaterialRefSchema,
+    ArtifactMaterialRefSchema
+]);
+export const MaterialOutputSchema = z.object({
+    kind: z.literal('artifact'),
+    name: z.string().min(1).max(128).regex(/^[a-z0-9][a-z0-9._-]*$/, 'expected an artifact name'),
+    paths: z.array(MaterialPathSchema).min(1).max(64)
+});
+export const WorkerMaterialDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal(WORKERS_MATERIAL_KIND),
+    /** Material refs this implementation can restore. */
+    materialKinds: z.array(z.enum(['git', 'cache', 'artifact'])).min(1),
+    /** Hard caps the implementation enforces before writing. */
+    maxBytes: z.number().int().positive().optional(),
+    maxEntries: z.number().int().positive().optional(),
+    /** Whether this implementation can capture declared outputs. */
+    supportsCapture: z.boolean().default(false)
+});
+export const WorkerMaterialTrustSchema = z.object({
+    untrusted: z.boolean().default(false),
+    /** A trusted ref may promote a quarantine cache only after the control plane admits it. */
+    promoteQuarantine: z.boolean().default(false)
+});
+export function workersMaterialRefusal(reason, message, details) {
+    const code = reason === 'workers-material-ref-invalid' || reason === 'workers-material-cap-exceeded'
+        ? 'INVALID_INPUT'
+        : reason === 'workers-material-trust-refused' || reason === 'workers-material-capture-refused'
+            ? 'PERMISSION_DENIED'
+            : reason === 'workers-material-digest-mismatch'
+                ? 'CONFLICT'
+                : 'UNAVAILABLE';
+    return new CapabilityError(message, code, { reason, retryable: false, details });
+}
+//# sourceMappingURL=material.js.map

package/dist/kinds/schemas/material.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"material.js","sourceRoot":"","sources":["../../../src/kinds/schemas/material.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAExD,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CACN,CAAC,IAAI,EAAE,EAAE,CACR,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IACrB,IAAI,KAAK,GAAG;IACZ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC/B,IAAI,KAAK,MAAM;IACf,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;IACzB,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAChC,mDAAmD,CACnD,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE;IACjB,+EAA+E;IAC/E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;IACtE,sFAAsF;IACtF,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,oEAAoE;IACpE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,wBAAwB,EAAE,2BAA2B,CAAC;IAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvE,sFAAsF;IACtF,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,yDAAyD;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;IACjF,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,oFAAoF;IACpF,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,oBAAoB;IACpB,sBAAsB;IACtB,yBAAyB;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,wBAAwB,EAAE,2BAA2B,CAAC;IAC7F,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACjD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC5E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtC,qDAAqD;IACrD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,4DAA4D;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,gEAAgE;IAChE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC3C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,2FAA2F;IAC3F,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC7C,CAAC,CAAC;AAoDH,MAAM,UAAU,sBAAsB,CACrC,MAMqC,EACrC,OAAe,EACf,OAA6D;IAE7D,MAAM,IAAI,GACT,MAAM,KAAK,8BAA8B,IAAI,MAAM,KAAK,+BAA+B;QACtF,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,MAAM,KAAK,gCAAgC,IAAI,MAAM,KAAK,kCAAkC;YAC7F,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,MAAM,KAAK,kCAAkC;gBAC9C,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,aAAa,CAAC;IACpB,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/maintenance/jobs/storage-sync/maintenance.storage-sync.descriptor.d.ts

@@ -1,8 +1,9 @@
 /**
  * maintenance.storage-sync Job Descriptor
  *
- * Scheduled job that syncs local storage manifests to/from cloud.
- * Runs every 5 minutes when syncToCloud is enabled.
+ * Scheduled job that runs declared local adapter migrations, then syncs local
+ * storage manifests to/from cloud. Runs every 5 minutes when the host enables
+ * the schedule.
  */
 import type { JobDescriptor } from '@vibesdotdev/kernel/kinds';
 export type { StorageSyncJobData, StorageSyncJobResult, ManifestSyncResult } from './schemas/storage-sync.ts';

package/dist/maintenance/jobs/storage-sync/maintenance.storage-sync.descriptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance.storage-sync.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/maintenance/jobs/storage-sync/maintenance.storage-sync.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAI/D,YAAY,EACX,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,wBAAwB,eAyBnC,CAAC;AAEH,eAAe,wBAAwB,CAAC"}
+{"version":3,"file":"maintenance.storage-sync.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/maintenance/jobs/storage-sync/maintenance.storage-sync.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAI/D,YAAY,EACX,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,MAAM,2BAA2B,CAAC;AAEnC,eAAO,MAAM,wBAAwB,eAyBnC,CAAC;AAEH,eAAe,wBAAwB,CAAC"}

package/dist/maintenance/jobs/storage-sync/maintenance.storage-sync.descriptor.js

