@antasphere/chassis-server 1.1.0 → 1.3.0

package/dist/webhooks/safe-fetch.js

@@ -0,0 +1,263 @@
+import { promises as dns } from 'node:dns';
+import http from 'node:http';
+import https from 'node:https';
+import { isIP } from 'node:net';
+import { addAbortSignal } from 'node:stream';
+const REFUSAL_MESSAGES = {
+    scheme: 'the webhook URL must use http: or https:',
+    port: "the webhook URL must use its scheme's default port",
+    userinfo: 'the webhook URL must not carry a user name or a password',
+    private_address: 'the webhook URL resolves to an address that is not on the public internet',
+    https_required: 'the webhook URL must use https:',
+    unresolvable: 'the webhook URL names a host that resolves to no address',
+    malformed: 'the webhook URL is not a valid URL'
+};
+/** A webhook URL the guard refused (a scheme, a port, userinfo, an address). */
+export class WebhookUrlRefusedError extends Error {
+    code;
+    constructor(code, message) {
+        super(message ?? REFUSAL_MESSAGES[code]);
+        this.name = 'WebhookUrlRefusedError';
+        this.code = code;
+    }
+}
+const DEFAULT_TIMEOUT_MS = 10_000;
+const DEFAULT_MAX_RESPONSE_BYTES = 65_536;
+// ── The address check ────────────────────────────────────────────────────────
+function ipv4(ip) {
+    const parts = ip.split('.');
+    if (parts.length !== 4)
+        return null;
+    const bytes = parts.map((p) => (/^\d{1,3}$/.test(p) ? Number(p) : NaN));
+    return bytes.every((b) => b >= 0 && b <= 255) ? bytes : null;
+}
+function isPublicV4(b) {
+    const [a, c] = [b[0], b[1]];
+    if (a === 0 || a === 10 || a === 127)
+        return false; // this network, private, loopback
+    if (a === 100 && c >= 64 && c <= 127)
+        return false; // carrier-grade NAT
+    if (a === 169 && c === 254)
+        return false; // link-local, the cloud metadata address
+    if (a === 172 && c >= 16 && c <= 31)
+        return false; // private
+    if (a === 192 && c === 0 && b[2] === 0)
+        return false; // IETF protocol assignments
+    if (a === 192 && c === 0 && b[2] === 2)
+        return false; // documentation
+    if (a === 192 && c === 168)
+        return false; // private
+    if (a === 198 && (c === 18 || c === 19))
+        return false; // benchmarking
+    if (a === 198 && c === 51 && b[2] === 100)
+        return false; // documentation
+    if (a === 203 && c === 0 && b[2] === 113)
+        return false; // documentation
+    return a < 224; // multicast, reserved, broadcast
+}
+/** The eight 16-bit groups of an IPv6 address (a trailing dotted IPv4 folded in), or null. */
+function ipv6(ip) {
+    let s = ip.toLowerCase().replace(/%.*$/, '');
+    const dotted = /(\d+\.\d+\.\d+\.\d+)$/.exec(s);
+    if (dotted) {
+        const v4 = ipv4(dotted[1]);
+        if (!v4)
+            return null;
+        s = `${s.slice(0, -dotted[1].length)}${((v4[0] << 8) | v4[1]).toString(16)}:${((v4[2] << 8) | v4[3]).toString(16)}`;
+    }
+    const halves = s.split('::');
+    if (halves.length > 2)
+        return null;
+    const parse = (h) => (h === '' ? [] : h.split(':'));
+    const head = parse(halves[0]);
+    const tail = halves.length === 2 ? parse(halves[1]) : [];
+    const fill = 8 - head.length - tail.length;
+    if (halves.length === 2 ? fill < 1 : fill !== 0)
+        return null;
+    const groups = [...head, ...Array(halves.length === 2 ? fill : 0).fill('0'), ...tail];
+    if (!groups.every((g) => /^[0-9a-f]{1,4}$/.test(g)))
+        return null;
+    return groups.map((g) => Number.parseInt(g, 16));
+}
+/**
+ * Whether an address is on the public internet: false for loopback, private,
+ * link-local (the metadata address), carrier-grade NAT, multicast, reserved,
+ * and every IPv6 outside global unicast (`2000::/3`): `::`, `::1`, `fc00::/7`,
+ * `fe80::/10`, `ff00::/8`. An IPv4-mapped (`::ffff:a.b.c.d`) or a 6to4
+ * (`2002::/16`) address is judged by the IPv4 inside it. Unparseable: false.
