@contractspec/example.openbanking-powens 1.44.1 → 1.45.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/.turbo/turbo-build$colon$bundle.log +11 -11
  2. package/.turbo/turbo-build.log +11 -11
  3. package/CHANGELOG.md +37 -0
  4. package/dist/example.d.ts +3 -30
  5. package/dist/example.d.ts.map +1 -1
  6. package/dist/example.js +17 -12
  7. package/dist/example.js.map +1 -1
  8. package/dist/handlers/webhook-handler.js +1 -1
  9. package/dist/handlers/webhook-handler.js.map +1 -1
  10. package/package.json +6 -6
  11. package/src/example.ts +16 -9
  12. package/src/handlers/webhook-handler.ts +1 -1
  13. package/tsconfig.tsbuildinfo +1 -1
package/.turbo/turbo-build$colon$bundle.log CHANGED
@@ -6,34 +6,34 @@ $ tsdown
6
6
  ℹ tsconfig: tsconfig.json
7
7
  ℹ Build start
8
8
  ℹ Cleaning 21 files
9
- ℹ dist/handlers/webhook-handler.js 3.33 kB │ gzip: 1.23 kB
9
+ ℹ dist/handlers/webhook-handler.js 3.32 kB │ gzip: 1.23 kB
10
10
  ℹ dist/handlers/oauth-callback.js 2.42 kB │ gzip: 1.02 kB
11
11
  ℹ dist/docs/openbanking-powens.docblock.js 1.57 kB │ gzip: 0.76 kB
12
- ℹ dist/example.js 0.88 kB │ gzip: 0.47 kB
12
+ ℹ dist/example.js 0.99 kB │ gzip: 0.52 kB
13
13
  ℹ dist/index.js 0.30 kB │ gzip: 0.16 kB
14
14
  ℹ dist/docs/index.js 0.04 kB │ gzip: 0.06 kB
15
15
  ℹ dist/handlers/webhook-handler.js.map 6.46 kB │ gzip: 2.18 kB
16
16
  ℹ dist/handlers/oauth-callback.js.map 4.84 kB │ gzip: 1.81 kB
17
17
  ℹ dist/docs/openbanking-powens.docblock.js.map 2.07 kB │ gzip: 0.94 kB
18
- ℹ dist/example.js.map 1.25 kB │ gzip: 0.64 kB
18
+ ℹ dist/example.js.map 1.52 kB │ gzip: 0.74 kB
19
19
  ℹ dist/handlers/webhook-handler.d.ts.map 0.17 kB │ gzip: 0.14 kB
20
20
  ℹ dist/handlers/oauth-callback.d.ts.map 0.17 kB │ gzip: 0.15 kB
21
- ℹ dist/example.d.ts.map 0.14 kB │ gzip: 0.13 kB
22
- ℹ dist/example.d.ts 1.12 kB │ gzip: 0.47 kB
21
+ ℹ dist/example.d.ts.map 0.12 kB │ gzip: 0.12 kB
23
22
  ℹ dist/index.d.ts 0.25 kB │ gzip: 0.13 kB
24
23
  ℹ dist/handlers/oauth-callback.d.ts 0.22 kB │ gzip: 0.17 kB
25
24
  ℹ dist/handlers/webhook-handler.d.ts 0.21 kB │ gzip: 0.16 kB
25
+ ℹ dist/example.d.ts 0.20 kB │ gzip: 0.16 kB
26
26
  ℹ dist/docs/index.d.ts 0.01 kB │ gzip: 0.03 kB
27
27
  ℹ dist/docs/openbanking-powens.docblock.d.ts 0.01 kB │ gzip: 0.03 kB
28
- ℹ 19 files, total: 25.46 kB
29
- src/handlers/webhook-handler.ts (7:44) [UNRESOLVED_IMPORT] Warning: Could not resolve 'node:crypto' in src/handlers/webhook-handler.ts
28
+ ℹ 19 files, total: 24.90 kB
29
+ src/handlers/webhook-handler.ts (7:44) [UNRESOLVED_IMPORT] Warning: Could not resolve 'crypto' in src/handlers/webhook-handler.ts
30
30
  â•­─[ src/handlers/webhook-handler.ts:7:45 ]
31
31
  │
32
- 7 │ import { createHmac, timingSafeEqual } from 'node:crypto';
33
-  │ ──────┬──────
34
-  │ ╰──────── Module not found, treating it as an external dependency
32
+ 7 │ import { createHmac, timingSafeEqual } from 'crypto';
33
+  │ ────┬───
34
+  │ ╰───── Module not found, treating it as an external dependency
35
35
   │
36
36
   │ Help: The "main" field here was ignored. Main fields must be configured explicitly when using the "neutral" platform.