@@ -1,8 +1,9 @@
 /**
  * maintenance.storage-sync Job Descriptor
  *
- * Scheduled job that syncs local storage manifests to/from cloud.
- * Runs every 5 minutes when syncToCloud is enabled.
+ * Scheduled job that runs declared local adapter migrations, then syncs local
+ * storage manifests to/from cloud. Runs every 5 minutes when the host enables
+ * the schedule.
  */
 import { createRuntimeAsset } from '@vibesdotdev/kernel';
 import { storageSyncJobDataSchema, storageSyncJobResultSchema } from "./schemas/storage-sync.js";

package/dist/maintenance/jobs/storage-sync/maintenance.storage-sync.descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance.storage-sync.descriptor.js","sourceRoot":"","sources":["../../../../src/maintenance/jobs/storage-sync/maintenance.storage-sync.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AASjG,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAgB;IACzE,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,gDAAgD;IAE7D,KAAK,EAAE,kBAAkB;IACzB,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,aAAa;IACvB,2EAA2E;IAC3E,4EAA4E;IAC5E,kEAAkE;IAClE,eAAe,EAAE,KAAK;IACtB,SAAS,EAAE,QAAQ;IACnB,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE;IAEjE,OAAO,EAAE;QACR,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,0BAA0B;KAClC;IAED,QAAQ,EAAE,CAAC,UAAU,CAAC;IAEtB,IAAI,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;IACjD,OAAO,EAAE,IAAI;CACb,CAAC,CAAC;AAEH,eAAe,wBAAwB,CAAC"}
+{"version":3,"file":"maintenance.storage-sync.descriptor.js","sourceRoot":"","sources":["../../../../src/maintenance/jobs/storage-sync/maintenance.storage-sync.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AASjG,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAgB;IACzE,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,gDAAgD;IAE7D,KAAK,EAAE,kBAAkB;IACzB,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,aAAa;IACvB,2EAA2E;IAC3E,4EAA4E;IAC5E,kEAAkE;IAClE,eAAe,EAAE,KAAK;IACtB,SAAS,EAAE,QAAQ;IACnB,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE;IAEjE,OAAO,EAAE;QACR,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,0BAA0B;KAClC;IAED,QAAQ,EAAE,CAAC,UAAU,CAAC;IAEtB,IAAI,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;IACjD,OAAO,EAAE,IAAI;CACb,CAAC,CAAC;AAEH,eAAe,wBAAwB,CAAC"}

package/dist/maintenance/jobs/storage-sync/maintenance.storage-sync.impl.consumer.d.ts

@@ -20,6 +20,11 @@ export declare class MaintenanceStorageSyncJob implements JobImplementation<Stor
     handle(context: JobExecutionContext<StorageSyncJobData>): Promise<StorageSyncJobResult>;
     private emptyResult;
     private runSync;
+    /**
+     * Local adapter migration before cloud sync. Sync state carries the last
+     * selected adapter per manifest, so a stable store costs no document read.
+     */
+    private runMigrations;
     private getEligibleManifests;
     private getEligibleBridges;
 }

package/dist/maintenance/jobs/storage-sync/maintenance.storage-sync.impl.consumer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance.storage-sync.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/maintenance/jobs/storage-sync/maintenance.storage-sync.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACX,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EACX,kBAAkB,EAClB,oBAAoB,EACpB,MAAM,2BAA2B,CAAC;AAQnC,qBAAa,yBAA0B,YAAW,iBAAiB,CAClE,kBAAkB,EAClB,oBAAoB,CACpB;IACA,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAU;IACrC,QAAQ,CAAC,SAAS,EAAG,QAAQ,CAAU;IAEvC,OAAO,CAAC,OAAO,CAAe;IAE9B,OAAO,KAAK,MAAM,GAEjB;gBAEW,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE;IAMnE,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+C7F,OAAO,CAAC,WAAW;YAmBL,OAAO;YA4IP,oBAAoB;YAYpB,kBAAkB;CAahC;AAED,eAAe,yBAAyB,CAAC"}
+{"version":3,"file":"maintenance.storage-sync.impl.consumer.d.ts","sourceRoot":"","sources":["../../../../src/maintenance/jobs/storage-sync/maintenance.storage-sync.impl.consumer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACX,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EACX,kBAAkB,EAClB,oBAAoB,EACpB,MAAM,2BAA2B,CAAC;AAYnC,qBAAa,yBAA0B,YAAW,iBAAiB,CAClE,kBAAkB,EAClB,oBAAoB,CACpB;IACA,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAU;IACrC,QAAQ,CAAC,SAAS,EAAG,QAAQ,CAAU;IAEvC,OAAO,CAAC,OAAO,CAAe;IAE9B,OAAO,KAAK,MAAM,GAEjB;gBAEW,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE;IAMnE,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAiE7F,OAAO,CAAC,WAAW;YAsBL,OAAO;IAoJrB;;;OAGG;YACW,aAAa;YA0Bb,oBAAoB;YAYpB,kBAAkB;CAahC;AAED,eAAe,yBAAyB,CAAC"}

package/dist/maintenance/jobs/storage-sync/maintenance.storage-sync.impl.consumer.js