+ */
+export function isPublicAddress(ip) {
+    if (isIP(ip) === 4) {
+        const b = ipv4(ip);
+        return b !== null && isPublicV4(b);
+    }
+    const g = ipv6(ip);
+    if (!g)
+        return false;
+    const embedded = (hi, lo) => isPublicV4([hi >> 8, hi & 255, lo >> 8, lo & 255]);
+    if (g.slice(0, 5).every((x) => x === 0) && g[5] === 0xffff)
+        return embedded(g[6], g[7]);
+    if ((g[0] & 0xe000) !== 0x2000)
+        return false; // not global unicast
+    if (g[0] === 0x2002)
+        return embedded(g[1], g[2]); // 6to4
+    if (g[0] === 0x2001 && (g[1] === 0 || g[1] === 0xdb8))
+        return false; // Teredo, documentation
+    return true;
+}
+/** The URL's host without the brackets of an IPv6 literal. */
+function bareHost(hostname) {
+    return hostname.replace(/^\[|\]$/g, '');
+}
+/**
+ * The checks that need no lookup: `http:`/`https:` only (`https:` alone under
+ * `httpsOnly`), the scheme's default port only (`url.port === ''`, so an
+ * explicit default port, which the URL parser drops, passes), no userinfo, a
+ * non-empty hostname, a literal IP public unless `allowPrivateNetworks`.
+ * Throws `WebhookUrlRefusedError`; returns the parsed URL.
+ */
+export function checkWebhookUrl(url, policy) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new WebhookUrlRefusedError('malformed');
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+        throw new WebhookUrlRefusedError('scheme');
+    if (policy.httpsOnly && parsed.protocol !== 'https:')
+        throw new WebhookUrlRefusedError('https_required');
+    if (parsed.username || parsed.password)
+        throw new WebhookUrlRefusedError('userinfo');
+    // The scheme's default port only on the public internet; an operator who
+    // opened private networks addresses services on their own ports (an n8n on
+    // 5678), so the port rule lifts with the address rule.
+    if (parsed.port !== '' && !policy.allowPrivateNetworks)
+        throw new WebhookUrlRefusedError('port');
+    const host = bareHost(parsed.hostname);
+    if (host === '')
+        throw new WebhookUrlRefusedError('malformed');
+    if (isIP(host) && !policy.allowPrivateNetworks && !isPublicAddress(host)) {
+        throw new WebhookUrlRefusedError('private_address');
+    }
+    return parsed;
+}
+/**
+ * The address to connect to, once EVERY address the name resolves to is
+ * public (or the policy opens private networks); an empty resolution is
+ * `unresolvable`. A failing resolver's own error passes through.
+ */
+async function checkedAddress(hostname, policy, lookup) {
+    const host = bareHost(hostname);
+    const family = isIP(host);
+    if (family) {
+        if (!policy.allowPrivateNetworks && !isPublicAddress(host)) {
+            throw new WebhookUrlRefusedError('private_address');
+        }
+        return { address: host, family };
+    }
+    const all = await lookup(host);
+    if (all.length === 0)
+        throw new WebhookUrlRefusedError('unresolvable');
+    if (!policy.allowPrivateNetworks && !all.every((a) => isPublicAddress(a.address))) {
+        throw new WebhookUrlRefusedError('private_address');
+    }
+    return all[0];
+}
+/** The promise, or the signal's reason once it aborts first. */
+function abortable(promise, signal) {
+    if (signal.aborted)
+        return Promise.reject(signal.reason);
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(signal.reason);
+        signal.addEventListener('abort', onAbort, { once: true });
+        promise.then((v) => {
+            signal.removeEventListener('abort', onAbort);
+            resolve(v);
+        }, (e) => {
+            signal.removeEventListener('abort', onAbort);
+            reject(e);
+        });
+    });
+}
+/** At most `max` bytes of the body; the rest is never read. */
+async function readCapped(body, max) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of body) {
+        const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        if (size + buf.length >= max) {
+            chunks.push(buf.subarray(0, max - size));
+            break;
+        }
+        chunks.push(buf);
+        size += buf.length;
+    }
+    return Buffer.concat(chunks);
+}
+function nodeTransport(policy, resolve) {
+    return (url, init, signal) => {
+        const lookup = (hostname, options, callback) => {
+            checkedAddress(hostname, policy, resolve).then((first) => {
+                if (options.all)
+                    callback(null, [first]);
+                else
+                    callback(null, first.address, first.family);
+            }, (e) => callback(e, '', 0));
+        };
+        const request = url.protocol === 'https:' ? https.request : http.request;
+        return new Promise((done, fail) => {
+            const req = request(url, { method: init.method, headers: init.headers, lookup, signal, agent: false }, (res) => done({ status: res.statusCode ?? 0, headers: res.headers, body: res }));
+            req.on('error', fail);
+            req.end(init.body);
+        });
+    };
+}
+/**
+ * One POST, no redirect followed (a 3xx comes back as its status), the address
+ * check inside the socket's own lookup (ALL resolved addresses must be public
+ * unless `allowPrivateNetworks`; an empty resolution is `unresolvable`),
+ * `AbortSignal.timeout(timeoutMs)` over the whole call, the response body read
+ * up to `maxResponseBytes` then the stream destroyed. Rejects with
+ * `WebhookUrlRefusedError` on a refused address, with the transport's error
+ * (ECONNREFUSED, the timeout's AbortError…) otherwise. Sets no `user-agent`:
+ * that is the caller's.
