@archlast/server 0.0.1

package/dist/utils/http.js

@@ -0,0 +1,61 @@
+"use strict";
+/**
+ * HTTP utility functions for content disposition and MIME types
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createContentDisposition = createContentDisposition;
+exports.getExtensionFromMimeType = getExtensionFromMimeType;
+/**
+ * Create RFC 5987 compliant Content-Disposition header for file downloads
+ * Supports both legacy (filename) and modern (filename*) parameters for browser compatibility
+ * Edge/Chrome require proper encoding, Firefox is more lenient
+ */
+function createContentDisposition(fileName) {
+    // Sanitize filename for legacy parameter (escape quotes)
+    const sanitizedFileName = fileName.replace(/"/g, '\\"');
+    // RFC 5987 encoded filename for modern browsers
+    const encodedFileName = encodeURIComponent(fileName);
+    return `attachment; filename="${sanitizedFileName}"; filename*=UTF-8''${encodedFileName}`;
+}
+/**
+ * Get file extension from MIME type
+ * Edge/Chrome need explicit file extensions in Content-Disposition filename
+ * while Firefox can infer from Content-Type header
+ */
+function getExtensionFromMimeType(mimeType) {
+    if (!mimeType)
+        return "";
+    const mimeToExt = {
+        "image/png": ".png",
+        "image/jpeg": ".jpg",
+        "image/jpg": ".jpg",
+        "image/gif": ".gif",
+        "image/webp": ".webp",
+        "image/svg+xml": ".svg",
+        "image/bmp": ".bmp",
+        "image/tiff": ".tiff",
+        "image/x-icon": ".ico",
+        "application/pdf": ".pdf",
+        "application/json": ".json",
+        "application/xml": ".xml",
+        "text/plain": ".txt",
+        "text/html": ".html",
+        "text/css": ".css",
+        "text/javascript": ".js",
+        "application/javascript": ".js",
+        "video/mp4": ".mp4",
+        "video/webm": ".webm",
+        "video/ogg": ".ogv",
+        "audio/mpeg": ".mp3",
+        "audio/ogg": ".ogg",
+        "audio/wav": ".wav",
+        "application/zip": ".zip",
+        "application/x-rar-compressed": ".rar",
+        "application/x-7z-compressed": ".7z",
+        "application/vnd.openxmlformats-officedocument.wordprocessingml.document": ".docx",
+        "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet": ".xlsx",
+        "application/vnd.openxmlformats-officedocument.presentationml.presentation": ".pptx",
+    };
+    return mimeToExt[mimeType.toLowerCase()] || "";
+}
+//# sourceMappingURL=http.js.map

package/dist/utils/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/utils/http.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAOH,4DAMC;AAOD,4DAoCC;AAtDD;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,QAAgB;IACrD,yDAAyD;IACzD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,gDAAgD;IAChD,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrD,OAAO,yBAAyB,iBAAiB,uBAAuB,eAAe,EAAE,CAAC;AAC9F,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,QAAiB;IACtD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,SAAS,GAA2B;QACtC,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,OAAO;QACrB,eAAe,EAAE,MAAM;QACvB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,OAAO;QACrB,cAAc,EAAE,MAAM;QACtB,iBAAiB,EAAE,MAAM;QACzB,kBAAkB,EAAE,OAAO;QAC3B,iBAAiB,EAAE,MAAM;QACzB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,OAAO;QACpB,UAAU,EAAE,MAAM;QAClB,iBAAiB,EAAE,KAAK;QACxB,wBAAwB,EAAE,KAAK;QAC/B,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;QACnB,iBAAiB,EAAE,MAAM;QACzB,8BAA8B,EAAE,MAAM;QACtC,6BAA6B,EAAE,KAAK;QACpC,yEAAyE,EAAE,OAAO;QAClF,mEAAmE,EAAE,OAAO;QAC5E,2EAA2E,EAAE,OAAO;KACvF,CAAC;IAEF,OAAO,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACnD,CAAC"}

