@actuate-media/cms-core 0.1.0

package/dist/upgrade/changelog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changelog.js","sourceRoot":"","sources":["../../src/upgrade/changelog.ts"],"names":[],"mappings":"AASA,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAEvD,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,aAAa,gBAAgB,CAAC,CAAC;IACtD,IAAI,WAAW;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;AACrD,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,6DAA6D,CAAC;IAEnF,IAAI,KAA6B,CAAC;IAClC,MAAM,SAAS,GAA4D,EAAE,CAAC;IAE9E,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtD,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE;YAClB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;SACrC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC;QACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAE/C,MAAM,OAAO,GAA8B,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,iBAAiB,CAAC;QACpC,IAAI,SAAiC,CAAC;QAEtC,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,aAAa,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/upgrade/index.d.ts

@@ -0,0 +1,7 @@
+export { checkForUpdates, parseSemver } from "./version-check";
+export type { VersionInfo } from "./version-check";
+export { fetchChangelog, parseChangelog } from "./changelog";
+export type { ChangelogEntry } from "./changelog";
+export { createUpgradePR } from "./upgrade-pr";
+export type { UpgradePROptions, UpgradePRResult } from "./upgrade-pr";
+//# sourceMappingURL=index.d.ts.map

package/dist/upgrade/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/upgrade/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC/D,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}

package/dist/upgrade/index.js

@@ -0,0 +1,4 @@
+export { checkForUpdates, parseSemver } from "./version-check";
+export { fetchChangelog, parseChangelog } from "./changelog";
+export { createUpgradePR } from "./upgrade-pr";
+//# sourceMappingURL=index.js.map

package/dist/upgrade/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/upgrade/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG/D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}

package/dist/upgrade/upgrade-pr.d.ts

@@ -0,0 +1,16 @@
+export interface UpgradePROptions {
+    owner: string;
+    repo: string;
+    baseBranch?: string;
+    targetVersion: string;
+    changesDescription: string;
+    githubToken: string;
+}
+export interface UpgradePRResult {
+    prNumber: number;
+    prUrl: string;
+    branchName: string;
+}
+/** Create a GitHub Pull Request for an Actuate CMS version upgrade. */
+export declare function createUpgradePR(options: UpgradePROptions): Promise<UpgradePRResult>;
+//# sourceMappingURL=upgrade-pr.d.ts.map

package/dist/upgrade/upgrade-pr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-pr.d.ts","sourceRoot":"","sources":["../../src/upgrade/upgrade-pr.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,uEAAuE;AACvE,wBAAsB,eAAe,CACnC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,eAAe,CAAC,CA0C1B"}

package/dist/upgrade/upgrade-pr.js

@@ -0,0 +1,38 @@
+/** Create a GitHub Pull Request for an Actuate CMS version upgrade. */
+export async function createUpgradePR(options) {
+    const branchName = `actuate/upgrade-${options.targetVersion}`;
+    const title = `chore: upgrade Actuate CMS to ${options.targetVersion}`;
+    const body = [
+        `## Actuate CMS Upgrade to ${options.targetVersion}`,
+        "",
+        options.changesDescription,
+        "",
+        "---",
+        "*This PR was automatically created by the Actuate CMS upgrade tool.*",
+    ].join("\n");
+    const response = await fetch(`https://api.github.com/repos/${options.owner}/${options.repo}/pulls`, {
+        method: "POST",
+        headers: {
+            Authorization: `token ${options.githubToken}`,
+            Accept: "application/vnd.github.v3+json",
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+            title,
+            body,
+            head: branchName,
+            base: options.baseBranch ?? "main",
+        }),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Failed to create PR: ${response.status} ${error}`);
+    }
+    const pr = (await response.json());
+    return {
+        prNumber: pr.number,
+        prUrl: pr.html_url,
+        branchName,
+    };
+}
+//# sourceMappingURL=upgrade-pr.js.map

