@contractspec/example.openbanking-powens 1.44.0 → 1.45.0

package/.turbo/turbo-build$colon$bundle.log

@@ -6,34 +6,34 @@ $ tsdown
 ℹ tsconfig: tsconfig.json
 ℹ Build start
 ℹ Cleaning 21 files
-ℹ dist/handlers/webhook-handler.js              3.33 kB │ gzip: 1.23 kB
+ℹ dist/handlers/webhook-handler.js              3.32 kB │ gzip: 1.23 kB
 ℹ dist/handlers/oauth-callback.js               2.42 kB │ gzip: 1.02 kB
 ℹ dist/docs/openbanking-powens.docblock.js      1.57 kB │ gzip: 0.76 kB
-ℹ dist/example.js                               0.88 kB │ gzip: 0.47 kB
+ℹ dist/example.js                               0.99 kB │ gzip: 0.52 kB
 ℹ dist/index.js                                 0.30 kB │ gzip: 0.16 kB
 ℹ dist/docs/index.js                            0.04 kB │ gzip: 0.06 kB
 ℹ dist/handlers/webhook-handler.js.map          6.46 kB │ gzip: 2.18 kB
 ℹ dist/handlers/oauth-callback.js.map           4.84 kB │ gzip: 1.81 kB
 ℹ dist/docs/openbanking-powens.docblock.js.map  2.07 kB │ gzip: 0.94 kB
-ℹ dist/example.js.map                           1.25 kB │ gzip: 0.64 kB
+ℹ dist/example.js.map                           1.52 kB │ gzip: 0.74 kB
 ℹ dist/handlers/webhook-handler.d.ts.map        0.17 kB │ gzip: 0.14 kB
 ℹ dist/handlers/oauth-callback.d.ts.map         0.17 kB │ gzip: 0.15 kB
-ℹ dist/example.d.ts.map                         0.14 kB │ gzip: 0.13 kB
-ℹ dist/example.d.ts                             1.12 kB │ gzip: 0.47 kB
+ℹ dist/example.d.ts.map                         0.12 kB │ gzip: 0.12 kB
 ℹ dist/index.d.ts                               0.25 kB │ gzip: 0.13 kB
 ℹ dist/handlers/oauth-callback.d.ts             0.22 kB │ gzip: 0.17 kB
 ℹ dist/handlers/webhook-handler.d.ts            0.21 kB │ gzip: 0.16 kB
+ℹ dist/example.d.ts                             0.20 kB │ gzip: 0.16 kB
 ℹ dist/docs/index.d.ts                          0.01 kB │ gzip: 0.03 kB
 ℹ dist/docs/openbanking-powens.docblock.d.ts    0.01 kB │ gzip: 0.03 kB
-ℹ 19 files, total: 25.46 kB
-src/handlers/webhook-handler.ts (7:44) [UNRESOLVED_IMPORT] Warning: Could not resolve 'node:crypto' in src/handlers/webhook-handler.ts
+ℹ 19 files, total: 24.90 kB
+src/handlers/webhook-handler.ts (7:44) [UNRESOLVED_IMPORT] Warning: Could not resolve 'crypto' in src/handlers/webhook-handler.ts
    ╭─[ src/handlers/webhook-handler.ts:7:45 ]
    │
- 7 │ import { createHmac, timingSafeEqual } from 'node:crypto';
-   │                                             ──────┬──────  
-   │                                                   ╰──────── Module not found, treating it as an external dependency
+ 7 │ import { createHmac, timingSafeEqual } from 'crypto';
+   │                                             ────┬───  
+   │                                                 ╰───── Module not found, treating it as an external dependency
    │ 
    │ Help: The "main" field here was ignored. Main fields must be configured explicitly when using the "neutral" platform.
 ───╯
 