37
37
  ───╯
38
38
 
39
- ✔ Build complete in 4101ms
39
+ ✔ Build complete in 11216ms
package/.turbo/turbo-build.log CHANGED
@@ -7,34 +7,34 @@ $ tsdown
7
7
  ℹ target: esnext
8
8
  ℹ tsconfig: tsconfig.json
9
9
  ℹ Build start
10
- ℹ dist/handlers/webhook-handler.js 3.33 kB │ gzip: 1.23 kB
10
+ ℹ dist/handlers/webhook-handler.js 3.32 kB │ gzip: 1.23 kB
11
11
  ℹ dist/handlers/oauth-callback.js 2.42 kB │ gzip: 1.02 kB
12
12
  ℹ dist/docs/openbanking-powens.docblock.js 1.57 kB │ gzip: 0.76 kB
13
- ℹ dist/example.js 0.88 kB │ gzip: 0.47 kB
13
+ ℹ dist/example.js 0.99 kB │ gzip: 0.52 kB
14
14
  ℹ dist/index.js 0.30 kB │ gzip: 0.16 kB
15
15
  ℹ dist/docs/index.js 0.04 kB │ gzip: 0.06 kB
16
16
  ℹ dist/handlers/webhook-handler.js.map 6.46 kB │ gzip: 2.18 kB
17
17
  ℹ dist/handlers/oauth-callback.js.map 4.84 kB │ gzip: 1.81 kB
18
18
  ℹ dist/docs/openbanking-powens.docblock.js.map 2.07 kB │ gzip: 0.94 kB
19
- ℹ dist/example.js.map 1.25 kB │ gzip: 0.64 kB
19
+ ℹ dist/example.js.map 1.52 kB │ gzip: 0.74 kB
20
20
  ℹ dist/handlers/webhook-handler.d.ts.map 0.17 kB │ gzip: 0.14 kB
21
21
  ℹ dist/handlers/oauth-callback.d.ts.map 0.17 kB │ gzip: 0.15 kB
22
- ℹ dist/example.d.ts.map 0.14 kB │ gzip: 0.13 kB
23
- ℹ dist/example.d.ts 1.12 kB │ gzip: 0.47 kB
22
+ ℹ dist/example.d.ts.map 0.12 kB │ gzip: 0.12 kB
24
23
  ℹ dist/index.d.ts 0.25 kB │ gzip: 0.13 kB
25
24
  ℹ dist/handlers/oauth-callback.d.ts 0.22 kB │ gzip: 0.17 kB
26
25
  ℹ dist/handlers/webhook-handler.d.ts 0.21 kB │ gzip: 0.16 kB
26
+ ℹ dist/example.d.ts 0.20 kB │ gzip: 0.16 kB
27
27
  ℹ dist/docs/index.d.ts 0.01 kB │ gzip: 0.03 kB
28
28
  ℹ dist/docs/openbanking-powens.docblock.d.ts 0.01 kB │ gzip: 0.03 kB
29
- ℹ 19 files, total: 25.46 kB
30
- src/handlers/webhook-handler.ts (7:44) [UNRESOLVED_IMPORT] Warning: Could not resolve 'node:crypto' in src/handlers/webhook-handler.ts
29
+ ℹ 19 files, total: 24.90 kB
30
+ src/handlers/webhook-handler.ts (7:44) [UNRESOLVED_IMPORT] Warning: Could not resolve 'crypto' in src/handlers/webhook-handler.ts
31
31
  â•­─[ src/handlers/webhook-handler.ts:7:45 ]
32
32
  │
33
- 7 │ import { createHmac, timingSafeEqual } from 'node:crypto';
34
-  │ ──────┬──────
35
-  │ ╰──────── Module not found, treating it as an external dependency
33
+ 7 │ import { createHmac, timingSafeEqual } from 'crypto';
34
+  │ ────┬───
35
+  │ ╰───── Module not found, treating it as an external dependency
36
36
   │
37
37
   │ Help: The "main" field here was ignored. Main fields must be configured explicitly when using the "neutral" platform.