package/dist/utils/introspection-helpers.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Introspection helpers
+ * Extracted from index.ts to support robust argument parsing
+ */
+/**
+ * Robust-ish (non-AST) extraction of `args: { ... }` fields from deployed source code.
+ * This is a fallback when runtime Zod args schema is missing due to bundling/import differences.
+ *
+ * Returns `{ fields: [...] }` or null.
+ */
+export declare function extractArgsFromDeployedSource(params: {
+    filePath: string | null;
+    fullName: string;
+}): Promise<{
+    fields: Array<{
+        name: string;
+        type: string;
+        optional: boolean;
+    }>;
+} | null>;
+export declare function zodToArgMeta(schema: unknown): {
+    fields: Array<{
+        name: string;
+        type: string;
+        optional: boolean;
+    }>;
+} | null;
+export declare function rawArgsDebug(schema: unknown): {
+    rootTypeName: string;
+    fields: Record<string, {
+        typeName: string;
+        wrappers: string[];
+    }>;
+} | null;
+//# sourceMappingURL=introspection-helpers.d.ts.map

package/dist/utils/introspection-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"introspection-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/introspection-helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IACxD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CAiFvF;AAyCD,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG;IAC3C,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACpE,GAAG,IAAI,CAwFP;AAKD,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO;;;kBAYC,MAAM;kBAAY,MAAM,EAAE;;SA4BtE"}