package/dist/upgrade/upgrade-pr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-pr.js","sourceRoot":"","sources":["../../src/upgrade/upgrade-pr.ts"],"names":[],"mappings":"AAeA,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAyB;IAEzB,MAAM,UAAU,GAAG,mBAAmB,OAAO,CAAC,aAAa,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,iCAAiC,OAAO,CAAC,aAAa,EAAE,CAAC;IACvE,MAAM,IAAI,GAAG;QACX,6BAA6B,OAAO,CAAC,aAAa,EAAE;QACpD,EAAE;QACF,OAAO,CAAC,kBAAkB;QAC1B,EAAE;QACF,KAAK;QACL,sEAAsE;KACvE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,gCAAgC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,QAAQ,EACrE;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,OAAO,CAAC,WAAW,EAAE;YAC7C,MAAM,EAAE,gCAAgC;YACxC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,IAAI;YACJ,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,OAAO,CAAC,UAAU,IAAI,MAAM;SACnC,CAAC;KACH,CACF,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyC,CAAC;IAE3E,OAAO;QACL,QAAQ,EAAE,EAAE,CAAC,MAAM;QACnB,KAAK,EAAE,EAAE,CAAC,QAAQ;QAClB,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/upgrade/version-check.d.ts

@@ -0,0 +1,17 @@
+export interface VersionInfo {
+    current: string;
+    latest: string;
+    updateAvailable: boolean;
+    severity?: "patch" | "minor" | "major";
+    releaseDate?: string;
+    releaseNotes?: string;
+}
+/** Check the update server for the latest available version. */
+export declare function checkForUpdates(currentVersion: string): Promise<VersionInfo>;
+/** Parse a semver string into its components. */
+export declare function parseSemver(version: string): {
+    major: number;
+    minor: number;
+    patch: number;
+} | null;
+//# sourceMappingURL=version-check.d.ts.map

package/dist/upgrade/version-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-check.d.ts","sourceRoot":"","sources":["../../src/upgrade/version-check.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,gEAAgE;AAChE,wBAAsB,eAAe,CACnC,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,WAAW,CAAC,CAkBtB;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQnG"}

package/dist/upgrade/version-check.js

@@ -0,0 +1,30 @@
+const UPDATE_SERVER = "https://updates.actuatecms.com";
+/** Check the update server for the latest available version. */
+export async function checkForUpdates(currentVersion) {
+    const response = await fetch(`${UPDATE_SERVER}/api/versions/latest`, {
+        headers: { "X-Current-Version": currentVersion },
+    });
+    if (!response.ok) {
+        throw new Error(`Update check failed: ${response.status}`);
+    }
+    const data = (await response.json());
+    return {
+        current: currentVersion,
+        latest: data.version,
+        updateAvailable: data.version !== currentVersion,
+        severity: data.severity,
+        releaseDate: data.releaseDate,
+    };
+}
+/** Parse a semver string into its components. */
+export function parseSemver(version) {
+    const match = version.match(/^(\d+)\.(\d+)\.(\d+)/);
+    if (!match)
+        return null;
+    return {
+        major: parseInt(match[1], 10),
+        minor: parseInt(match[2], 10),
+        patch: parseInt(match[3], 10),
+    };
+}
+//# sourceMappingURL=version-check.js.map

package/dist/upgrade/version-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/upgrade/version-check.ts"],"names":[],"mappings":"AASA,MAAM,aAAa,GAAG,gCAAgC,CAAC;AAEvD,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,cAAsB;IAEtB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,sBAAsB,EAAE;QACnE,OAAO,EAAE,EAAE,mBAAmB,EAAE,cAAc,EAAE;KACjD,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiE,CAAC;IAErG,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,IAAI,CAAC,OAAO;QACpB,eAAe,EAAE,IAAI,CAAC,OAAO,KAAK,cAAc;QAChD,QAAQ,EAAE,IAAI,CAAC,QAAmC;QAClD,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;QAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;QAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;KAC/B,CAAC;AACJ,CAAC"}