@@ -7,6 +7,7 @@
 import { settle } from "../../../core/settle.js";
 import { getLogger } from '@vibesdotdev/logging';
 import { syncManifest } from '@vibesdotdev/storage/sync/sync-manifest';
+import { runDeclaredStorageMigrations } from '@vibesdotdev/storage/sync/migrate-declared';
 import { SyncBridge } from '@vibesdotdev/storage/sync/sync-bridge';
 import { resolveSyncTarget } from '@vibesdotdev/storage/sync/resolve-sync-target';
 const LOG_PREFIX = '[maintenance.storage-sync]';
@@ -28,6 +29,19 @@ export class MaintenanceStorageSyncJob {
         const { dryRun, force, manifestIds } = context.data;
         const startTime = Date.now();
         this.logger.info(`${LOG_PREFIX} Starting storage sync`, { dryRun, force });
+        // Local adapter migrations run even when cloud sync has no targets: a
+        // config change is local state, not a network operation. Failures are
+        // reported in the result and never stop the cloud pass.
+        const migrationOutcome = await settle(() => this.runMigrations(dryRun, manifestIds));
+        const migrations = migrationOutcome.ok
+            ? migrationOutcome.value
+            : { results: [], receipts: {}, errors: 1 };
+        if (!migrationOutcome.ok) {
+            const message = migrationOutcome.caught instanceof Error
+                ? migrationOutcome.caught.message
+                : migrationOutcome.caught.description;
+            this.logger.warn(`${LOG_PREFIX} Local adapter migration sweep failed`, { error: message });
+        }
         const runOutcome = await settle(async () => {
             const eligibleManifests = await this.getEligibleManifests(manifestIds);
             const eligibleBridges = await this.getEligibleBridges(manifestIds);
@@ -37,13 +51,14 @@ export class MaintenanceStorageSyncJob {
                 bridges: eligibleBridges.length
             });
             if (eligibleManifests.length === 0 && eligibleBridges.length === 0) {
-                return this.emptyResult(dryRun, syncEnabled, startTime);
+                return this.emptyResult(dryRun, syncEnabled, startTime, migrations);
             }
             return await this.runSync(eligibleManifests, eligibleBridges, {
                 dryRun,
                 syncEnabled,
                 startTime,
-                force
+                force,
+                migrations
             });
         });
         if (runOutcome.ok) {
@@ -61,12 +76,14 @@ export class MaintenanceStorageSyncJob {
             conflicts: 0,
             errors: 1,
             results: [{ manifestId: '*', action: 'error', message: rootMsg }],
+            migrations: migrations.results,
+            migrationErrors: migrations.errors,
             durationMs: Date.now() - startTime
         };
     }
-    emptyResult(dryRun, syncEnabled, startTime) {
+    emptyResult(dryRun, syncEnabled, startTime, migrations) {
         return {
-            success: true,
+            success: migrations.errors === 0,
             dryRun,
             syncEnabled,
             totalManifests: 0,
@@ -75,6 +92,8 @@ export class MaintenanceStorageSyncJob {
             conflicts: 0,
             errors: 0,
             results: [],
+            migrations: migrations.results,
+            migrationErrors: migrations.errors,
             durationMs: Date.now() - startTime
         };
     }
@@ -175,7 +194,7 @@ export class MaintenanceStorageSyncJob {
         const errors = results.filter((r) => r.action === 'error').length;
         this.logger.info(`${LOG_PREFIX} Sync complete`, { synced, skipped, conflicts, errors });
         return {
-            success: errors === 0,
+            success: errors === 0 && opts.migrations.errors === 0,
             dryRun: opts.dryRun,
             syncEnabled: opts.syncEnabled,
             totalManifests: manifests.length + bridges.length,
@@ -184,9 +203,35 @@ export class MaintenanceStorageSyncJob {
             conflicts,
             errors,
             results,
+            migrations: opts.migrations.results,
+            migrationErrors: opts.migrations.errors,
             durationMs: Date.now() - opts.startTime
         };
     }
+    /**
+     * Local adapter migration before cloud sync. Sync state carries the last
+     * selected adapter per manifest, so a stable store costs no document read.
+     */
+    async runMigrations(dryRun, manifestIds) {
+        const { loadSyncState, saveSyncState } = await import('@vibesdotdev/storage/sync/sync-state.consumer');
+        const syncState = await loadSyncState(this.runtime);
+        const run = await runDeclaredStorageMigrations(this.runtime, {
+            dryRun,
+            manifestIds,
+            receipts: syncState.adapterReceipts ?? {}
+        });
+        if (!dryRun) {
+            syncState.adapterReceipts = run.receipts;
+            await saveSyncState(syncState, this.runtime);
+        }
+        if (run.results.length > 0) {
+            this.logger.info(`${LOG_PREFIX} Local adapter migration results`, {
+                results: run.results.length,
+                errors: run.errors
+            });
+        }
+        return run;
+    }
     async getEligibleManifests(filterIds) {
         const descriptors = this.runtime.query('storage/manifest').descriptors();
         return descriptors