-✔ Build complete in 8760ms
+✔ Build complete in 18963ms

package/.turbo/turbo-build.log

@@ -7,34 +7,34 @@ $ tsdown
 ℹ target: esnext
 ℹ tsconfig: tsconfig.json
 ℹ Build start
-ℹ dist/handlers/webhook-handler.js              3.33 kB │ gzip: 1.23 kB
+ℹ dist/handlers/webhook-handler.js              3.32 kB │ gzip: 1.23 kB
 ℹ dist/handlers/oauth-callback.js               2.42 kB │ gzip: 1.02 kB
 ℹ dist/docs/openbanking-powens.docblock.js      1.57 kB │ gzip: 0.76 kB
-src/handlers/webhook-handler.ts (7:44) [UNRESOLVED_IMPORT] Warning: Could not resolve 'node:crypto' in src/handlers/webhook-handler.ts
-   ╭─[ src/handlers/webhook-handler.ts:7:45 ]
-   │
-ℹ dist/example.js                               0.88 kB │ gzip: 0.47 kB
- 7 │ import { createHmac, timingSafeEqual } from 'node:crypto';
+ℹ dist/example.js                               0.99 kB │ gzip: 0.52 kB
 ℹ dist/index.js                                 0.30 kB │ gzip: 0.16 kB
 ℹ dist/docs/index.js                            0.04 kB │ gzip: 0.06 kB
 ℹ dist/handlers/webhook-handler.js.map          6.46 kB │ gzip: 2.18 kB
 ℹ dist/handlers/oauth-callback.js.map           4.84 kB │ gzip: 1.81 kB
-   │                                             ──────┬──────  
 ℹ dist/docs/openbanking-powens.docblock.js.map  2.07 kB │ gzip: 0.94 kB
-   │                                                   ╰──────── Module not found, treating it as an external dependency
-   │ 
-ℹ dist/example.js.map                           1.25 kB │ gzip: 0.64 kB
+ℹ dist/example.js.map                           1.52 kB │ gzip: 0.74 kB
 ℹ dist/handlers/webhook-handler.d.ts.map        0.17 kB │ gzip: 0.14 kB
 ℹ dist/handlers/oauth-callback.d.ts.map         0.17 kB │ gzip: 0.15 kB
-   │ Help: The "main" field here was ignored. Main fields must be configured explicitly when using the "neutral" platform.
-ℹ dist/example.d.ts.map                         0.14 kB │ gzip: 0.13 kB
-ℹ dist/example.d.ts                             1.12 kB │ gzip: 0.47 kB
+ℹ dist/example.d.ts.map                         0.12 kB │ gzip: 0.12 kB
 ℹ dist/index.d.ts                               0.25 kB │ gzip: 0.13 kB
-───╯
-
 ℹ dist/handlers/oauth-callback.d.ts             0.22 kB │ gzip: 0.17 kB
 ℹ dist/handlers/webhook-handler.d.ts            0.21 kB │ gzip: 0.16 kB
+ℹ dist/example.d.ts                             0.20 kB │ gzip: 0.16 kB
 ℹ dist/docs/index.d.ts                          0.01 kB │ gzip: 0.03 kB
 ℹ dist/docs/openbanking-powens.docblock.d.ts    0.01 kB │ gzip: 0.03 kB
-ℹ 19 files, total: 25.46 kB
-✔ Build complete in 9385ms
+ℹ 19 files, total: 24.90 kB
+src/handlers/webhook-handler.ts (7:44) [UNRESOLVED_IMPORT] Warning: Could not resolve 'crypto' in src/handlers/webhook-handler.ts
+   ╭─[ src/handlers/webhook-handler.ts:7:45 ]
+   │
+ 7 │ import { createHmac, timingSafeEqual } from 'crypto';
+   │                                             ────┬───  
+   │                                                 ╰───── Module not found, treating it as an external dependency
+   │ 
+   │ Help: The "main" field here was ignored. Main fields must be configured explicitly when using the "neutral" platform.
+───╯
+
+✔ Build complete in 9469ms

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # @contractspec/example.openbanking-powens
 
+## 1.45.0
+
+### Minor Changes
+
+- e73ca1d: feat: improve app config and examples contracts
+  feat: Contract layers support (features, examples, app-configs)
+
+  ### New CLI Commands
+  - `contractspec list layers` - List all contract layers with filtering
+
+  ### Enhanced Commands
+  - `contractspec ci` - New `layers` check category validates features/examples/config
+  - `contractspec doctor` - New `layers` health checks
+  - `contractspec integrity` - Now shows layer statistics
+
+  ### New APIs
+  - `discoverLayers()` - Scan workspace for all layer files
+  - `scanExampleSource()` - Parse ExampleSpec from source code
+  - `isExampleFile()` - Check if file is an example spec
+
+### Patch Changes
+
+- Updated dependencies [e73ca1d]
+  - @contractspec/integration.providers-impls@1.45.0
+  - @contractspec/lib.contracts@1.45.0
+  - @contractspec/lib.schema@1.45.0
+
+## 1.44.1
+
+### Patch Changes
+
+- 3c594fb: fix
+- Updated dependencies [3c594fb]
+  - @contractspec/integration.providers-impls@1.44.1
+  - @contractspec/lib.contracts@1.44.1
+  - @contractspec/lib.schema@1.44.1
+
 ## 1.44.0
 