package/dist/webhooks/index.d.ts

@@ -0,0 +1,46 @@
+export type WebhookEvent = "document.created" | "document.updated" | "document.published" | "document.deleted" | "media.uploaded" | "media.deleted" | "user.created" | "user.updated" | "form.submitted";
+export interface WebhookEndpointInput {
+    url: string;
+    events: WebhookEvent[];
+    secret: string;
+    name?: string;
+    active?: boolean;
+}
+export interface WebhookPayload {
+    event: WebhookEvent;
+    timestamp: string;
+    data: Record<string, unknown>;
+}
+/** Sign a webhook payload using HMAC-SHA256. */
+export declare function signPayload(payload: string, secret: string): Promise<string>;
+/** Verify an incoming webhook signature. */
+export declare function verifySignature(payload: string, signature: string, secret: string): Promise<boolean>;
+/** Create a new webhook endpoint. Validates URL against SSRF rules. */
+export declare function createEndpoint(input: WebhookEndpointInput): Promise<any>;
+/** List all webhook endpoints. */
+export declare function listEndpoints(): Promise<any>;
+/** Update a webhook endpoint. Validates URL against SSRF rules if URL is changed. */
+export declare function updateEndpoint(id: string, data: Partial<WebhookEndpointInput>): Promise<any>;
+/** Delete a webhook endpoint and all its delivery logs. */
+export declare function deleteEndpoint(id: string): Promise<any>;
+/** Get recent deliveries for an endpoint. */
+export declare function getDeliveries(endpointId: string, limit?: number): Promise<any>;
+/**
+ * Dispatch a webhook event: finds matching endpoints, creates delivery records,
+ * and attempts immediate delivery. Failed deliveries are queued for retry.
+ */
+export declare function dispatch(event: WebhookEvent, data: Record<string, unknown>): Promise<{
+    queued: number;
+    delivered: number;
+    failed: number;
+}>;
+/**
+ * Process pending retries. Call this from a cron job (e.g. every 1-2 minutes).
+ * Finds deliveries with status='retrying' and nextRetryAt <= now.
+ */
+export declare function processRetries(): Promise<{
+    retried: number;
+    succeeded: number;
+    failed: number;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GACpB,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,kBAAkB,GAClB,gBAAgB,GAChB,eAAe,GACf,cAAc,GACd,cAAc,GACd,gBAAgB,CAAC;AAErB,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAKD,gDAAgD;AAChD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED,4CAA4C;AAC5C,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAQlB;AAMD,uEAAuE;AACvE,wBAAsB,cAAc,CAAC,KAAK,EAAE,oBAAoB,gBAgB/D;AAED,kCAAkC;AAClC,wBAAsB,aAAa,iBAGlC;AAED,qFAAqF;AACrF,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,gBAmBnF;AAED,2DAA2D;AAC3D,wBAAsB,cAAc,CAAC,EAAE,EAAE,MAAM,gBAG9C;AAED,6CAA6C;AAC7C,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,SAAK,gBAOjE;AAMD;;;GAGG;AACH,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA8ChE;AA6GD;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BtG"}