+ */
+export async function safePost(url, headers, body, policy, options = {}) {
+    const started = performance.now();
+    const target = checkWebhookUrl(url, policy);
+    const lookup = options.lookup ?? ((host) => dns.lookup(host, { all: true }));
+    const signal = AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    const maxBytes = options.maxResponseBytes ?? DEFAULT_MAX_RESPONSE_BYTES;
+    const sent = {};
+    for (const [name, value] of Object.entries(headers)) {
+        if (name.toLowerCase() !== 'content-length')
+            sent[name] = value;
+    }
+    sent['content-length'] = String(Buffer.byteLength(body, 'utf8'));
+    const init = { method: 'POST', headers: sent, body };
+    let transport;
+    if (options.transport) {
+        // The test seam: the same check the socket's lookup makes, made first.
+        await abortable(checkedAddress(target.hostname, policy, lookup), signal);
+        transport = options.transport;
+    }
+    else {
+        transport = nodeTransport(policy, lookup);
+    }
+    const res = await abortable(transport(target, init, signal), signal);
+    try {
+        addAbortSignal(signal, res.body);
+        const bytes = await readCapped(res.body, maxBytes);
+        return {
+            status: res.status,
+            bodyText: bytes.toString('utf8'),
+            durationMs: Math.round(performance.now() - started)
+        };
+    }
+    finally {
+        res.body.destroy();
+    }
+}
+//# sourceMappingURL=safe-fetch.js.map

package/dist/webhooks/safe-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-fetch.js","sourceRoot":"","sources":["../../src/webhooks/safe-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAuB,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAwB5D,MAAM,gBAAgB,GAAsC;IAC1D,MAAM,EAAE,0CAA0C;IAClD,IAAI,EAAE,oDAAoD;IAC1D,QAAQ,EAAE,0DAA0D;IACpE,eAAe,EAAE,2EAA2E;IAC5F,cAAc,EAAE,iCAAiC;IACjD,YAAY,EAAE,0DAA0D;IACxE,SAAS,EAAE,oCAAoC;CAChD,CAAC;AAEF,gFAAgF;AAChF,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,CAAoB;IACjC,YAAY,IAAuB,EAAE,OAAgB;QACnD,KAAK,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAgDD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C,gFAAgF;AAEhF,SAAS,IAAI,CAAC,EAAU;IACtB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,CAAW;IAC7B,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,kCAAkC;IACtF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,oBAAoB;IACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,yCAAyC;IACnF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,CAAC,UAAU;IAC7D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,4BAA4B;IAClF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,gBAAgB;IACtE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,UAAU;IACpD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,eAAe;IACtE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,gBAAgB;IACzE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,gBAAgB;IACxE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,iCAAiC;AACnD,CAAC;AAED,8FAA8F;AAC9F,SAAS,IAAI,CAAC,EAAU;IACtB,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3H,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9F,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,OAAO,CAAC,KAAK,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,CAAC,qBAAqB;IACpE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,OAAO;IAC3D,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,SAAS,QAAQ,CAAC,QAAgB;IAChC,OAAO,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,MAAuB;IAClE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC5G,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACrF,yEAAyE;IACzE,2EAA2E;IAC3E,uDAAuD;IACvD,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB;QAAE,MAAM,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,QAAgB,EAChB,MAAuB,EACvB,MAAkB;IAElB,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC;AACjB,CAAC;AAED,gEAAgE;AAChE,SAAS,SAAS,CAAI,OAAmB,EAAE,MAAmB;IAC5D,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAe,CAAC,CAAC;IAClE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAe,CAAC,CAAC;QACrD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