package/dist/utils/introspection-helpers.js

@@ -0,0 +1,246 @@
+"use strict";
+/**
+ * Introspection helpers
+ * Extracted from index.ts to support robust argument parsing
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractArgsFromDeployedSource = extractArgsFromDeployedSource;
+exports.zodToArgMeta = zodToArgMeta;
+exports.rawArgsDebug = rawArgsDebug;
+/**
+ * Robust-ish (non-AST) extraction of `args: { ... }` fields from deployed source code.
+ * This is a fallback when runtime Zod args schema is missing due to bundling/import differences.
+ *
+ * Returns `{ fields: [...] }` or null.
+ */
+async function extractArgsFromDeployedSource(params) {
+    try {
+        const filePath = params.filePath;
+        const fullName = params.fullName;
+        if (!filePath || typeof filePath !== "string")
+            return null;
+        if (!filePath.includes(".archlast-deploy"))
+            return null;
+        const lastDot = fullName.lastIndexOf(".");
+        if (lastDot <= 0)
+            return null;
+        const exportName = fullName.slice(lastDot + 1);
+        if (!exportName)
+            return null;
+        const file = Bun.file(filePath);
+        if (!(await file.exists()))
+            return null;
+        const code = await file.text();
+        // Match "export const <exportName> = query|mutation|action(" and then locate the first "{"
+        const escapedExport = exportName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        const exportHead = new RegExp(`export\\s+(?:const|let)\\s+${escapedExport}\\b\\s*=\\s*(?:query|mutation|action)\\s*\\(`, "m");
+        const headMatch = exportHead.exec(code);
+        if (!headMatch)
+            return null;
+        const after = code.slice(headMatch.index);
+        const openRel = after.search(/\(\s*\{/m);
+        if (openRel < 0)
+            return null;
+        const openBraceIndex = headMatch.index + openRel + after.slice(openRel).search(/\{/m);
+        if (openBraceIndex < 0)
+            return null;
+        const closeBraceIndex = findMatchingBrace(code, openBraceIndex);
+        if (closeBraceIndex === null)
+            return null;
+        const configBlock = code.slice(openBraceIndex, closeBraceIndex + 1);
+        // Find args: { ... }
+        const argsMatch = /\bargs\s*:\s*\{/.exec(configBlock);
+        if (!argsMatch)
+            return null;
+        const argsOpenAbs = openBraceIndex + argsMatch.index + argsMatch[0].lastIndexOf("{");
+        const argsCloseAbs = findMatchingBrace(code, argsOpenAbs);
+        if (argsCloseAbs === null)
+            return null;
+        const argsBlock = code.slice(argsOpenAbs, argsCloseAbs + 1);
+        // Extract only top-level fields inside args block.
+        // We deliberately ignore nested object schema keys (v.object({ ... })).
+        const fields = [];
+        for (const m of argsBlock.matchAll(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*:\s*([^,\n]+)\s*(?:,|\n|})/gm)) {
+            const name = m[1];
+            const rhs = (m[2] ?? "").trim();
+            const optional = /\.optional\s*\(/.test(rhs) || /\.optional\b/.test(rhs);
+            const type = /\bv\.string\s*\(/.test(rhs)
+                ? "string"
+                : /\bv\.number\s*\(/.test(rhs)
+                    ? "number"
+                    : /\bv\.boolean\s*\(/.test(rhs)
+                        ? "boolean"
+                        : /\bv\.array\s*\(/.test(rhs)
+                            ? "array"
+                            : /\bv\.object\s*\(/.test(rhs)
+                                ? "object"
+                                : "unknown";
+            fields.push({ name, type, optional });
+        }
+        if (fields.length === 0)
+            return null;
+        fields.sort((a, b) => a.name.localeCompare(b.name));
+        return { fields };
+    }
+    catch {
+        return null;
+    }
+}
+function findMatchingBrace(code, openBraceIndex) {
+    let depth = 0;
+    let inString = null;
+    let escaped = false;
+    for (let i = openBraceIndex; i < code.length; i++) {
+        const ch = code[i];
+        if (inString) {
+            if (escaped) {
+                escaped = false;
+                continue;
+            }
+            if (ch === "\\") {
+                escaped = true;
+                continue;
+            }
+            if (ch === inString) {
+                inString = null;
+                continue;
+            }
+            continue;
+        }
+        if (ch === "'" || ch === '"' || ch === "`") {
+            inString = ch;
+            continue;
+        }
+        if (ch === "{")
+            depth++;
+        else if (ch === "}") {
+            depth--;
+            if (depth === 0)
+                return i;
+        }
+    }
+    return null;
+}
+function zodToArgMeta(schema) {