package/dist/webhooks/index.js

@@ -0,0 +1,245 @@
+import { getDB } from '../db';
+import { validateWebhookUrl } from '../security/webhook';
+const RETRY_DELAYS_MS = [0, 30_000, 120_000, 600_000];
+const DELIVERY_TIMEOUT_MS = 10_000;
+/** Sign a webhook payload using HMAC-SHA256. */
+export async function signPayload(payload, secret) {
+    const key = await crypto.subtle.importKey("raw", new TextEncoder().encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    const signature = await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(payload));
+    return Array.from(new Uint8Array(signature))
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+}
+/** Verify an incoming webhook signature. */
+export async function verifySignature(payload, signature, secret) {
+    const expected = await signPayload(payload, secret);
+    if (expected.length !== signature.length)
+        return false;
+    let mismatch = 0;
+    for (let i = 0; i < expected.length; i++) {
+        mismatch |= expected.charCodeAt(i) ^ signature.charCodeAt(i);
+    }
+    return mismatch === 0;
+}
+// ---------------------------------------------------------------------------
+// Endpoint CRUD (DB-backed)
+// ---------------------------------------------------------------------------
+/** Create a new webhook endpoint. Validates URL against SSRF rules. */
+export async function createEndpoint(input) {
+    const urlCheck = validateWebhookUrl(input.url);
+    if (!urlCheck.valid) {
+        throw new Error(`Invalid webhook URL: ${urlCheck.error}`);
+    }
+    const db = getDB();
+    return db.webhookEndpoint.create({
+        data: {
+            url: input.url,
+            events: input.events,
+            secret: input.secret,
+            name: input.name ?? null,
+            active: input.active ?? true,
+        },
+    });
+}
+/** List all webhook endpoints. */
+export async function listEndpoints() {
+    const db = getDB();
+    return db.webhookEndpoint.findMany({ orderBy: { createdAt: 'desc' } });
+}
+/** Update a webhook endpoint. Validates URL against SSRF rules if URL is changed. */
+export async function updateEndpoint(id, data) {
+    if (data.url !== undefined) {
+        const urlCheck = validateWebhookUrl(data.url);
+        if (!urlCheck.valid) {
+            throw new Error(`Invalid webhook URL: ${urlCheck.error}`);
+        }
+    }
+    const db = getDB();
+    return db.webhookEndpoint.update({
+        where: { id },
+        data: {
+            ...(data.url !== undefined ? { url: data.url } : {}),
+            ...(data.events !== undefined ? { events: data.events } : {}),
+            ...(data.secret !== undefined ? { secret: data.secret } : {}),
+            ...(data.name !== undefined ? { name: data.name } : {}),
+            ...(data.active !== undefined ? { active: data.active } : {}),
+        },
+    });
+}
+/** Delete a webhook endpoint and all its delivery logs. */
+export async function deleteEndpoint(id) {
+    const db = getDB();
+    return db.webhookEndpoint.delete({ where: { id } });
+}
+/** Get recent deliveries for an endpoint. */
+export async function getDeliveries(endpointId, limit = 50) {
+    const db = getDB();
+    return db.webhookDeliveryLog.findMany({
+        where: { endpointId },
+        orderBy: { createdAt: 'desc' },
+        take: limit,
+    });
+}
+// ---------------------------------------------------------------------------
+// Event dispatch (DB-persisted with async delivery)
+// ---------------------------------------------------------------------------
+/**
+ * Dispatch a webhook event: finds matching endpoints, creates delivery records,
+ * and attempts immediate delivery. Failed deliveries are queued for retry.
+ */
+export async function dispatch(event, data) {
+    const db = getDB();
+    const endpoints = await db.webhookEndpoint.findMany({
+        where: { active: true },
+    });
+    const matching = endpoints.filter((ep) => {
+        const events = ep.events;
+        return events.includes(event);
+    });
+    if (matching.length === 0) {
+        return { queued: 0, delivered: 0, failed: 0 };
+    }
+    const payload = {
+        event,
+        timestamp: new Date().toISOString(),
+        data,
+    };
+    let delivered = 0;
+    let failed = 0;
+    for (const ep of matching) {
+        const delivery = await db.webhookDeliveryLog.create({
+            data: {
+                endpointId: ep.id,
+                event,
+                payload,
+                status: 'pending',
+                attempts: 0,
+                maxAttempts: 3,
+            },
+        });
+        const result = await attemptDelivery(delivery.id, ep.url, ep.secret, payload);
+        if (result) {
+            delivered++;
+        }
+        else {
+            failed++;
+        }
+    }
+    return { queued: matching.length, delivered, failed };
+}
+/**
+ * Attempt a single delivery. Updates the delivery record with result.
+ * On failure, schedules a retry if attempts remain.
+ */
+async function attemptDelivery(deliveryId, url, secret, payload) {
+    const db = getDB();
+    const body = JSON.stringify(payload);
+    const urlCheck = validateWebhookUrl(url);
+    if (!urlCheck.valid) {
+        return handleFailure(deliveryId, 0, `SSRF blocked: ${urlCheck.error}`);
+    }
+    try {
+        const signature = await signPayload(body, secret);
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'X-Actuate-Signature': signature,
+                'X-Actuate-Event': payload.event,
+                'X-Actuate-Delivery': deliveryId,
+                'User-Agent': 'ActuateCMS-Webhook/1.0',
+            },
+            body,
+            signal: AbortSignal.timeout(DELIVERY_TIMEOUT_MS),
+        });
+        const responseBody = await response.text().catch(() => '');
+        if (response.ok) {
+            await db.webhookDeliveryLog.update({
+                where: { id: deliveryId },
+                data: {
+                    status: 'success',
+                    attempts: { increment: 1 },
+                    lastAttemptAt: new Date(),
+                    responseStatus: response.status,
+                    responseBody: responseBody.substring(0, 1000),
+                    nextRetryAt: null,
+                },
+            });
+            return true;
+        }
+        return handleFailure(deliveryId, response.status, responseBody);
+    }
+    catch (err) {
+        console.error(`[actuate][webhook] Delivery ${deliveryId} failed:`, err?.message ?? 'Connection failed');
+        return handleFailure(deliveryId, 0, err?.message ?? 'Connection failed');
+    }
+}
+async function handleFailure(deliveryId, responseStatus, responseBody) {
+    const db = getDB();
+    const delivery = await db.webhookDeliveryLog.findUnique({
+        where: { id: deliveryId },
+    });
+    const attempt = (delivery?.attempts ?? 0) + 1;
+    const maxAttempts = delivery?.maxAttempts ?? 3;
+    if (attempt >= maxAttempts) {
+        console.error(`[actuate][webhook] Delivery ${deliveryId} permanently failed after ${attempt} attempts (status: ${responseStatus})`);
+        await db.webhookDeliveryLog.update({
+            where: { id: deliveryId },
+            data: {
+                status: 'failed',
+                attempts: attempt,
+                lastAttemptAt: new Date(),
+                responseStatus,
+                responseBody: responseBody.substring(0, 1000),
+                nextRetryAt: null,
+            },
+        });
+    }
+    else {
+        const delay = RETRY_DELAYS_MS[attempt] ?? 600_000;
+        await db.webhookDeliveryLog.update({
+            where: { id: deliveryId },
+            data: {
+                status: 'retrying',
+                attempts: attempt,
+                lastAttemptAt: new Date(),
+                responseStatus,
+                responseBody: responseBody.substring(0, 1000),
+                nextRetryAt: new Date(Date.now() + delay),
+            },
+        });
+    }
+    return false;
+}
+// ---------------------------------------------------------------------------
+// Retry processor (called from cron or scheduled task)
+// ---------------------------------------------------------------------------
+/**
+ * Process pending retries. Call this from a cron job (e.g. every 1-2 minutes).
+ * Finds deliveries with status='retrying' and nextRetryAt <= now.
+ */
+export async function processRetries() {
+    const db = getDB();
+    const pending = await db.webhookDeliveryLog.findMany({
+        where: {
+            status: 'retrying',
+            nextRetryAt: { lte: new Date() },
+        },
+        include: { endpoint: true },
+        take: 50,
+    });
+    let succeeded = 0;
+    let failed = 0;
+    for (const delivery of pending) {
+        const payload = delivery.payload;
+        const result = await attemptDelivery(delivery.id, delivery.endpoint.url, delivery.endpoint.secret, payload);
+        if (result) {
+            succeeded++;
+        }
+        else {
+            failed++;
+        }
+    }
+    return { retried: pending.length, succeeded, failed };
+}
+//# sourceMappingURL=index.js.map