CACV,CAAC,CAAC,EAAE,EAAE;YACJ,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,CAAU,EAAE,EAAE;YACb,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,CAAU,CAAC,CAAC;QACrB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,UAAU,CAAC,IAAc,EAAE,GAAW;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;QAC9E,IAAI,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;YACzC,MAAM;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,MAAuB,EAAE,OAAmB;IACjE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC7D,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAC5C,CAAC,KAAK,EAAE,EAAE;gBACR,IAAI,OAAO,CAAC,GAAG;oBAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;;oBACpC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACnD,CAAC,EACD,CAAC,CAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,CAA0B,EAAE,EAAE,EAAE,CAAC,CAAC,CAC1D,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACzE,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YAChC,MAAM,GAAG,GAAG,OAAO,CACjB,GAAG,EACH,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAC5E,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAChF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAW,EACX,OAA+B,EAC/B,IAAY,EACZ,MAAuB,EACvB,UAA4B,EAAE;IAE9B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAe,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IAExE,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,gBAAgB;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,MAAe,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE9D,IAAI,SAAwB,CAAC;IAC7B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,uEAAuE;QACvE,MAAM,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACzE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;SACpD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/webhooks/service.d.ts

@@ -0,0 +1,245 @@
+import type PgBoss from 'pg-boss';
+import { Counter } from 'prom-client';
+import { type Db, type DbConn, type WebhookDeliveryRow, type WebhookEndpointRow } from '@antasphere/chassis-db';
+import type { ToolIdentity, WebhookDelivery, WebhookEndpoint, WebhookEndpointCreate, WebhookEndpointUpdate } from '@antasphere/chassis-contract';
+import type { Logger } from '../logger.js';
+import type { EmailDriver } from '../email/driver.js';
+import type { MailBrand } from '../email/shell.js';
+import type { EventBus } from '../platform/events.js';
+import { type WebhookCatalogIndex, type WebhookSubjectValue } from './catalog.js';
+import { type SafeFetchOptions, type SafeFetchPolicy } from './safe-fetch.js';
+/**
+ * Outbound webhooks (PRDCT-3482): the chassis's machinery, tool-neutral.
+ *
+ * EMIT: a domain write calls `emit(tx, …)` INSIDE its own transaction; one
+ * pg-boss job (the event's envelope) is written by the same connection, so
+ * the event is durable with the write and never exists for a rolled-back
+ * one. A per-replica cache of "does any enabled endpoint of this workspace
+ * want this type" (`listenerTtlMs`) makes an emit nobody listens to cost
+ * one map lookup: a view with no endpoint costs no job.
+ *
+ * FAN-OUT (`webhook-events`): the event is matched against the workspace's
+ * enabled endpoints (type, then filters); one `webhook_deliveries` row and
+ * one delivery job per match, in one transaction.
+ *
+ * DELIVERY (`webhook-deliveries`): the envelope is signed (Standard
+ * Webhooks, two signatures during a rotation overlap) and POSTed through the
+ * guarded fetch. A 2xx is `delivered`; anything else fails the job, which
+ * pg-boss retries on the queue's budget (ten retries from thirty seconds,
+ * about eight and a half hours), then moves to `webhook-deliveries-held`:
+ * the row is marked `held`, logged, counted, and queued again an hour later
+ * with the whole budget once more, round after round, until the receiver
+ * takes it or the endpoint is disabled. A streak of
+ * `disableAfterFailures` failures spanning `disableAfterMs` switches the
+ * endpoint off and mails its creator once.
+ *
+ * The secret is stored sealed (`secret-box.ts`, info `chassis:webhook-endpoint`)
+ * and shown once, at creation and at rotation.