+    if (!schema || typeof schema !== "object")
+        return null;
+    const unwrap = (s) => {
+        let current = s;
+        let optional = false;
+        const wrappers = [];
+        while (current && typeof current === "object") {
+            const anyZod = current;
+            const typeName = anyZod?._def?.typeName;
+            if (typeName === "ZodOptional") {
+                wrappers.push("ZodOptional");
+                optional = true;
+                current = anyZod?._def?.innerType;
+                continue;
+            }
+            if (typeName === "ZodDefault") {
+                wrappers.push("ZodDefault");
+                optional = true;
+                current = anyZod?._def?.innerType;
+                continue;
+            }
+            if (typeName === "ZodNullable") {
+                wrappers.push("ZodNullable");
+                optional = true;
+                current = anyZod?._def?.innerType;
+                continue;
+            }
+            if (typeName === "ZodEffects") {
+                wrappers.push("ZodEffects");
+                current = anyZod?._def?.schema;
+                continue;
+            }
+            break;
+        }
+        return { schema: current, optional, wrappers };
+    };
+    const inferType = (s) => {
+        if (!s || typeof s !== "object")
+            return "unknown";
+        const anyZod = s;
+        const typeName = anyZod?._def?.typeName ?? "unknown";
+        return typeName === "ZodString"
+            ? "string"
+            : typeName === "ZodNumber"
+                ? "number"
+                : typeName === "ZodBoolean"
+                    ? "boolean"
+                    : typeName === "ZodArray"
+                        ? "array"
+                        : typeName === "ZodObject"
+                            ? "object"
+                            : typeName === "ZodRecord"
+                                ? "record"
+                                : typeName === "ZodEnum"
+                                    ? "enum"
+                                    : typeName === "ZodUnion"
+                                        ? "union"
+                                        : typeName === "ZodLiteral"
+                                            ? "literal"
+                                            : typeName === "ZodDate"
+                                                ? "date"
+                                                : "unknown";
+    };
+    const rootAny = schema;
+    if ((rootAny?._def?.typeName ?? "") !== "ZodObject")
+        return null;
+    const shapeValue = typeof rootAny.shape === "function" ? rootAny.shape() : rootAny.shape;
+    if (!shapeValue || typeof shapeValue !== "object")
+        return null;
+    const fields = [];
+    for (const [key, rawFieldSchema] of Object.entries(shapeValue)) {
+        const unwrapped = unwrap(rawFieldSchema);
+        const inferred = inferType(unwrapped.schema);
+        fields.push({
+            name: key,
+            type: inferred,
+            optional: unwrapped.optional,
+        });
+    }
+    fields.sort((a, b) => a.name.localeCompare(b.name));
+    return { fields };
+}
+const ARCHLAST_INTROSPECT_INCLUDE_RAW_ARGS_SCHEMA = (process.env.ARCHLAST_INTROSPECT_INCLUDE_RAW_ARGS_SCHEMA ?? "false").toLowerCase() === "true";
+function rawArgsDebug(schema) {
+    if (!ARCHLAST_INTROSPECT_INCLUDE_RAW_ARGS_SCHEMA)
+        return null;
+    if (!schema || typeof schema !== "object")
+        return null;
+    const rootAny = schema;
+    const rootTypeName = rootAny?._def?.typeName ?? "unknown";
+    const shapeValue = rootTypeName === "ZodObject"
+        ? typeof rootAny.shape === "function"
+            ? rootAny.shape()
+            : rootAny.shape
+        : null;
+    const fields = {};
+    if (shapeValue && typeof shapeValue === "object") {
+        for (const [key, rawFieldSchema] of Object.entries(shapeValue)) {
+            const anyZod = rawFieldSchema;
+            const wrappers = [];
+            let cur = anyZod;
+            while (cur && typeof cur === "object") {
+                const tn = cur?._def?.typeName;
+                if (tn === "ZodOptional" ||
+                    tn === "ZodDefault" ||
+                    tn === "ZodNullable" ||
+                    tn === "ZodEffects") {
+                    wrappers.push(tn);
+                    cur = tn === "ZodEffects" ? cur?._def?.schema : cur?._def?.innerType;
+                    continue;
+                }
+                break;
+            }
+            fields[key] = {
+                typeName: String(cur?._def?.typeName ?? "unknown"),
+                wrappers,
+            };
+        }
+    }
+    return { rootTypeName, fields };
+}
+//# sourceMappingURL=introspection-helpers.js.map