package/dist/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AA2BzD,MAAM,eAAe,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACtD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,MAAc;IAEd,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,SAAiB,EACjB,MAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA2B;IAC9D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IACxB,OAAO,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC;QAC/B,IAAI,EAAE;YACJ,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;SAC7B;KACF,CAAC,CAAC;AACL,CAAC;AAED,kCAAkC;AAClC,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IACxB,OAAO,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,IAAmC;IAClF,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IACxB,OAAO,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC;QAC/B,KAAK,EAAE,EAAE,EAAE,EAAE;QACb,IAAI,EAAE;YACJ,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;KACF,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU;IAC7C,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IACxB,OAAO,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,KAAK,GAAG,EAAE;IAChE,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IACxB,OAAO,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACpC,KAAK,EAAE,EAAE,UAAU,EAAE;QACrB,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;QAC9B,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,oDAAoD;AACpD,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAmB,EACnB,IAA6B;IAE7B,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IAExB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC;QAClD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;KACxB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAO,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,EAAE,CAAC,MAAwB,CAAC;QAC3C,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAmB;QAC9B,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI;KACL,CAAC;IAEF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAClD,IAAI,EAAE;gBACJ,UAAU,EAAE,EAAE,CAAC,EAAE;gBACjB,KAAK;gBACL,OAAO;gBACP,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,CAAC;aACf;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9E,IAAI,MAAM,EAAE,CAAC;YACX,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,GAAW,EACX,MAAc,EACd,OAAuB;IAEvB,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,aAAa,CAAC,UAAU,EAAE,CAAC,EAAE,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAElD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,qBAAqB,EAAE,SAAS;gBAChC,iBAAiB,EAAE,OAAO,CAAC,KAAK;gBAChC,oBAAoB,EAAE,UAAU;gBAChC,YAAY,EAAE,wBAAwB;aACvC;YACD,IAAI;YACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;SACjD,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAE3D,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBACjC,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;gBACzB,IAAI,EAAE;oBACJ,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;oBAC1B,aAAa,EAAE,IAAI,IAAI,EAAE;oBACzB,cAAc,EAAE,QAAQ,CAAC,MAAM;oBAC/B,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC;oBAC7C,WAAW,EAAE,IAAI;iBAClB;aACF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,+BAA+B,UAAU,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;QACxG,OAAO,aAAa,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,UAAkB,EAClB,cAAsB,EACtB,YAAoB;IAEpB,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IAExB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC;QACtD,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;KAC1B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,QAAQ,EAAE,WAAW,IAAI,CAAC,CAAC;IAE/C,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,+BAA+B,UAAU,6BAA6B,OAAO,sBAAsB,cAAc,GAAG,CAAC,CAAC;QACpI,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC;YACjC,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,IAAI,EAAE;gBACJ,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,OAAO;gBACjB,aAAa,EAAE,IAAI,IAAI,EAAE;gBACzB,cAAc;gBACd,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC;gBAC7C,WAAW,EAAE,IAAI;aAClB;SACF,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;QAClD,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC;YACjC,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,IAAI,EAAE;gBACJ,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,OAAO;gBACjB,aAAa,EAAE,IAAI,IAAI,EAAE;gBACzB,cAAc;gBACd,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC;gBAC7C,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;aAC1C;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IAExB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACnD,KAAK,EAAE;YACL,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE;SACjC;QACD,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3B,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IAEH,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAyB,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,QAAQ,CAAC,GAAG,EACrB,QAAQ,CAAC,QAAQ,CAAC,MAAM,EACxB,OAAO,CACR,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACxD,CAAC"}