 ### Minor Changes

package/dist/example.d.ts

@@ -1,34 +1,7 @@
+import { ExampleSpec } from "@contractspec/lib.contracts";
+
 //#region src/example.d.ts
-declare const example: {
-  readonly id: "openbanking-powens";
-  readonly title: "Open Banking — Powens";
-  readonly summary: "OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).";
-  readonly tags: readonly ["openbanking", "powens", "oauth", "webhooks", "integrations"];
-  readonly kind: "integration";
-  readonly visibility: "public";
-  readonly docs: {
-    readonly rootDocId: "docs.examples.openbanking-powens";
-    readonly usageDocId: "docs.examples.openbanking-powens.usage";
-  };
-  readonly entrypoints: {
-    readonly packageName: "@contractspec/example.openbanking-powens";
-    readonly docs: "./docs";
-  };
-  readonly surfaces: {
-    readonly templates: true;
-    readonly sandbox: {
-      readonly enabled: true;
-      readonly modes: readonly ["markdown", "specs"];
-    };
-    readonly studio: {
-      readonly enabled: true;
-      readonly installable: true;
-    };
-    readonly mcp: {
-      readonly enabled: true;
-    };
-  };
-};
+declare const example: ExampleSpec;
 //#endregion
 export { example as default };
 //# sourceMappingURL=example.d.ts.map

package/dist/example.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"example.d.ts","names":[],"sources":["../src/example.ts"],"sourcesContent":[],"mappings":";cAAM;EAAA,SAAA,EAsBI,EAAA,oBAAA"}
+{"version":3,"file":"example.d.ts","names":[],"sources":["../src/example.ts"],"sourcesContent":[],"mappings":";;;cAEM,SAAS"}

package/dist/example.js

@@ -1,17 +1,22 @@
 //#region src/example.ts
 const example = {
-	id: "openbanking-powens",
-	title: "Open Banking — Powens",
-	summary: "OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).",
-	tags: [
-		"openbanking",
-		"powens",
-		"oauth",
-		"webhooks",
-		"integrations"
-	],
-	kind: "integration",
-	visibility: "public",
+	meta: {
+		key: "openbanking-powens",
+		version: "1.0.0",
+		title: "Open Banking — Powens",
+		description: "OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).",
+		kind: "integration",
+		visibility: "public",
+		stability: "experimental",
+		owners: ["@platform.core"],
+		tags: [
+			"openbanking",
+			"powens",
+			"oauth",
+			"webhooks",
+			"integrations"
+		]
+	},
 	docs: {
 		rootDocId: "docs.examples.openbanking-powens",
 		usageDocId: "docs.examples.openbanking-powens.usage"

package/dist/example.js.map

@@ -1 +1 @@
-{"version":3,"file":"example.js","names":[],"sources":["../src/example.ts"],"sourcesContent":["const example = {\n  id: 'openbanking-powens',\n  title: 'Open Banking — Powens',\n  summary:\n    'OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).',\n  tags: ['openbanking', 'powens', 'oauth', 'webhooks', 'integrations'],\n  kind: 'integration',\n  visibility: 'public',\n  docs: {\n    rootDocId: 'docs.examples.openbanking-powens',\n    usageDocId: 'docs.examples.openbanking-powens.usage',\n  },\n  entrypoints: {\n    packageName: '@contractspec/example.openbanking-powens',\n    docs: './docs',\n  },\n  surfaces: {\n    templates: true,\n    sandbox: { enabled: true, modes: ['markdown', 'specs'] },\n    studio: { enabled: true, installable: true },\n    mcp: { enabled: true },\n  },\n} as const;\n\nexport default example;\n"],"mappings":";AAAA,MAAM,UAAU;CACd,IAAI;CACJ,OAAO;CACP,SACE;CACF,MAAM;EAAC;EAAe;EAAU;EAAS;EAAY;EAAe;CACpE,MAAM;CACN,YAAY;CACZ,MAAM;EACJ,WAAW;EACX,YAAY;EACb;CACD,aAAa;EACX,aAAa;EACb,MAAM;EACP;CACD,UAAU;EACR,WAAW;EACX,SAAS;GAAE,SAAS;GAAM,OAAO,CAAC,YAAY,QAAQ;GAAE;EACxD,QAAQ;GAAE,SAAS;GAAM,aAAa;GAAM;EAC5C,KAAK,EAAE,SAAS,MAAM;EACvB;CACF;AAED,sBAAe"}
+{"version":3,"file":"example.js","names":["example: ExampleSpec"],"sources":["../src/example.ts"],"sourcesContent":["import type { ExampleSpec } from '@contractspec/lib.contracts';\n\nconst example: ExampleSpec = {\n  meta: {\n    key: 'openbanking-powens',\n    version: '1.0.0',\n    title: 'Open Banking — Powens',\n    description:\n      'OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).',\n    kind: 'integration',\n    visibility: 'public',\n    stability: 'experimental',\n    owners: ['@platform.core'],\n    tags: ['openbanking', 'powens', 'oauth', 'webhooks', 'integrations'],\n  },\n  docs: {\n    rootDocId: 'docs.examples.openbanking-powens',\n    usageDocId: 'docs.examples.openbanking-powens.usage',\n  },\n  entrypoints: {\n    packageName: '@contractspec/example.openbanking-powens',\n    docs: './docs',\n  },\n  surfaces: {\n    templates: true,\n    sandbox: { enabled: true, modes: ['markdown', 'specs'] },\n    studio: { enabled: true, installable: true },\n    mcp: { enabled: true },\n  },\n};\n\nexport default example;\n"],"mappings":";AAEA,MAAMA,UAAuB;CAC3B,MAAM;EACJ,KAAK;EACL,SAAS;EACT,OAAO;EACP,aACE;EACF,MAAM;EACN,YAAY;EACZ,WAAW;EACX,QAAQ,CAAC,iBAAiB;EAC1B,MAAM;GAAC;GAAe;GAAU;GAAS;GAAY;GAAe;EACrE;CACD,MAAM;EACJ,WAAW;EACX,YAAY;EACb;CACD,aAAa;EACX,aAAa;EACb,MAAM;EACP;CACD,UAAU;EACR,WAAW;EACX,SAAS;GAAE,SAAS;GAAM,OAAO,CAAC,YAAY,QAAQ;GAAE;EACxD,QAAQ;GAAE,SAAS;GAAM,aAAa;GAAM;EAC5C,KAAK,EAAE,SAAS,MAAM;EACvB;CACF;AAED,sBAAe"}