package/dist/utils/introspection-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"introspection-helpers.js","sourceRoot":"","sources":["../../src/utils/introspection-helpers.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAQH,sEAoFC;AAyCD,oCA0FC;AAKD,oCAwCC;AA1QD;;;;;GAKG;AACI,KAAK,UAAU,6BAA6B,CAAC,MAGnD;IACG,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEjC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAAE,OAAO,IAAI,CAAC;QAExD,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,OAAO,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAE/B,2FAA2F;QAC3F,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,IAAI,MAAM,CACzB,8BAA8B,aAAa,8CAA8C,EACzF,GAAG,CACN,CAAC;QAEF,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,OAAO,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtF,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpC,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAChE,IAAI,eAAe,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC;QAEpE,qBAAqB;QACrB,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,MAAM,WAAW,GAAG,cAAc,GAAG,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACrF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC1D,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;QAE5D,mDAAmD;QACnD,wEAAwE;QACxE,MAAM,MAAM,GAA6D,EAAE,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAC9B,6DAA6D,CAChE,EAAE,CAAC;YACA,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEhC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEzE,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrC,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC5B,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;wBAC7B,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;4BAC3B,CAAC,CAAC,OAAO;4BACT,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;gCAC5B,CAAC,CAAC,QAAQ;gCACV,CAAC,CAAC,SAAS,CAAC;YAExB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,cAAsB;IAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAA2B,IAAI,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEnB,IAAI,QAAQ,EAAE,CAAC;YACX,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO,GAAG,KAAK,CAAC;gBAChB,SAAS;YACb,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBACd,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACb,CAAC;YACD,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAClB,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS;YACb,CAAC;YACD,SAAS;QACb,CAAC;QAED,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACzC,QAAQ,GAAG,EAAE,CAAC;YACd,SAAS;QACb,CAAC;QAED,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAClB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAgB,YAAY,CAAC,MAAe;IAGxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEvD,MAAM,MAAM,GAAG,CAAC,CAAU,EAA8D,EAAE;QACtF,IAAI,OAAO,GAAY,CAAC,CAAC;QACzB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,OAAO,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,OAAc,CAAC;YAC9B,MAAM,QAAQ,GAAuB,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;YAE5D,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7B,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC;gBAClC,SAAS;YACb,CAAC;YACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC;gBAClC,SAAS;YACb,CAAC;YACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC7B,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC;gBAClC,SAAS;YACb,CAAC;YACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC5B,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;gBAC/B,SAAS;YACb,CAAC;YACD,MAAM;QACV,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAU,EAAE;QACrC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,MAAM,MAAM,GAAG,CAAQ,CAAC;QACxB,MAAM,QAAQ,GAAuB,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,SAAS,CAAC;QAEzE,OAAO,QAAQ,KAAK,WAAW;YAC3B,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,QAAQ,KAAK,WAAW;gBACxB,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,QAAQ,KAAK,YAAY;oBACzB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,QAAQ,KAAK,UAAU;wBACvB,CAAC,CAAC,OAAO;wBACT,CAAC,CAAC,QAAQ,KAAK,WAAW;4BACxB,CAAC,CAAC,QAAQ;4BACV,CAAC,CAAC,QAAQ,KAAK,WAAW;gCACxB,CAAC,CAAC,QAAQ;gCACV,CAAC,CAAC,QAAQ,KAAK,SAAS;oCACtB,CAAC,CAAC,MAAM;oCACR,CAAC,CAAC,QAAQ,KAAK,UAAU;wCACvB,CAAC,CAAC,OAAO;wCACT,CAAC,CAAC,QAAQ,KAAK,YAAY;4CACzB,CAAC,CAAC,SAAS;4CACX,CAAC,CAAC,QAAQ,KAAK,SAAS;gDACtB,CAAC,CAAC,MAAM;gDACR,CAAC,CAAC,SAAS,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,MAAa,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAEjE,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzF,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE/D,MAAM,MAAM,GAA6D,EAAE,CAAC;IAC5E,KAAK,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC,EAAE,CAAC;QACxF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC/B,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,2CAA2C,GAC7C,CAAC,OAAO,CAAC,GAAG,CAAC,2CAA2C,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AAElG,SAAgB,YAAY,CAAC,MAAe;IACxC,IAAI,CAAC,2CAA2C;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,OAAO,GAAG,MAAa,CAAC;IAC9B,MAAM,YAAY,GAAW,OAAO,EAAE,IAAI,EAAE,QAAQ,IAAI,SAAS,CAAC;IAClE,MAAM,UAAU,GACZ,YAAY,KAAK,WAAW;QACxB,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU;YACjC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE;YACjB,CAAC,CAAC,OAAO,CAAC,KAAK;QACnB,CAAC,CAAC,IAAI,CAAC;IAEf,MAAM,MAAM,GAA6D,EAAE,CAAC;IAC5E,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC,EAAE,CAAC;YACxF,MAAM,MAAM,GAAG,cAAqB,CAAC;YACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,GAAG,GAAQ,MAAM,CAAC;YACtB,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,EAAE,GAAuB,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC;gBACnD,IACI,EAAE,KAAK,aAAa;oBACpB,EAAE,KAAK,YAAY;oBACnB,EAAE,KAAK,aAAa;oBACpB,EAAE,KAAK,YAAY,EACrB,CAAC;oBACC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAClB,GAAG,GAAG,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;oBACrE,SAAS;gBACb,CAAC;gBACD,MAAM;YACV,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG;gBACV,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,IAAI,SAAS,CAAC;gBAClD,QAAQ;aACX,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/webhook/definition.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Webhook Definition System
+ * Specialized HTTP routes with security verification
+ */
+import type { HttpMethod } from "../http/definition.js";
+import type { AuthContext } from "../auth/interfaces.js";
+import type { ServerContext } from "../context.js";
+import type { DIResolver } from "../di/resolver.js";
+import type { LogService } from "../logging/logger.js";
+import type { IDatabaseClient } from "../db/interfaces.js";
+import type { IQueryable } from "../repository/interfaces.js";
+import type { Storage } from "../storage/types.js";
+import type { JobQueue } from "../jobs/queue.js";
+import type { SchedulerClient } from "../jobs/scheduler-client.js";
+import type { z } from "zod";
+/**
+ * Webhook context - similar to QueryCtx/MutationCtx but specialized for webhooks
+ */
+export interface WebhookContext<DataModel extends Record<string, any> = any> extends DIResolver {
+    /** Authentication context */
+    auth: AuthContext;
+    /** Database client (read/write) */
+    db: IDatabaseClient<DataModel>;
+    /** LINQ-style repository */
+    repository: {
+        [K in keyof DataModel]: IQueryable<DataModel[K]>;
+    };
+    /** Logger service */
+    logger: LogService;
+    /** File storage */
+    storage: Storage;
+    /** Job scheduler */
+    scheduler: SchedulerClient;
+    /** Job queue */
+    jobQueue: JobQueue;
+    /** Server context for advanced usage */
+    server: ServerContext;
+    /** Raw request object */
+    req: Request;
+}
+export interface WebhookGuard {
+    /** Guard name for debugging */
+    name: string;
+    /** Verify the request - returns true if valid, false or throws if invalid */
+    verify(req: Request, rawBody: string): Promise<boolean> | boolean;
+}
+export type WebhookHandler<Event = any, Return = any> = (ctx: WebhookContext<any>, event: Event) => Promise<Return> | Return;
+export interface WebhookConfig<Event = any, Return = any> {
+    /** Route path for the webhook */
+    path: string;
+    /** HTTP method (defaults to POST) */
+    method?: HttpMethod;
+    /** Security guards to verify the webhook */
+    guards?: WebhookGuard[];
+    /** Event schema for validation (optional) */
+    eventSchema?: z.ZodType<Event>;
+    /** Request handler */
+    handler: WebhookHandler<Event, Return>;
+    /** Authentication mode (defaults to public for webhooks) */
+    auth?: "required" | "optional" | "public";
+}
+export interface WebhookDefinition<Event = any, Return = any> {
+    type: "webhook";
+    path: string;
+    method: HttpMethod;
+    guards: WebhookGuard[];
+    eventSchema?: z.ZodType<Event>;
+    handler: WebhookHandler<Event, Return>;
+    auth: "required" | "optional" | "public";
+}
+/**
+ * Create a webhook definition with typed event and return
+ */
+export declare function webhook<Event = any, Return = any>(config: WebhookConfig<Event, Return>): WebhookDefinition<Event, Return>;
+/**
+ * Type guard for webhook definitions
+ */
+export declare function isWebhookDefinition(value: any): value is WebhookDefinition;
+//# sourceMappingURL=definition.d.ts.map