package/dist/workflow/index.d.ts

@@ -0,0 +1,8 @@
+export type WorkflowStage = 'DRAFT' | 'IN_REVIEW' | 'APPROVED' | 'PUBLISHED' | 'ARCHIVED';
+export declare function canTransition(from: WorkflowStage, to: WorkflowStage, role: string): boolean;
+export declare function getAvailableTransitions(stage: WorkflowStage, role: string): WorkflowStage[];
+export declare function transitionDocument(documentId: string, targetStage: WorkflowStage, userId: string, role: string, note?: string): Promise<{
+    success: boolean;
+    error?: string;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/workflow/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workflow/index.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,CAAC;AAU1F,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAI3F;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAI3F;AAED,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,aAAa,EAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAqC/C"}

package/dist/workflow/index.js

@@ -0,0 +1,56 @@
+import { getDB } from '../db';
+const TRANSITIONS = {
+    DRAFT: { next: ['IN_REVIEW'], roles: ['ADMIN', 'EDITOR', 'AUTHOR'] },
+    IN_REVIEW: { next: ['APPROVED', 'DRAFT'], roles: ['ADMIN', 'EDITOR'] },
+    APPROVED: { next: ['PUBLISHED', 'DRAFT'], roles: ['ADMIN', 'EDITOR'] },
+    PUBLISHED: { next: ['ARCHIVED', 'DRAFT'], roles: ['ADMIN'] },
+    ARCHIVED: { next: ['DRAFT'], roles: ['ADMIN'] },
+};
+export function canTransition(from, to, role) {
+    const rule = TRANSITIONS[from];
+    if (!rule)
+        return false;
+    return rule.next.includes(to) && rule.roles.includes(role);
+}
+export function getAvailableTransitions(stage, role) {
+    const rule = TRANSITIONS[stage];
+    if (!rule || !rule.roles.includes(role))
+        return [];
+    return rule.next;
+}
+export async function transitionDocument(documentId, targetStage, userId, role, note) {
+    const db = getDB();
+    const doc = await db.document.findFirst({ where: { id: documentId, deletedAt: null } });
+    if (!doc)
+        return { success: false, error: 'Document not found' };
+    const currentStage = (doc.workflowStage ?? 'DRAFT');
+    if (!canTransition(currentStage, targetStage, role)) {
+        return { success: false, error: `Cannot transition from ${currentStage} to ${targetStage}` };
+    }
+    const updateData = {
+        workflowStage: targetStage,
+        reviewerId: ['IN_REVIEW', 'APPROVED'].includes(targetStage) ? userId : null,
+        reviewNote: note ?? null,
+    };
+    if (targetStage === 'PUBLISHED') {
+        updateData.status = 'PUBLISHED';
+        updateData.publishedAt = new Date();
+    }
+    else if (targetStage === 'DRAFT') {
+        updateData.status = 'DRAFT';
+    }
+    else if (targetStage === 'ARCHIVED') {
+        updateData.status = 'ARCHIVED';
+    }
+    await db.document.update({ where: { id: documentId }, data: updateData });
+    await db.version.create({
+        data: {
+            documentId,
+            data: doc.data ?? {},
+            changedById: userId,
+            changeType: 'UPDATE',
+        },
+    });
+    return { success: true };
+}
+//# sourceMappingURL=index.js.map