package/dist/handlers/webhook-handler.js

@@ -1,5 +1,5 @@
 import { PowensOpenBankingProvider } from "@contractspec/integration.providers-impls/impls/powens-openbanking";
-import { createHmac, timingSafeEqual } from "node:crypto";
+import { createHmac, timingSafeEqual } from "crypto";
 
 //#region src/handlers/webhook-handler.ts
 /**

package/dist/handlers/webhook-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-handler.js","names":["fakeSecretStore: Record<string, ExamplePowensSecrets>"],"sources":["../../src/handlers/webhook-handler.ts"],"sourcesContent":["/**\n * Example Powens webhook handler (fetch-compatible).\n *\n * Verifies signature, then enqueues the canonical workflows to keep the ledger\n * in sync. Unknown events are ignored (or can be recorded by the app layer).\n */\nimport { createHmac, timingSafeEqual } from 'node:crypto';\nimport { PowensOpenBankingProvider } from '@contractspec/integration.providers-impls/impls/powens-openbanking';\nimport type { PowensEnvironment } from '@contractspec/integration.providers-impls/impls/powens-client';\n\nexport async function powensWebhookHandler(req: Request) {\n  const signature = req.headers.get('x-powens-signature');\n  const stateHeader = req.headers.get('x-powens-state');\n  const payload = await req.text();\n\n  if (!signature || !stateHeader) {\n    return new Response('Missing Powens signature headers', { status: 400 });\n  }\n\n  const connection = await getConnectionByState(stateHeader);\n  if (!connection) {\n    return new Response('Unknown Powens state header', { status: 404 });\n  }\n\n  const secrets = await getPowensSecretsForConnection(connection.meta.id);\n  if (!verifySignature(payload, signature, secrets.webhookSecret)) {\n    return new Response('Invalid Powens webhook signature', { status: 401 });\n  }\n\n  const event = JSON.parse(payload) as PowensWebhookEvent;\n  const provider = new PowensOpenBankingProvider({\n    clientId: secrets.clientId,\n    clientSecret: secrets.clientSecret,\n    apiKey: secrets.apiKey,\n    environment: connection.config.environment as PowensEnvironment,\n    baseUrl: connection.config.baseUrl as string | undefined,\n  });\n\n  switch (event.type) {\n    case 'connection.updated':\n    case 'user.sync.completed': {\n      await enqueueWorkflow('pfo.workflow.sync-openbanking-accounts', {\n        tenantId: connection.meta.tenantId,\n        connectionId: connection.meta.id,\n        userUuid: event.user_uuid,\n      });\n      break;\n    }\n    case 'transactions.created':\n    case 'transactions.updated': {\n      await enqueueWorkflow('pfo.workflow.sync-openbanking-transactions', {\n        tenantId: connection.meta.tenantId,\n        connectionId: connection.meta.id,\n        userUuid: event.user_uuid,\n        accountId: event.account_uuid,\n      });\n      break;\n    }\n    default:\n      await logUnmappedEvent(event);\n  }\n\n  if (event.account_uuid) {\n    await provider.getBalances({\n      tenantId: connection.meta.tenantId,\n      connectionId: connection.meta.id,\n      accountId: event.account_uuid,\n    });\n  }\n\n  return new Response('OK', { status: 200 });\n}\n\ninterface PowensWebhookEvent {\n  type: string;\n  user_uuid: string;\n  connection_uuid: string;\n  account_uuid?: string;\n}\n\ninterface ExamplePowensSecrets {\n  clientId: string;\n  clientSecret: string;\n  apiKey?: string;\n  webhookSecret: string;\n}\n\ninterface ExampleIntegrationConnection {\n  meta: {\n    id: string;\n    tenantId: string;\n  };\n  config: {\n    environment: PowensEnvironment;\n    baseUrl?: string;\n  };\n}\n\nfunction verifySignature(payload: string, signature: string, secret: string) {\n  const digest = createHmac('sha256', secret).update(payload).digest('hex');\n  const a = Buffer.from(digest, 'hex');\n  const b = Buffer.from(signature, 'hex');\n  return a.length === b.length && timingSafeEqual(a, b);\n}\n\nasync function getConnectionByState(\n  state: string\n): Promise<ExampleIntegrationConnection | null> {\n  return fakeDatabase.connections.find((conn) => conn.state === state) ?? null;\n}\n\nasync function getPowensSecretsForConnection(\n  connectionId: string\n): Promise<ExamplePowensSecrets> {\n  const secret = fakeSecretStore[connectionId];\n  if (!secret) throw new Error(`Missing Powens secrets for ${connectionId}`);\n  return secret;\n}\n\nasync function enqueueWorkflow(name: string, input: Record<string, unknown>) {\n  await fakeWorkflowQueue.enqueue({ name, input });\n}\n\nasync function logUnmappedEvent(_event: PowensWebhookEvent) {\n  await fakeTelemetryLogger.record({\n    event: 'openbanking.webhook.unmapped',\n    payload: 'redacted',\n  });\n}\n\nconst fakeDatabase = {\n  connections: [] as (ExampleIntegrationConnection & { state: string })[],\n};\n\nconst fakeSecretStore: Record<string, ExamplePowensSecrets> = {};\n\nconst fakeWorkflowQueue = {\n  enqueue: async (_payload: Record<string, unknown>) => {\n    /* no-op */\n  },\n};\n\nconst fakeTelemetryLogger = {\n  record: async (_payload: Record<string, unknown>) => {\n    /* no-op */\n  },\n};\n"],"mappings":";;;;;;;;;;AAUA,eAAsB,qBAAqB,KAAc;CACvD,MAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;CACvD,MAAM,cAAc,IAAI,QAAQ,IAAI,iBAAiB;CACrD,MAAM,UAAU,MAAM,IAAI,MAAM;AAEhC,KAAI,CAAC,aAAa,CAAC,YACjB,QAAO,IAAI,SAAS,oCAAoC,EAAE,QAAQ,KAAK,CAAC;CAG1E,MAAM,aAAa,MAAM,qBAAqB,YAAY;AAC1D,KAAI,CAAC,WACH,QAAO,IAAI,SAAS,+BAA+B,EAAE,QAAQ,KAAK,CAAC;CAGrE,MAAM,UAAU,MAAM,8BAA8B,WAAW,KAAK,GAAG;AACvE,KAAI,CAAC,gBAAgB,SAAS,WAAW,QAAQ,cAAc,CAC7D,QAAO,IAAI,SAAS,oCAAoC,EAAE,QAAQ,KAAK,CAAC;CAG1E,MAAM,QAAQ,KAAK,MAAM,QAAQ;CACjC,MAAM,WAAW,IAAI,0BAA0B;EAC7C,UAAU,QAAQ;EAClB,cAAc,QAAQ;EACtB,QAAQ,QAAQ;EAChB,aAAa,WAAW,OAAO;EAC/B,SAAS,WAAW,OAAO;EAC5B,CAAC;AAEF,SAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK;AACH,SAAM,gBAAgB,0CAA0C;IAC9D,UAAU,WAAW,KAAK;IAC1B,cAAc,WAAW,KAAK;IAC9B,UAAU,MAAM;IACjB,CAAC;AACF;EAEF,KAAK;EACL,KAAK;AACH,SAAM,gBAAgB,8CAA8C;IAClE,UAAU,WAAW,KAAK;IAC1B,cAAc,WAAW,KAAK;IAC9B,UAAU,MAAM;IAChB,WAAW,MAAM;IAClB,CAAC;AACF;EAEF,QACE,OAAM,iBAAiB,MAAM;;AAGjC,KAAI,MAAM,aACR,OAAM,SAAS,YAAY;EACzB,UAAU,WAAW,KAAK;EAC1B,cAAc,WAAW,KAAK;EAC9B,WAAW,MAAM;EAClB,CAAC;AAGJ,QAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;;AA4B5C,SAAS,gBAAgB,SAAiB,WAAmB,QAAgB;CAC3E,MAAM,SAAS,WAAW,UAAU,OAAO,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;CACzE,MAAM,IAAI,OAAO,KAAK,QAAQ,MAAM;CACpC,MAAM,IAAI,OAAO,KAAK,WAAW,MAAM;AACvC,QAAO,EAAE,WAAW,EAAE,UAAU,gBAAgB,GAAG,EAAE;;AAGvD,eAAe,qBACb,OAC8C;AAC9C,QAAO,aAAa,YAAY,MAAM,SAAS,KAAK,UAAU,MAAM,IAAI;;AAG1E,eAAe,8BACb,cAC+B;CAC/B,MAAM,SAAS,gBAAgB;AAC/B,KAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,8BAA8B,eAAe;AAC1E,QAAO;;AAGT,eAAe,gBAAgB,MAAc,OAAgC;AAC3E,OAAM,kBAAkB,QAAQ;EAAE;EAAM;EAAO,CAAC;;AAGlD,eAAe,iBAAiB,QAA4B;AAC1D,OAAM,oBAAoB,OAAO;EAC/B,OAAO;EACP,SAAS;EACV,CAAC;;AAGJ,MAAM,eAAe,EACnB,aAAa,EAAE,EAChB;AAED,MAAMA,kBAAwD,EAAE;AAEhE,MAAM,oBAAoB,EACxB,SAAS,OAAO,aAAsC,IAGvD;AAED,MAAM,sBAAsB,EAC1B,QAAQ,OAAO,aAAsC,IAGtD"}