38
38
  ───╯
39
39
 
40
- ✔ Build complete in 3263ms
40
+ ✔ Build complete in 2975ms
package/CHANGELOG.md CHANGED
@@ -1,5 +1,42 @@
1
1
  # @contractspec/example.openbanking-powens
2
2
 
3
+ ## 1.45.1
4
+
5
+ ### Patch Changes
6
+
7
+ - feat: improve app config and examples contracts
8
+ - Updated dependencies
9
+ - @contractspec/integration.providers-impls@1.45.1
10
+ - @contractspec/lib.contracts@1.45.1
11
+ - @contractspec/lib.schema@1.45.1
12
+
13
+ ## 1.45.0
14
+
15
+ ### Minor Changes
16
+
17
+ - e73ca1d: feat: improve app config and examples contracts
18
+ feat: Contract layers support (features, examples, app-configs)
19
+
20
+ ### New CLI Commands
21
+ - `contractspec list layers` - List all contract layers with filtering
22
+
23
+ ### Enhanced Commands
24
+ - `contractspec ci` - New `layers` check category validates features/examples/config
25
+ - `contractspec doctor` - New `layers` health checks
26
+ - `contractspec integrity` - Now shows layer statistics
27
+
28
+ ### New APIs
29
+ - `discoverLayers()` - Scan workspace for all layer files
30
+ - `scanExampleSource()` - Parse ExampleSpec from source code
31
+ - `isExampleFile()` - Check if file is an example spec
32
+
33
+ ### Patch Changes
34
+
35
+ - Updated dependencies [e73ca1d]
36
+ - @contractspec/integration.providers-impls@1.45.0
37
+ - @contractspec/lib.contracts@1.45.0
38
+ - @contractspec/lib.schema@1.45.0
39
+
3
40
  ## 1.44.1
4
41
 
5
42
  ### Patch Changes
package/dist/example.d.ts CHANGED
@@ -1,34 +1,7 @@
1
+ import { ExampleSpec } from "@contractspec/lib.contracts";
2
+
1
3
  //#region src/example.d.ts
2
- declare const example: {
3
- readonly id: "openbanking-powens";
4
- readonly title: "Open Banking — Powens";
5
- readonly summary: "OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).";
6
- readonly tags: readonly ["openbanking", "powens", "oauth", "webhooks", "integrations"];
7
- readonly kind: "integration";
8
- readonly visibility: "public";
9
- readonly docs: {
10
- readonly rootDocId: "docs.examples.openbanking-powens";
11
- readonly usageDocId: "docs.examples.openbanking-powens.usage";
12
- };
13
- readonly entrypoints: {
14
- readonly packageName: "@contractspec/example.openbanking-powens";
15
- readonly docs: "./docs";
16
- };
17
- readonly surfaces: {
18
- readonly templates: true;
19
- readonly sandbox: {
20
- readonly enabled: true;
21
- readonly modes: readonly ["markdown", "specs"];
22
- };
23
- readonly studio: {
24
- readonly enabled: true;
25
- readonly installable: true;
26
- };
27
- readonly mcp: {
28
- readonly enabled: true;
29
- };
30
- };
31
- };
4
+ declare const example: ExampleSpec;
32
5
  //#endregion
33
6
  export { example as default };
34
7
  //# sourceMappingURL=example.d.ts.map
package/dist/example.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"example.d.ts","names":[],"sources":["../src/example.ts"],"sourcesContent":[],"mappings":";cAAM;EAAA,SAAA,EAsBI,EAAA,oBAAA"}
1
+ {"version":3,"file":"example.d.ts","names":[],"sources":["../src/example.ts"],"sourcesContent":[],"mappings":";;;cAEM,SAAS"}
package/dist/example.js CHANGED
@@ -1,17 +1,22 @@
1
1
  //#region src/example.ts
2
2
  const example = {
3
- id: "openbanking-powens",
4
- title: "Open Banking — Powens",
5
- summary: "OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).",
6
- tags: [
7
- "openbanking",
8
- "powens",
9
- "oauth",
10
- "webhooks",
11
- "integrations"
12
- ],
13
- kind: "integration",
14
- visibility: "public",
3
+ meta: {
4
+ key: "openbanking-powens",
5
+ version: "1.0.0",
6
+ title: "Open Banking — Powens",
7
+ description: "OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).",
8
+ kind: "integration",
9
+ visibility: "public",
10
+ stability: "experimental",
11
+ owners: ["@platform.core"],