package/dist/webhook/definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition.d.ts","sourceRoot":"","sources":["../../src/webhook/definition.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,cAAc,CAAC,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,CAAE,SAAQ,UAAU;IAC3F,6BAA6B;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,mCAAmC;IACnC,EAAE,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/B,4BAA4B;IAC5B,UAAU,EAAE;SAAG,CAAC,IAAI,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;KAAE,CAAC;IACjE,qBAAqB;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,mBAAmB;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB;IACpB,SAAS,EAAE,eAAe,CAAC;IAC3B,gBAAgB;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,wCAAwC;IACxC,MAAM,EAAE,aAAa,CAAC;IACtB,yBAAyB;IACzB,GAAG,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IACzB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACrE;AAED,MAAM,MAAM,cAAc,CAAC,KAAK,GAAG,GAAG,EAAE,MAAM,GAAG,GAAG,IAAI,CACpD,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EACxB,KAAK,EAAE,KAAK,KACX,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AAE9B,MAAM,WAAW,aAAa,CAAC,KAAK,GAAG,GAAG,EAAE,MAAM,GAAG,GAAG;IACpD,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,sBAAsB;IACtB,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,4DAA4D;IAC5D,IAAI,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;CAC7C;AAED,MAAM,WAAW,iBAAiB,CAAC,KAAK,GAAG,GAAG,EAAE,MAAM,GAAG,GAAG;IACxD,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,EAAE,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;CAC5C;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,GAAG,GAAG,EAAE,MAAM,GAAG,GAAG,EAC7C,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,GACrC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAUlC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,GAAG,GAAG,KAAK,IAAI,iBAAiB,CAQ1E"}