+{"version":3,"file":"webhook-handler.js","names":["fakeSecretStore: Record<string, ExamplePowensSecrets>"],"sources":["../../src/handlers/webhook-handler.ts"],"sourcesContent":["/**\n * Example Powens webhook handler (fetch-compatible).\n *\n * Verifies signature, then enqueues the canonical workflows to keep the ledger\n * in sync. Unknown events are ignored (or can be recorded by the app layer).\n */\nimport { createHmac, timingSafeEqual } from 'crypto';\nimport { PowensOpenBankingProvider } from '@contractspec/integration.providers-impls/impls/powens-openbanking';\nimport type { PowensEnvironment } from '@contractspec/integration.providers-impls/impls/powens-client';\n\nexport async function powensWebhookHandler(req: Request) {\n  const signature = req.headers.get('x-powens-signature');\n  const stateHeader = req.headers.get('x-powens-state');\n  const payload = await req.text();\n\n  if (!signature || !stateHeader) {\n    return new Response('Missing Powens signature headers', { status: 400 });\n  }\n\n  const connection = await getConnectionByState(stateHeader);\n  if (!connection) {\n    return new Response('Unknown Powens state header', { status: 404 });\n  }\n\n  const secrets = await getPowensSecretsForConnection(connection.meta.id);\n  if (!verifySignature(payload, signature, secrets.webhookSecret)) {\n    return new Response('Invalid Powens webhook signature', { status: 401 });\n  }\n\n  const event = JSON.parse(payload) as PowensWebhookEvent;\n  const provider = new PowensOpenBankingProvider({\n    clientId: secrets.clientId,\n    clientSecret: secrets.clientSecret,\n    apiKey: secrets.apiKey,\n    environment: connection.config.environment as PowensEnvironment,\n    baseUrl: connection.config.baseUrl as string | undefined,\n  });\n\n  switch (event.type) {\n    case 'connection.updated':\n    case 'user.sync.completed': {\n      await enqueueWorkflow('pfo.workflow.sync-openbanking-accounts', {\n        tenantId: connection.meta.tenantId,\n        connectionId: connection.meta.id,\n        userUuid: event.user_uuid,\n      });\n      break;\n    }\n    case 'transactions.created':\n    case 'transactions.updated': {\n      await enqueueWorkflow('pfo.workflow.sync-openbanking-transactions', {\n        tenantId: connection.meta.tenantId,\n        connectionId: connection.meta.id,\n        userUuid: event.user_uuid,\n        accountId: event.account_uuid,\n      });\n      break;\n    }\n    default:\n      await logUnmappedEvent(event);\n  }\n\n  if (event.account_uuid) {\n    await provider.getBalances({\n      tenantId: connection.meta.tenantId,\n      connectionId: connection.meta.id,\n      accountId: event.account_uuid,\n    });\n  }\n\n  return new Response('OK', { status: 200 });\n}\n\ninterface PowensWebhookEvent {\n  type: string;\n  user_uuid: string;\n  connection_uuid: string;\n  account_uuid?: string;\n}\n\ninterface ExamplePowensSecrets {\n  clientId: string;\n  clientSecret: string;\n  apiKey?: string;\n  webhookSecret: string;\n}\n\ninterface ExampleIntegrationConnection {\n  meta: {\n    id: string;\n    tenantId: string;\n  };\n  config: {\n    environment: PowensEnvironment;\n    baseUrl?: string;\n  };\n}\n\nfunction verifySignature(payload: string, signature: string, secret: string) {\n  const digest = createHmac('sha256', secret).update(payload).digest('hex');\n  const a = Buffer.from(digest, 'hex');\n  const b = Buffer.from(signature, 'hex');\n  return a.length === b.length && timingSafeEqual(a, b);\n}\n\nasync function getConnectionByState(\n  state: string\n): Promise<ExampleIntegrationConnection | null> {\n  return fakeDatabase.connections.find((conn) => conn.state === state) ?? null;\n}\n\nasync function getPowensSecretsForConnection(\n  connectionId: string\n): Promise<ExamplePowensSecrets> {\n  const secret = fakeSecretStore[connectionId];\n  if (!secret) throw new Error(`Missing