+ */
+export declare const WEBHOOK_EVENTS_QUEUE = "webhook-events";
+export declare const WEBHOOK_DELIVERIES_QUEUE = "webhook-deliveries";
+export declare const WEBHOOK_DELIVERIES_HELD_QUEUE = "webhook-deliveries-held";
+export declare const WEBHOOK_PURGE_QUEUE = "webhook-purge";
+/** The HKDF info of the endpoints' secret box: never the idempotency one. */
+export declare const WEBHOOK_SECRET_BOX_INFO = "chassis:webhook-endpoint";
+export interface WebhookDials {
+    /** Delivery retries before a hold (pg-boss `retryLimit`). */
+    retryLimit: number;
+    /** The first retry's delay in seconds, doubled each time. */
+    retryDelaySeconds: number;
+    /** How long a held delivery waits before its next round. */
+    heldDelaySeconds: number;
+    /** The failure streak that switches an endpoint off… */
+    disableAfterFailures: number;
+    /** …once it has lasted this long. */
+    disableAfterMs: number;
+    /** How long "anyone listening?" is remembered per workspace and replica. */
+    listenerTtlMs: number;
+    /** How long the previous secret keeps signing after a rotation. */
+    previousSecretOverlapMs: number;
+    /** The guarded fetch's timeout. */
+    timeoutMs: number;
+}
+export declare const DEFAULT_WEBHOOK_DIALS: WebhookDials;
+/** What `emit` takes: the workspace, the type, the subjects by KEY, the data. */
+export interface WebhookEmit {
+    workspaceId: string;
+    type: string;
+    subjects?: Readonly<Record<string, WebhookSubjectValue>>;
+    data: Record<string, unknown>;
+}
+/** The job the fan-out queue carries: the event as the envelope will say it (minus `attempt`). */
+export interface WebhookEventJob {
+    id: string;
+    type: string;
+    occurredAt: string;
+    workspaceId: string;
+    /** By subject KEY (`project`), the envelope writes them under each subject's FIELD. */
+    subjects: Record<string, WebhookSubjectValue>;
+    data: Record<string, unknown>;
+}
+export interface WebhookDeliveryJob {
+    deliveryId: string;
+}
+/** The emitter a tool's services receive (`ServiceCore.webhooks`). */
+export interface WebhookEmitter {
+    /**
+     * Record that something happened, inside the caller's transaction (or on
+     * a plain handle, for a write the chassis does not own). Answers the
+     * event id, or null when no endpoint of the workspace listens to the type,
+     * or the data does not match the declared schema (logged, never thrown:
+     * a webhook must never break the write it reports).
+     */
+    emit(conn: DbConn, event: WebhookEmit): Promise<string | null>;
+    /**
+     * Whether any enabled endpoint of the workspace subscribes to the type:
+     * the cheap exit a tool takes BEFORE it computes the facts of an event
+     * that is frequent and costs something to describe (a view). Cached per
+     * replica; `emit` runs the same check itself.
+     */
+    wants(workspaceId: string, type: string): Promise<boolean>;
+}
+export interface WebhookServiceDeps {
+    db: Db;
+    logger: Logger;
+    authSecret: string;
+    identity: ToolIdentity;
+    version: string;
+    policy: SafeFetchPolicy;
+    email: EmailDriver;
+    brand: MailBrand;
+    publicBaseUrl: string;
+    catalog: WebhookCatalogIndex;
+    dials?: Partial<WebhookDials> | undefined;
+    /** Test seams of the guarded fetch (a lookup, a transport). */
+    fetchOptions?: SafeFetchOptions | undefined;
+    now?: () => Date;
+}
+export declare class WebhookRefusedError extends Error {
+    readonly code: 'url_refused' | 'not_found' | 'unknown_event' | 'unknown_subject';
+    constructor(code: 'url_refused' | 'not_found' | 'unknown_event' | 'unknown_subject', message: string);
+}
+/**
+ * Thrown by an attempt that did not run because the endpoint already holds
+ * its share of this replica's pollers (`MAX_IN_FLIGHT_PER_ENDPOINT`): the
+ * worker puts the job back in the queue a moment later, its retry budget
+ * untouched, so one dead receiver can never take every slot (verifier
+ * round 2, MJ-R2-1).