package/dist/webhook/definition.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * Webhook Definition System
+ * Specialized HTTP routes with security verification
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webhook = webhook;
+exports.isWebhookDefinition = isWebhookDefinition;
+/**
+ * Create a webhook definition with typed event and return
+ */
+function webhook(config) {
+    return {
+        type: "webhook",
+        path: config.path,
+        method: config.method ?? "POST",
+        guards: config.guards ?? [],
+        eventSchema: config.eventSchema,
+        handler: config.handler,
+        auth: config.auth ?? "public", // Webhooks are typically public with guard verification
+    };
+}
+/**
+ * Type guard for webhook definitions
+ */
+function isWebhookDefinition(value) {
+    return (value &&
+        typeof value === "object" &&
+        value.type === "webhook" &&
+        typeof value.path === "string" &&
+        typeof value.handler === "function");
+}
+//# sourceMappingURL=definition.js.map

package/dist/webhook/definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition.js","sourceRoot":"","sources":["../../src/webhook/definition.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA8EH,0BAYC;AAKD,kDAQC;AA5BD;;GAEG;AACH,SAAgB,OAAO,CACnB,MAAoC;IAEpC,OAAO;QACH,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,wDAAwD;KAC1F,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,KAAU;IAC1C,OAAO,CACH,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,CACtC,CAAC;AACN,CAAC"}

package/dist/webhook/guard.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Webhook Guards
+ * Pre-built security guards for common webhook providers
+ */
+import type { WebhookGuard as WebhookGuardType } from "./definition.js";
+export type WebhookGuard = WebhookGuardType;
+/**
+ * Create a custom webhook guard
+ */
+export declare function createWebhookGuard(name: string, verifyFn: (req: Request, rawBody: string) => Promise<boolean> | boolean): WebhookGuardType;
+/**
+ * HMAC Guard - Generic HMAC signature verification
+ */
+export declare function createHmacGuard(options: {
+    name?: string;
+    secret: string;
+    signatureHeader: string;
+    algorithm?: string;
+    encoding?: "hex" | "base64";
+}): WebhookGuardType;
+/**
+ * IP Whitelist Guard
+ */
+export declare function createIpWhitelistGuard(options: {
+    allowedIps: string[];
+    ipHeader?: string;
+}): WebhookGuardType;
+/**
+ * Bearer Token Guard
+ */
+export declare function createBearerTokenGuard(options: {
+    token: string;
+}): WebhookGuardType;
+//# sourceMappingURL=guard.d.ts.map

package/dist/webhook/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/webhook/guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAG5C;;GAEG;AACH,wBAAgB,kBAAkB,CAC9B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,GACxE,gBAAgB,CAKlB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC/B,GAAG,gBAAgB,CAwBnB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAC5C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,gBAAgB,CAwBnB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,gBAAgB,CAqBnF"}

package/dist/webhook/guard.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * Webhook Guards
+ * Pre-built security guards for common webhook providers
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookGuard = createWebhookGuard;
+exports.createHmacGuard = createHmacGuard;
+exports.createIpWhitelistGuard = createIpWhitelistGuard;
+exports.createBearerTokenGuard = createBearerTokenGuard;
+const verifier_js_1 = require("./verifier.js");
+/**
+ * Create a custom webhook guard
+ */
+function createWebhookGuard(name, verifyFn) {
+    return {
+        name,
+        verify: verifyFn,
+    };
+}
+/**
+ * HMAC Guard - Generic HMAC signature verification
+ */
+function createHmacGuard(options) {
+    return {
+        name: options.name ?? "HmacGuard",
+        async verify(req, rawBody) {
+            const signature = req.headers.get(options.signatureHeader);
+            if (!signature) {
+                throw new Error(`Missing ${options.signatureHeader} header`);
+            }
+            const result = (0, verifier_js_1.verifyHmacSignature)(rawBody, signature, options.secret, options.algorithm, options.encoding);
+            if (!result.valid) {
+                throw new Error(result.error ?? "Invalid signature");
+            }
+            return true;
+        },
+    };
+}
+/**
+ * IP Whitelist Guard
+ */
+function createIpWhitelistGuard(options) {
+    return {
+        name: "IpWhitelistGuard",
+        verify(req) {
+            // Get IP from header or connection
+            const ipHeader = options.ipHeader ?? "x-forwarded-for";
+            let ip = req.headers.get(ipHeader);
+            if (ip) {
+                // X-Forwarded-For can contain multiple IPs, take the first
+                ip = ip.split(",")[0].trim();
+            }
+            if (!ip) {
+                throw new Error("Could not determine client IP");
+            }
+            if (!options.allowedIps.includes(ip)) {
+                throw new Error(`IP ${ip} not in whitelist`);
+            }
+            return true;
+        },
+    };
+}
+/**
+ * Bearer Token Guard
+ */
+function createBearerTokenGuard(options) {
+    return {
+        name: "BearerTokenGuard",
+        verify(req) {
+            const auth = req.headers.get("authorization");
+            if (!auth) {
+                throw new Error("Missing Authorization header");
+            }
+            if (!auth.startsWith("Bearer ")) {
+                throw new Error("Invalid Authorization header format");
+            }
+            const token = auth.substring(7);
+            if (token !== options.token) {
+                throw new Error("Invalid bearer token");
+            }
+            return true;
+        },
+    };
+}
+//# sourceMappingURL=guard.js.map