12
+ tags: [
13
+ "openbanking",
14
+ "powens",
15
+ "oauth",
16
+ "webhooks",
17
+ "integrations"
18
+ ]
19
+ },
15
20
  docs: {
16
21
  rootDocId: "docs.examples.openbanking-powens",
17
22
  usageDocId: "docs.examples.openbanking-powens.usage"
package/dist/example.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"example.js","names":[],"sources":["../src/example.ts"],"sourcesContent":["const example = {\n id: 'openbanking-powens',\n title: 'Open Banking — Powens',\n summary:\n 'OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).',\n tags: ['openbanking', 'powens', 'oauth', 'webhooks', 'integrations'],\n kind: 'integration',\n visibility: 'public',\n docs: {\n rootDocId: 'docs.examples.openbanking-powens',\n usageDocId: 'docs.examples.openbanking-powens.usage',\n },\n entrypoints: {\n packageName: '@contractspec/example.openbanking-powens',\n docs: './docs',\n },\n surfaces: {\n templates: true,\n sandbox: { enabled: true, modes: ['markdown', 'specs'] },\n studio: { enabled: true, installable: true },\n mcp: { enabled: true },\n },\n} as const;\n\nexport default example;\n"],"mappings":";AAAA,MAAM,UAAU;CACd,IAAI;CACJ,OAAO;CACP,SACE;CACF,MAAM;EAAC;EAAe;EAAU;EAAS;EAAY;EAAe;CACpE,MAAM;CACN,YAAY;CACZ,MAAM;EACJ,WAAW;EACX,YAAY;EACb;CACD,aAAa;EACX,aAAa;EACb,MAAM;EACP;CACD,UAAU;EACR,WAAW;EACX,SAAS;GAAE,SAAS;GAAM,OAAO,CAAC,YAAY,QAAQ;GAAE;EACxD,QAAQ;GAAE,SAAS;GAAM,aAAa;GAAM;EAC5C,KAAK,EAAE,SAAS,MAAM;EACvB;CACF;AAED,sBAAe"}
1
+ {"version":3,"file":"example.js","names":["example: ExampleSpec"],"sources":["../src/example.ts"],"sourcesContent":["import type { ExampleSpec } from '@contractspec/lib.contracts';\n\nconst example: ExampleSpec = {\n meta: {\n key: 'openbanking-powens',\n version: '1.0.0',\n title: 'Open Banking — Powens',\n description:\n 'OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).',\n kind: 'integration',\n visibility: 'public',\n stability: 'experimental',\n owners: ['@platform.core'],\n tags: ['openbanking', 'powens', 'oauth', 'webhooks', 'integrations'],\n },\n docs: {\n rootDocId: 'docs.examples.openbanking-powens',\n usageDocId: 'docs.examples.openbanking-powens.usage',\n },\n entrypoints: {\n packageName: '@contractspec/example.openbanking-powens',\n docs: './docs',\n },\n surfaces: {\n templates: true,\n sandbox: { enabled: true, modes: ['markdown', 'specs'] },\n studio: { enabled: true, installable: true },\n mcp: { enabled: true },\n },\n};\n\nexport default example;\n"],"mappings":";AAEA,MAAMA,UAAuB;CAC3B,MAAM;EACJ,KAAK;EACL,SAAS;EACT,OAAO;EACP,aACE;EACF,MAAM;EACN,YAAY;EACZ,WAAW;EACX,QAAQ,CAAC,iBAAiB;EAC1B,MAAM;GAAC;GAAe;GAAU;GAAS;GAAY;GAAe;EACrE;CACD,MAAM;EACJ,WAAW;EACX,YAAY;EACb;CACD,aAAa;EACX,aAAa;EACb,MAAM;EACP;CACD,UAAU;EACR,WAAW;EACX,SAAS;GAAE,SAAS;GAAM,OAAO,CAAC,YAAY,QAAQ;GAAE;EACxD,QAAQ;GAAE,SAAS;GAAM,aAAa;GAAM;EAC5C,KAAK,EAAE,SAAS,MAAM;EACvB;CACF;AAED,sBAAe"}
package/dist/handlers/webhook-handler.js CHANGED
@@ -1,5 +1,5 @@
1
1
  import { PowensOpenBankingProvider } from "@contractspec/integration.providers-impls/impls/powens-openbanking";
2
- import { createHmac, timingSafeEqual } from "node:crypto";
2
+ import { createHmac, timingSafeEqual } from "crypto";
3
3
 
4
4
  //#region src/handlers/webhook-handler.ts
5
5
  /**