+ */
+export declare class WebhookDeliveryDeferred extends Error {
+    readonly deliveryId: string;
+    constructor(deliveryId: string);
+}
+/** How many attempts one endpoint may have in flight on one replica at once. */
+export declare const MAX_IN_FLIGHT_PER_ENDPOINT = 2;
+/** Thrown by a retryable attempt that failed, so pg-boss retries the job. */
+export declare class WebhookDeliveryFailed extends Error {
+    readonly deliveryId: string;
+    constructor(deliveryId: string, message: string);
+}
+export declare class WebhookService implements WebhookEmitter {
+    private readonly deps;
+    readonly dials: WebhookDials;
+    readonly promMetrics: Counter<string>[];
+    private readonly box;
+    private readonly listeners;
+    private readonly deliveries;
+    private readonly held;
+    private readonly disabled;
+    private readonly now;
+    /** Filled by boot once pg-boss exists (`attach`); the jobs are declared before it. */
+    private boss;
+    /** Attempts in flight per endpoint on this replica (the per-endpoint bound). */
+    private readonly inFlight;
+    constructor(deps: WebhookServiceDeps);
+    attach(boss: PgBoss): void;
+    get catalog(): WebhookCatalogIndex;
+    emit(conn: DbConn, event: WebhookEmit): Promise<string | null>;
+    /** Does any enabled endpoint of the workspace subscribe to this type? Cached per replica. */
+    wants(workspaceId: string, type: string): Promise<boolean>;
+    private loadListeners;
+    /** Forget the cached answer of a workspace (every write of its endpoints calls it). */
+    invalidateListeners(workspaceId: string): void;
+    /**
+     * The chassis's own events, bridged from the in-process bus: fired after
+     * the write committed, so never for a rolled-back one, and at most once
+     * per replica that saw it. The events emitted inside a transaction the
+     * chassis owns (projects) do not pass here.
+     */
+    bindBus(events: EventBus): void;
+    /** One delivery row and one delivery job per endpoint that wants the event; answers how many. */
+    fanOut(job: WebhookEventJob): Promise<number>;
+    /** The envelope as the receiver reads it (without `attempt`, stamped at each send). */
+    private envelopeOf;
+    private queueDelivery;
+    /**
+     * One attempt of a delivery. `retryable` (the queue's worker): a failure
+     * throws `WebhookDeliveryFailed` so pg-boss retries. Not retryable (the
+     * test ping, run inline): a failure marks the row `failed` and answers it.
+     * Answers the row as it is after the attempt.
+     */
+    attempt(deliveryId: string, opts: {
+        retryable: boolean;
+    }): Promise<WebhookDeliveryRow | null>;
+    private finish;
+    /** Put a delivery back in the queue after `inSeconds` (a deferred attempt). */
+    requeue(deliveryId: string, inSeconds: number): Promise<void>;
+    /**
+     * The held queue's work: mark the row held and queue it again after the
+     * hold, in ONE transaction, so a re-send that fails leaves the row pending
+     * and the held job's own retry finds it again (the chassis suite's round 1:
+     * a row marked held outside the transaction was never re-driven once its
+     * send had failed). A row already delivered, failed or gone is left alone.
+     */
+    hold(deliveryId: string): Promise<void>;
+    private mailDisabled;
+    /** The nightly purge: deliveries older than `retentionDays`, in bounded batches. */
+    purge(retentionDays: number): Promise<number>;
+    /** The URL rule at registration (the address itself is judged at every delivery). */
+    checkUrl(url: string): void;
+    /**
+     * The subscription is checked against the catalog at registration
+     * (verifier round 1, MN1): an exact type must be declared, a family must
+     * have at least one declared type, `*` is always right; every filter key
+     * must be a declared subject. A typo would otherwise subscribe to nothing,
+     * silently.