Powens secrets for ${connectionId}`);\n  return secret;\n}\n\nasync function enqueueWorkflow(name: string, input: Record<string, unknown>) {\n  await fakeWorkflowQueue.enqueue({ name, input });\n}\n\nasync function logUnmappedEvent(_event: PowensWebhookEvent) {\n  await fakeTelemetryLogger.record({\n    event: 'openbanking.webhook.unmapped',\n    payload: 'redacted',\n  });\n}\n\nconst fakeDatabase = {\n  connections: [] as (ExampleIntegrationConnection & { state: string })[],\n};\n\nconst fakeSecretStore: Record<string, ExamplePowensSecrets> = {};\n\nconst fakeWorkflowQueue = {\n  enqueue: async (_payload: Record<string, unknown>) => {\n    /* no-op */\n  },\n};\n\nconst fakeTelemetryLogger = {\n  record: async (_payload: Record<string, unknown>) => {\n    /* no-op */\n  },\n};\n"],"mappings":";;;;;;;;;;AAUA,eAAsB,qBAAqB,KAAc;CACvD,MAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;CACvD,MAAM,cAAc,IAAI,QAAQ,IAAI,iBAAiB;CACrD,MAAM,UAAU,MAAM,IAAI,MAAM;AAEhC,KAAI,CAAC,aAAa,CAAC,YACjB,QAAO,IAAI,SAAS,oCAAoC,EAAE,QAAQ,KAAK,CAAC;CAG1E,MAAM,aAAa,MAAM,qBAAqB,YAAY;AAC1D,KAAI,CAAC,WACH,QAAO,IAAI,SAAS,+BAA+B,EAAE,QAAQ,KAAK,CAAC;CAGrE,MAAM,UAAU,MAAM,8BAA8B,WAAW,KAAK,GAAG;AACvE,KAAI,CAAC,gBAAgB,SAAS,WAAW,QAAQ,cAAc,CAC7D,QAAO,IAAI,SAAS,oCAAoC,EAAE,QAAQ,KAAK,CAAC;CAG1E,MAAM,QAAQ,KAAK,MAAM,QAAQ;CACjC,MAAM,WAAW,IAAI,0BAA0B;EAC7C,UAAU,QAAQ;EAClB,cAAc,QAAQ;EACtB,QAAQ,QAAQ;EAChB,aAAa,WAAW,OAAO;EAC/B,SAAS,WAAW,OAAO;EAC5B,CAAC;AAEF,SAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK;AACH,SAAM,gBAAgB,0CAA0C;IAC9D,UAAU,WAAW,KAAK;IAC1B,cAAc,WAAW,KAAK;IAC9B,UAAU,MAAM;IACjB,CAAC;AACF;EAEF,KAAK;EACL,KAAK;AACH,SAAM,gBAAgB,8CAA8C;IAClE,UAAU,WAAW,KAAK;IAC1B,cAAc,WAAW,KAAK;IAC9B,UAAU,MAAM;IAChB,WAAW,MAAM;IAClB,CAAC;AACF;EAEF,QACE,OAAM,iBAAiB,MAAM;;AAGjC,KAAI,MAAM,aACR,OAAM,SAAS,YAAY;EACzB,UAAU,WAAW,KAAK;EAC1B,cAAc,WAAW,KAAK;EAC9B,WAAW,MAAM;EAClB,CAAC;AAGJ,QAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;;AA4B5C,SAAS,gBAAgB,SAAiB,WAAmB,QAAgB;CAC3E,MAAM,SAAS,WAAW,UAAU,OAAO,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;CACzE,MAAM,IAAI,OAAO,KAAK,QAAQ,MAAM;CACpC,MAAM,IAAI,OAAO,KAAK,WAAW,MAAM;AACvC,QAAO,EAAE,WAAW,EAAE,UAAU,gBAAgB,GAAG,EAAE;;AAGvD,eAAe,qBACb,OAC8C;AAC9C,QAAO,aAAa,YAAY,MAAM,SAAS,KAAK,UAAU,MAAM,IAAI;;AAG1E,eAAe,8BACb,cAC+B;CAC/B,MAAM,SAAS,gBAAgB;AAC/B,KAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,8BAA8B,eAAe;AAC1E,QAAO;;AAGT,eAAe,gBAAgB,MAAc,OAAgC;AAC3E,OAAM,kBAAkB,QAAQ;EAAE;EAAM;EAAO,CAAC;;AAGlD,eAAe,iBAAiB,QAA4B;AAC1D,OAAM,oBAAoB,OAAO;EAC/B,OAAO;EACP,SAAS;EACV,CAAC;;AAGJ,MAAM,eAAe,EACnB,aAAa,EAAE,EAChB;AAED,MAAMA,kBAAwD,EAAE;AAEhE,MAAM,oBAAoB,EACxB,SAAS,OAAO,aAAsC,IAGvD;AAED,MAAM,sBAAsB,EAC1B,QAAQ,OAAO,aAAsC,IAGtD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contractspec/example.openbanking-powens",
-  "version": "1.44.0",
+  "version": "1.45.0",
   "description": "OpenBanking Powens example: OAuth callback + webhook handler patterns (provider + workflows).",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,13 +28,13 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@contractspec/integration.providers-impls": "1.44.0",
-    "@contractspec/lib.schema": "1.44.0",
-    "@contractspec/lib.contracts": "1.44.0"
+    "@contractspec/integration.providers-impls": "1.45.0",
+    "@contractspec/lib.schema": "1.45.0",
+    "@contractspec/lib.contracts": "1.45.0"
   },
   "devDependencies": {
-    "@contractspec/tool.tsdown": "1.44.0",
-    "@contractspec/tool.typescript": "1.44.0",
+    "@contractspec/tool.tsdown": "1.45.0",
+    "@contractspec/tool.typescript": "1.45.0",
     "tsdown": "^0.18.3",
     "typescript": "^5.9.3"
   },