package/dist/handlers/webhook-handler.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"webhook-handler.js","names":["fakeSecretStore: Record<string, ExamplePowensSecrets>"],"sources":["../../src/handlers/webhook-handler.ts"],"sourcesContent":["/**\n * Example Powens webhook handler (fetch-compatible).\n *\n * Verifies signature, then enqueues the canonical workflows to keep the ledger\n * in sync. Unknown events are ignored (or can be recorded by the app layer).\n */\nimport { createHmac, timingSafeEqual } from 'node:crypto';\nimport { PowensOpenBankingProvider } from '@contractspec/integration.providers-impls/impls/powens-openbanking';\nimport type { PowensEnvironment } from '@contractspec/integration.providers-impls/impls/powens-client';\n\nexport async function powensWebhookHandler(req: Request) {\n const signature = req.headers.get('x-powens-signature');\n const stateHeader = req.headers.get('x-powens-state');\n const payload = await req.text();\n\n if (!signature || !stateHeader) {\n return new Response('Missing Powens signature headers', { status: 400 });\n }\n\n const connection = await getConnectionByState(stateHeader);\n if (!connection) {\n return new Response('Unknown Powens state header', { status: 404 });\n }\n\n const secrets = await getPowensSecretsForConnection(connection.meta.id);\n if (!verifySignature(payload, signature, secrets.webhookSecret)) {\n return new Response('Invalid Powens webhook signature', { status: 401 });\n }\n\n const event = JSON.parse(payload) as PowensWebhookEvent;\n const provider = new PowensOpenBankingProvider({\n clientId: secrets.clientId,\n clientSecret: secrets.clientSecret,\n apiKey: secrets.apiKey,\n environment: connection.config.environment as PowensEnvironment,\n baseUrl: connection.config.baseUrl as string | undefined,\n });\n\n switch (event.type) {\n case 'connection.updated':\n case 'user.sync.completed': {\n await enqueueWorkflow('pfo.workflow.sync-openbanking-accounts', {\n tenantId: connection.meta.tenantId,\n connectionId: connection.meta.id,\n userUuid: event.user_uuid,\n });\n break;\n }\n case 'transactions.created':\n case 'transactions.updated': {\n await enqueueWorkflow('pfo.workflow.sync-openbanking-transactions', {\n tenantId: connection.meta.tenantId,\n connectionId: connection.meta.id,\n userUuid: event.user_uuid,\n accountId: event.account_uuid,\n });\n break;\n }\n default:\n await logUnmappedEvent(event);\n }\n\n if (event.account_uuid) {\n await provider.getBalances({\n tenantId: connection.meta.tenantId,\n connectionId: connection.meta.id,\n accountId: event.account_uuid,\n });\n }\n\n return new Response('OK', { status: 200 });\n}\n\ninterface PowensWebhookEvent {\n type: string;\n user_uuid: string;\n connection_uuid: string;\n account_uuid?: string;\n}\n\ninterface ExamplePowensSecrets {\n clientId: string;\n clientSecret: string;\n apiKey?: string;\n webhookSecret: string;\n}\n\ninterface ExampleIntegrationConnection {\n meta: {\n id: string;\n tenantId: string;\n };\n config: {\n environment: PowensEnvironment;\n baseUrl?: string;\n };\n}\n\nfunction verifySignature(payload: string, signature: string, secret: string) {\n const digest = createHmac('sha256', secret).update(payload).digest('hex');\n const a = Buffer.from(digest, 'hex');\n const b = Buffer.from(signature, 'hex');\n return a.length === b.length && timingSafeEqual(a, b);\n}\n\nasync function getConnectionByState(\n state: string\n): Promise<ExampleIntegrationConnection | null> {\n return fakeDatabase.connections.find((conn) => conn.state === state) ?? null;\n}\n\nasync function getPowensSecretsForConnection(\n connectionId: string\n): Promise<ExamplePowensSecrets> {\n const secret = fakeSecretStore[connectionId];\n if (!secret) throw new Error(`Missing Powens secrets for ${connectionId}`);\n return secret;\n}\n\nasync function enqueueWorkflow(name: string, input: Record<string, unknown>) {\n await fakeWorkflowQueue.enqueue({ name, input });\n}\n\nasync function logUnmappedEvent(_event: PowensWebhookEvent) {\n await fakeTelemetryLogger.record({\n event: 'openbanking.webhook.unmapped',\n payload: 'redacted',\n });\n}\n\nconst fakeDatabase = {\n connections: [] as (ExampleIntegrationConnection & { state: string })[],\n};\n\nconst fakeSecretStore: Record<string, ExamplePowensSecrets> = {};\n\nconst fakeWorkflowQueue = {\n enqueue: async (_payload: Record<string, unknown>) => {\n /* no-op */\n },\n};\n\nconst fakeTelemetryLogger = {\n record: async (_payload: Record<string, unknown>) => {\n /* no-op */\n },\n};\n"],"mappings":";;;;;;;;;;AAUA,eAAsB,qBAAqB,KAAc;CACvD,MAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;CACvD,MAAM,cAAc,IAAI,QAAQ,IAAI,iBAAiB;CACrD,MAAM,UAAU,MAAM,IAAI,MAAM;AAEhC,KAAI,CAAC,aAAa,CAAC,YACjB,QAAO,IAAI,SAAS,oCAAoC,EAAE,QAAQ,KAAK,CAAC;CAG1E,MAAM,aAAa,MAAM,qBAAqB,YAAY;AAC1D,KAAI,CAAC,WACH,QAAO,IAAI,SAAS,+BAA+B,EAAE,QAAQ,KAAK,CAAC;CAGrE,MAAM,UAAU,MAAM,8BAA8B,WAAW,KAAK,GAAG;AACvE,KAAI,CAAC,gBAAgB,SAAS,WAAW,QAAQ,cAAc,CAC7D,QAAO,IAAI,SAAS,oCAAoC,EAAE,QAAQ,KAAK,CAAC;CAG1E,MAAM,QAAQ,KAAK,MAAM,QAAQ;CACjC,MAAM,WAAW,IAAI,0BAA0B;EAC7C,UAAU,QAAQ;EAClB,cAAc,QAAQ;EACtB,QAAQ,QAAQ;EAChB,aAAa,WAAW,OAAO;EAC/B,SAAS,WAAW,OAAO;EAC5B,CAAC;AAEF,SAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK;AACH,SAAM,gBAAgB,0CAA0C;IAC9D,UAAU,WAAW,KAAK;IAC1B,cAAc,WAAW,KAAK;IAC9B,UAAU,MAAM;IACjB,CAAC;AACF;EAEF,KAAK;EACL,KAAK;AACH,SAAM,gBAAgB,8CAA8C;IAClE,UAAU,WAAW,KAAK;IAC1B,cAAc,WAAW,KAAK;IAC9B,UAAU,MAAM;IAChB,WAAW,MAAM;IAClB,CAAC;AACF;EAEF,QACE,OAAM,iBAAiB,MAAM;;AAGjC,KAAI,MAAM,aACR,OAAM,SAAS,YAAY;EACzB,UAAU,WAAW,KAAK;EAC1B,cAAc,WAAW,KAAK;EAC9B,WAAW,MAAM;EAClB,CAAC;AAGJ,QAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;;AA4B5C,SAAS,gBAAgB,SAAiB,WAAmB,QAAgB;CAC3E,MAAM,SAAS,WAAW,UAAU,OAAO,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;CACzE,MAAM,IAAI,OAAO,KAAK,QAAQ,MAAM;CACpC,MAAM,IAAI,OAAO,KAAK,WAAW,MAAM;AACvC,QAAO,EAAE,WAAW,EAAE,UAAU,gBAAgB,GAAG,EAAE;;AAGvD,eAAe,qBACb,OAC8C;AAC9C,QAAO,aAAa,YAAY,MAAM,SAAS,KAAK,UAAU,MAAM,IAAI;;AAG1E,eAAe,8BACb,cAC+B;CAC/B,MAAM,SAAS,gBAAgB;AAC/B,KAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,8BAA8B,eAAe;AAC1E,QAAO;;AAGT,eAAe,gBAAgB,MAAc,OAAgC;AAC3E,OAAM,kBAAkB,QAAQ;EAAE;EAAM;EAAO,CAAC;;AAGlD,eAAe,iBAAiB,QAA4B;AAC1D,OAAM,oBAAoB,OAAO;EAC/B,OAAO;EACP,SAAS;EACV,CAAC;;AAGJ,MAAM,eAAe,EACnB,aAAa,EAAE,EAChB;AAED,MAAMA,kBAAwD,EAAE;AAEhE,MAAM,oBAAoB,EACxB,SAAS,OAAO,aAAsC,IAGvD;AAED,MAAM,sBAAsB,EAC1B,QAAQ,OAAO,aAAsC,IAGtD"}
1
+ {"version":3,"file":"webhook-handler.js","names":["fakeSecretStore: Record<string, ExamplePowensSecrets>"],"sources":["../../src/handlers/webhook-handler.ts"],"sourcesContent":["/**\n * Example Powens webhook handler (fetch-compatible).\n *\n * Verifies signature, then enqueues the canonical workflows to keep the ledger\n * in sync. Unknown events are ignored (or can be recorded by the app layer).\n */\nimport { createHmac, timingSafeEqual } from 'crypto';\nimport { PowensOpenBankingProvider } from '@contractspec/integration.providers-impls/impls/powens-openbanking';\nimport type { PowensEnvironment } from '@contractspec/integration.providers-impls/impls/powens-client';\n\nexport async function powensWebhookHandler(req: Request) {\n const signature = req.headers.get('x-powens-signature');\n const stateHeader = req.headers.get('x-powens-state');\n const payload = await req.text();\n\n if (!signature || !stateHeader) {\n return new Response('Missing Powens signature headers', { status: 400 });\n }\n\n const connection = await getConnectionByState(stateHeader);\n if (!connection) {\n return new Response('Unknown Powens state header', { status: 404 });\n }\n\n const secrets = await getPowensSecretsForConnection(connection.meta.id);\n if (!verifySignature(payload, signature, secrets.webhookSecret)) {\n return new Response('Invalid Powens webhook signature', { status: 401 });\n }\n\n const event = JSON.parse(payload) as PowensWebhookEvent;\n const provider = new PowensOpenBankingProvider({\n clientId: secrets.clientId,\n clientSecret: secrets.clientSecret,\n apiKey: secrets.apiKey,\n