package/dist/workflow/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workflow/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAI9B,MAAM,WAAW,GAAsE;IACrF,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;IACpE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;IACtE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE;IACtE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE;IAC5D,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE;CAChD,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAmB,EAAE,EAAiB,EAAE,IAAY;IAChF,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAoB,EAAE,IAAY;IACxE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,WAA0B,EAC1B,MAAc,EACd,IAAY,EACZ,IAAa;IAEb,MAAM,EAAE,GAAG,KAAK,EAAO,CAAC;IACxB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAEjE,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAkB,CAAC;IACrE,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,YAAY,OAAO,WAAW,EAAE,EAAE,CAAC;IAC/F,CAAC;IAED,MAAM,UAAU,GAAQ;QACtB,aAAa,EAAE,WAAW;QAC1B,UAAU,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC3E,UAAU,EAAE,IAAI,IAAI,IAAI;KACzB,CAAC;IAEF,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;QAChC,UAAU,CAAC,MAAM,GAAG,WAAW,CAAC;QAChC,UAAU,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IACtC,CAAC;SAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QACnC,UAAU,CAAC,MAAM,GAAG,OAAO,CAAC;IAC9B,CAAC;SAAM,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;QACtC,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC;IACjC,CAAC;IAED,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAE1E,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE;YACJ,UAAU;YACV,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;YACpB,WAAW,EAAE,MAAM;YACnB,UAAU,EAAE,QAAQ;SACrB;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/workflows/index.d.ts

@@ -0,0 +1,30 @@
+export interface WorkflowStep {
+    name: string;
+    assigneeRole?: string;
+    assigneeId?: string;
+    autoTransition?: boolean;
+    condition?: (doc: Record<string, unknown>) => boolean;
+    onEnter?: (doc: Record<string, unknown>) => Promise<void>;
+    onExit?: (doc: Record<string, unknown>) => Promise<void>;
+}
+export interface WorkflowDefinition {
+    id: string;
+    name: string;
+    collection: string;
+    steps: WorkflowStep[];
+    initialStep: number;
+    finalStep: number;
+}
+export interface WorkflowInstance {
+    documentId: string;
+    currentStep: number;
+    status: "pending" | "in_progress" | "approved" | "rejected" | "completed";
+    assignedToId?: string;
+}
+/** Advance a workflow to its next step. */
+export declare function advanceWorkflow(_documentId: string, _definition: WorkflowDefinition, _db: unknown): Promise<WorkflowInstance>;
+/** Reject the current workflow step, optionally reverting to a previous step. */
+export declare function rejectWorkflowStep(_documentId: string, _revertToStep: number, _reason: string, _db: unknown): Promise<WorkflowInstance>;
+/** Get the current workflow state for a document. */
+export declare function getWorkflowState(_documentId: string, _db: unknown): Promise<WorkflowInstance | null>;
+//# sourceMappingURL=index.d.ts.map

package/dist/workflows/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workflows/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,2CAA2C;AAC3C,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,kBAAkB,EAC/B,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,gBAAgB,CAAC,CAG3B;AAED,iFAAiF;AACjF,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,gBAAgB,CAAC,CAE3B;AAED,qDAAqD;AACrD,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAElC"}

package/dist/workflows/index.js

@@ -0,0 +1,14 @@
+/** Advance a workflow to its next step. */
+export async function advanceWorkflow(_documentId, _definition, _db) {
+    // TODO: validate current step, run onExit/onEnter hooks, update WorkflowState
+    throw new Error("Not implemented");
+}
+/** Reject the current workflow step, optionally reverting to a previous step. */
+export async function rejectWorkflowStep(_documentId, _revertToStep, _reason, _db) {
+    throw new Error("Not implemented");
+}
+/** Get the current workflow state for a document. */
+export async function getWorkflowState(_documentId, _db) {
+    throw new Error("Not implemented");
+}
+//# sourceMappingURL=index.js.map

package/dist/workflows/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workflows/index.ts"],"names":[],"mappings":"AA0BA,2CAA2C;AAC3C,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,WAA+B,EAC/B,GAAY;IAEZ,8EAA8E;IAC9E,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;AACrC,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,aAAqB,EACrB,OAAe,EACf,GAAY;IAEZ,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;AACrC,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,GAAY;IAEZ,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;AACrC,CAAC"}