package/dist/webhook/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/webhook/guard.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AASH,gDAQC;AAKD,0CA8BC;AAKD,wDA2BC;AAKD,wDAqBC;AA1GD,+CAAkG;AAElG;;GAEG;AACH,SAAgB,kBAAkB,CAC9B,IAAY,EACZ,QAAuE;IAEvE,OAAO;QACH,IAAI;QACJ,MAAM,EAAE,QAAQ;KACnB,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,OAM/B;IACG,OAAO;QACH,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW;QACjC,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,OAAe;YACtC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,CAAC,eAAe,SAAS,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,MAAM,GAAG,IAAA,iCAAmB,EAC9B,OAAO,EACP,SAAS,EACT,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,QAAQ,CACnB,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,OAGtC;IACG,OAAO;QACH,IAAI,EAAE,kBAAkB;QACxB,MAAM,CAAC,GAAY;YACf,mCAAmC;YACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;YACvD,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEnC,IAAI,EAAE,EAAE,CAAC;gBACL,2DAA2D;gBAC3D,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjC,CAAC;YAED,IAAI,CAAC,EAAE,EAAE,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACjD,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;AACN,CAAC;AAED;;GAEG;AACH,SAAgB,sBAAsB,CAAC,OAA0B;IAC7D,OAAO;QACH,IAAI,EAAE,kBAAkB;QACxB,MAAM,CAAC,GAAY;YACf,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5C,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/webhook/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Webhook Module
+ */
+export { webhook, isWebhookDefinition, type WebhookDefinition, type WebhookGuard, type WebhookHandler, } from "../functions/definition.js";
+export type { WebhookCtx as WebhookContext } from "../functions/types.js";
+export { verifyHmacSignature, verifyStripeSignature, verifyGitHubSignature } from "./verifier.js";
+export type { VerificationResult } from "./verifier.js";
+export { createWebhookGuard, createHmacGuard, createIpWhitelistGuard, createBearerTokenGuard, } from "./guard.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/webhook/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/webhook/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACH,OAAO,EACP,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,cAAc,GACtB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE1E,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAClG,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EACH,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,sBAAsB,GACzB,MAAM,YAAY,CAAC"}

package/dist/webhook/index.js

@@ -0,0 +1,19 @@
+"use strict";
+/**
+ * Webhook Module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createBearerTokenGuard = exports.createIpWhitelistGuard = exports.createHmacGuard = exports.createWebhookGuard = exports.verifyGitHubSignature = exports.verifyStripeSignature = exports.verifyHmacSignature = exports.isWebhookDefinition = exports.webhook = void 0;
+var definition_js_1 = require("../functions/definition.js");
+Object.defineProperty(exports, "webhook", { enumerable: true, get: function () { return definition_js_1.webhook; } });
+Object.defineProperty(exports, "isWebhookDefinition", { enumerable: true, get: function () { return definition_js_1.isWebhookDefinition; } });
+var verifier_js_1 = require("./verifier.js");
+Object.defineProperty(exports, "verifyHmacSignature", { enumerable: true, get: function () { return verifier_js_1.verifyHmacSignature; } });
+Object.defineProperty(exports, "verifyStripeSignature", { enumerable: true, get: function () { return verifier_js_1.verifyStripeSignature; } });
+Object.defineProperty(exports, "verifyGitHubSignature", { enumerable: true, get: function () { return verifier_js_1.verifyGitHubSignature; } });
+var guard_js_1 = require("./guard.js");
+Object.defineProperty(exports, "createWebhookGuard", { enumerable: true, get: function () { return guard_js_1.createWebhookGuard; } });
+Object.defineProperty(exports, "createHmacGuard", { enumerable: true, get: function () { return guard_js_1.createHmacGuard; } });
+Object.defineProperty(exports, "createIpWhitelistGuard", { enumerable: true, get: function () { return guard_js_1.createIpWhitelistGuard; } });
+Object.defineProperty(exports, "createBearerTokenGuard", { enumerable: true, get: function () { return guard_js_1.createBearerTokenGuard; } });
+//# sourceMappingURL=index.js.map