environment: connection.config.environment as PowensEnvironment,\n baseUrl: connection.config.baseUrl as string | undefined,\n });\n\n switch (event.type) {\n case 'connection.updated':\n case 'user.sync.completed': {\n await enqueueWorkflow('pfo.workflow.sync-openbanking-accounts', {\n tenantId: connection.meta.tenantId,\n connectionId: connection.meta.id,\n userUuid: event.user_uuid,\n });\n break;\n }\n case 'transactions.created':\n case 'transactions.updated': {\n await enqueueWorkflow('pfo.workflow.sync-openbanking-transactions', {\n tenantId: connection.meta.tenantId,\n connectionId: connection.meta.id,\n userUuid: event.user_uuid,\n accountId: event.account_uuid,\n });\n break;\n }\n default:\n await logUnmappedEvent(event);\n }\n\n if (event.account_uuid) {\n await provider.getBalances({\n tenantId: connection.meta.tenantId,\n connectionId: connection.meta.id,\n accountId: event.account_uuid,\n });\n }\n\n return new Response('OK', { status: 200 });\n}\n\ninterface PowensWebhookEvent {\n type: string;\n user_uuid: string;\n connection_uuid: string;\n account_uuid?: string;\n}\n\ninterface ExamplePowensSecrets {\n clientId: string;\n clientSecret: string;\n apiKey?: string;\n webhookSecret: string;\n}\n\ninterface ExampleIntegrationConnection {\n meta: {\n id: string;\n tenantId: string;\n };\n config: {\n environment: PowensEnvironment;\n baseUrl?: string;\n };\n}\n\nfunction verifySignature(payload: string, signature: string, secret: string) {\n const digest = createHmac('sha256', secret).update(payload).digest('hex');\n const a = Buffer.from(digest, 'hex');\n const b = Buffer.from(signature, 'hex');\n return a.length === b.length && timingSafeEqual(a, b);\n}\n\nasync function getConnectionByState(\n state: string\n): Promise<ExampleIntegrationConnection | null> {\n return fakeDatabase.connections.find((conn) => conn.state === state) ?? null;\n}\n\nasync function getPowensSecretsForConnection(\n connectionId: string\n): Promise<ExamplePowensSecrets> {\n const secret = fakeSecretStore[connectionId];\n if (!secret) throw new Error(`Missing Powens secrets for ${connectionId}`);\n return secret;\n}\n\nasync function enqueueWorkflow(name: string, input: Record<string, unknown>) {\n await fakeWorkflowQueue.enqueue({ name, input });\n}\n\nasync function logUnmappedEvent(_event: PowensWebhookEvent) {\n await fakeTelemetryLogger.record({\n event: 'openbanking.webhook.unmapped',\n payload: 'redacted',\n });\n}\n\nconst fakeDatabase = {\n connections: [] as (ExampleIntegrationConnection & { state: string })[],\n};\n\nconst fakeSecretStore: Record<string, ExamplePowensSecrets> = {};\n\nconst fakeWorkflowQueue = {\n enqueue: async (_payload: Record<string, unknown>) => {\n /* no-op */\n },\n};\n\nconst fakeTelemetryLogger = {\n record: async (_payload: Record<string, unknown>) => {\n /* no-op */\n },\n};\n"],"mappings":";;;;;;;;;;AAUA,eAAsB,qBAAqB,KAAc;CACvD,MAAM,YAAY,IAAI,QAAQ,IAAI,qBAAqB;CACvD,MAAM,cAAc,IAAI,QAAQ,IAAI,iBAAiB;CACrD,MAAM,UAAU,MAAM,IAAI,MAAM;AAEhC,KAAI,CAAC,aAAa,CAAC,YACjB,QAAO,IAAI,SAAS,oCAAoC,EAAE,QAAQ,KAAK,CAAC;CAG1E,MAAM,aAAa,MAAM,qBAAqB,YAAY;AAC1D,KAAI,CAAC,WACH,QAAO,IAAI,SAAS,+BAA+B,EAAE,QAAQ,KAAK,CAAC;CAGrE,MAAM,UAAU,MAAM,8BAA8B,WAAW,KAAK,GAAG;AACvE,KAAI,CAAC,gBAAgB,SAAS,WAAW,QAAQ,cAAc,CAC7D,QAAO,IAAI,SAAS,oCAAoC,EAAE,QAAQ,KAAK,CAAC;CAG1E,MAAM,QAAQ,KAAK,MAAM,QAAQ;CACjC,MAAM,WAAW,IAAI,0BAA0B;EAC7C,UAAU,QAAQ;EAClB,cAAc,QAAQ;EACtB,QAAQ,QAAQ;EAChB,aAAa,WAAW,OAAO;EAC/B,SAAS,WAAW,OAAO;EAC5B,CAAC;AAEF,SAAQ,MAAM,MAAd;EACE,KAAK;EACL,KAAK;AACH,SAAM,gBAAgB,0CAA0C;IAC9D,UAAU,WAAW,KAAK;IAC1B,cAAc,WAAW,KAAK;IAC9B,UAAU,MAAM;IACjB,CAAC;AACF;EAEF,KAAK;EACL,KAAK;AACH,SAAM,gBAAgB,8CAA8C;IAClE,UAAU,WAAW,KAAK;IAC1B,cAAc,WAAW,KAAK;IAC9B,UAAU,MAAM;IAChB,WAAW,MAAM;IAClB,CAAC;AACF;