+     */
+    checkSubscription(events: readonly string[] | undefined, filters: Record<string, string[]> | undefined): void;
+    create(workspaceId: string, createdBy: string, input: WebhookEndpointCreate): Promise<{
+        endpoint: WebhookEndpoint;
+        secret: string;
+    }>;
+    get(workspaceId: string, id: string): Promise<WebhookEndpoint | null>;
+    list(workspaceId: string, cursor: string | undefined, limit: number): Promise<{
+        webhooks: WebhookEndpoint[];
+        nextCursor: string | null;
+    }>;
+    /** Endpoints of the workspace, for the plan limit's count hook. */
+    count(workspaceId: string): Promise<number>;
+    update(workspaceId: string, id: string, patch: WebhookEndpointUpdate): Promise<WebhookEndpoint | null>;
+    remove(workspaceId: string, id: string): Promise<WebhookEndpoint | null>;
+    rotateSecret(workspaceId: string, id: string): Promise<{
+        endpoint: WebhookEndpoint;
+        secret: string;
+        previousSecretExpiresAt: string;
+    } | null>;
+    /** A signed `webhook.ping`, attempted inline, once; the row says how it went. */
+    test(workspaceId: string, id: string, sentBy: string | null): Promise<WebhookDelivery | null>;
+    listDeliveries(workspaceId: string, id: string, query: {
+        cursor?: string | undefined;
+        limit: number;
+        status?: WebhookDeliveryRow['status'] | undefined;
+    }): Promise<{
+        deliveries: WebhookDelivery[];
+        nextCursor: string | null;
+    } | null>;
+    getDelivery(workspaceId: string, id: string, deliveryId: string): Promise<WebhookDelivery | null>;
+    /** The same event queued again for the endpoint, as a new row (the event id unchanged: the receiver's dedupe key). */
+    redeliver(workspaceId: string, id: string, deliveryId: string): Promise<WebhookDelivery | null>;
+    private row;
+    private deliveryRow;
+    private requireBoss;
+}
+export declare function endpointToWire(row: WebhookEndpointRow): WebhookEndpoint;
+export declare function deliveryToWire(row: WebhookDeliveryRow): WebhookDelivery;
+//# sourceMappingURL=service.d.ts.map

package/dist/webhooks/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/webhooks/service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAML,KAAK,EAAE,EACP,KAAK,MAAM,EACX,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAGtD,OAAO,EAAsB,KAAK,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGtG,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAIzB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AACrD,eAAO,MAAM,wBAAwB,uBAAuB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AACvE,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AACnD,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,gBAAgB,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,uBAAuB,EAAE,MAAM,CAAC;IAChC,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,qBAAqB,EAAE,YASnC,CAAC;AAEF,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kGAAkG;AAClG,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC9C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B;;;;;;OAMG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/D;;;;;OAKG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,EAAE,CAAC;IACP,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,SAAS,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC;IAC1C,+DAA+D;IAC/D,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAE1C,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,WAAW,GAAG,eAAe,GAAG,iBAAiB;gBAAvE,IAAI,EAAE,aAAa,GAAG,WAAW,GAAG,eAAe,GAAG,iBAAiB,EAChF,OAAO,EAAE,MAAM;CAKlB;AAED;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;CAIxC;AAED,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,6EAA6E;AAC7E,qBAAa,qBAAsB,SAAQ,KAAK;IAE5C,QAAQ,CAAC,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM;CAKlB;AAMD,qBAAa,cAAe,YAAW,cAAc;IAcvC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAbjC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgC;IAC1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkB;IAC7C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,sFAAsF;IACtF,OAAO,CAAC,IAAI,CAAuB;IACnC,gFAAgF;IAChF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;gBAEzB,IAAI,EAAE,kBAAkB;IAuBrD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI1B,IAAI,OAAO,IAAI,mBAAmB,CAEjC;IAIK,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyDpE,6FAA6F;IACvF,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YASlD,aAAa;IAU3B,uFAAuF;IACvF,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAI9C;;;;;OAKG;IACH,OAAO,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI;IA2B/B,iGAAiG;IAC3F,MAAM,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BnD,uFAAuF;IACvF,OAAO,CAAC,UAAU;YAgBJ,aAAa;IAkB3B;;;;;OAKG;IACG,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;YA+KrF,MAAM;IA4BpB,+EAA+E;IACzE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE;;;;;;OAMG;IACG,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAyB/B,YAAY;IAqC1B,oFAAoF;IAC9E,KAAK,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBnD,qFAAqF;IACrF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAS3B;;;;;;OAMG;IACH,iBAAiB,CACf,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EACrC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,GAC5C,IAAI;IAuBD,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC;QAAE,QAAQ,EAAE,eAAe,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAqBnD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAKrE,IAAI,CACR,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IA6BtE,mEAAmE;IAC7D,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ3C,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAyB5B,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IASxE,YAAY,CAChB,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC;QAAE,QAAQ,EAAE,eAAe,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,uBAAuB,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAuBjG,iFAAiF;IAC3E,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA0B7F,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAA;KAAE,GACvG,OAAO,CAAC;QAAE,UAAU,EAAE,eAAe,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAgCzE,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAKvG,sHAAsH;IAChH,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;YAqBvF,GAAG;YASH,WAAW;IAmBzB,OAAO,CAAC,WAAW;CAIpB;AASD,wBAAgB,cAAc,CAAC,GAAG,EAAE,kBAAkB,GAAG,eAAe,CAkBvE;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,kBAAkB,GAAG,eAAe,CAgBvE"}