package/src/example.ts

@@ -1,11 +1,18 @@
-const example = {
-  id: 'openbanking-powens',
-  title: 'Open Banking — Powens',
-  summary:
-    'OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).',
-  tags: ['openbanking', 'powens', 'oauth', 'webhooks', 'integrations'],
-  kind: 'integration',
-  visibility: 'public',
+import type { ExampleSpec } from '@contractspec/lib.contracts';
+
+const example: ExampleSpec = {
+  meta: {
+    key: 'openbanking-powens',
+    version: '1.0.0',
+    title: 'Open Banking — Powens',
+    description:
+      'OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).',
+    kind: 'integration',
+    visibility: 'public',
+    stability: 'experimental',
+    owners: ['@platform.core'],
+    tags: ['openbanking', 'powens', 'oauth', 'webhooks', 'integrations'],
+  },
   docs: {
     rootDocId: 'docs.examples.openbanking-powens',
     usageDocId: 'docs.examples.openbanking-powens.usage',
@@ -20,6 +27,6 @@ const example = {
     studio: { enabled: true, installable: true },
     mcp: { enabled: true },
   },
-} as const;
+};
 
 export default example;

package/src/handlers/webhook-handler.ts

@@ -4,7 +4,7 @@
  * Verifies signature, then enqueues the canonical workflows to keep the ledger
  * in sync. Unknown events are ignored (or can be recorded by the app layer).
  */
-import { createHmac, timingSafeEqual } from 'node:crypto';
+import { createHmac, timingSafeEqual } from 'crypto';
 import { PowensOpenBankingProvider } from '@contractspec/integration.providers-impls/impls/powens-openbanking';
 import type { PowensEnvironment } from '@contractspec/integration.providers-impls/impls/powens-client';