EAEF,QACE,OAAM,iBAAiB,MAAM;;AAGjC,KAAI,MAAM,aACR,OAAM,SAAS,YAAY;EACzB,UAAU,WAAW,KAAK;EAC1B,cAAc,WAAW,KAAK;EAC9B,WAAW,MAAM;EAClB,CAAC;AAGJ,QAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;;AA4B5C,SAAS,gBAAgB,SAAiB,WAAmB,QAAgB;CAC3E,MAAM,SAAS,WAAW,UAAU,OAAO,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;CACzE,MAAM,IAAI,OAAO,KAAK,QAAQ,MAAM;CACpC,MAAM,IAAI,OAAO,KAAK,WAAW,MAAM;AACvC,QAAO,EAAE,WAAW,EAAE,UAAU,gBAAgB,GAAG,EAAE;;AAGvD,eAAe,qBACb,OAC8C;AAC9C,QAAO,aAAa,YAAY,MAAM,SAAS,KAAK,UAAU,MAAM,IAAI;;AAG1E,eAAe,8BACb,cAC+B;CAC/B,MAAM,SAAS,gBAAgB;AAC/B,KAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,8BAA8B,eAAe;AAC1E,QAAO;;AAGT,eAAe,gBAAgB,MAAc,OAAgC;AAC3E,OAAM,kBAAkB,QAAQ;EAAE;EAAM;EAAO,CAAC;;AAGlD,eAAe,iBAAiB,QAA4B;AAC1D,OAAM,oBAAoB,OAAO;EAC/B,OAAO;EACP,SAAS;EACV,CAAC;;AAGJ,MAAM,eAAe,EACnB,aAAa,EAAE,EAChB;AAED,MAAMA,kBAAwD,EAAE;AAEhE,MAAM,oBAAoB,EACxB,SAAS,OAAO,aAAsC,IAGvD;AAED,MAAM,sBAAsB,EAC1B,QAAQ,OAAO,aAAsC,IAGtD"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@contractspec/example.openbanking-powens",
3
- "version": "1.44.1",
3
+ "version": "1.45.1",
4
4
  "description": "OpenBanking Powens example: OAuth callback + webhook handler patterns (provider + workflows).",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
@@ -28,13 +28,13 @@
28
28
  "test": "bun test"
29
29
  },
30
30
  "dependencies": {
31
- "@contractspec/integration.providers-impls": "1.44.1",
32
- "@contractspec/lib.schema": "1.44.1",
33
- "@contractspec/lib.contracts": "1.44.1"
31
+ "@contractspec/integration.providers-impls": "1.45.1",
32
+ "@contractspec/lib.schema": "1.45.1",
33
+ "@contractspec/lib.contracts": "1.45.1"
34
34
  },
35
35
  "devDependencies": {
36
- "@contractspec/tool.tsdown": "1.44.1",
37
- "@contractspec/tool.typescript": "1.44.1",
36
+ "@contractspec/tool.tsdown": "1.45.1",
37
+ "@contractspec/tool.typescript": "1.45.1",
38
38
  "tsdown": "^0.18.3",
39
39
  "typescript": "^5.9.3"
40
40
  },
package/src/example.ts CHANGED
@@ -1,11 +1,18 @@
1
- const example = {
2
- id: 'openbanking-powens',
3
- title: 'Open Banking — Powens',
4
- summary:
5
- 'OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).',
6
- tags: ['openbanking', 'powens', 'oauth', 'webhooks', 'integrations'],
7
- kind: 'integration',
8
- visibility: 'public',
1
+ import type { ExampleSpec } from '@contractspec/lib.contracts';
2
+
3
+ const example: ExampleSpec = {
4
+ meta: {
5
+ key: 'openbanking-powens',
6
+ version: '1.0.0',
7
+ title: 'Open Banking — Powens',
8
+ description:
9
+ 'OAuth callback + webhook handler patterns for Powens open banking integration (provider + workflow orchestration).',
10
+ kind: 'integration',
11
+ visibility: 'public',
12
+ stability: 'experimental',
13
+ owners: ['@platform.core'],
14
+ tags: ['openbanking', 'powens', 'oauth', 'webhooks', 'integrations'],
15
+ },
9
16
  docs: {
10
17
  rootDocId: 'docs.examples.openbanking-powens',
11
18
  usageDocId: 'docs.examples.openbanking-powens.usage',
@@ -20,6 +27,6 @@ const example = {
20
27
  studio: { enabled: true, installable: true },
21
28
  mcp: { enabled: true },
22
29
  },
23
- } as const;
30
+ };
24
31
 
25
32
  export default example;
package/src/handlers/webhook-handler.ts CHANGED
@@ -4,7 +4,7 @@
4
4
  * Verifies signature, then enqueues the canonical workflows to keep the ledger
5
5
  * in sync. Unknown events are ignored (or can be recorded by the app layer).
6
6
  */
7
- import { createHmac, timingSafeEqual } from 'node:crypto';
7
+ import { createHmac, timingSafeEqual } from 'crypto';
8
8
  import { PowensOpenBankingProvider } from '@contractspec/integration.providers-impls/impls/powens-openbanking';
9
9
  import type { PowensEnvironment } from '@contractspec/integration.providers-impls/impls/powens-client';
10
10