@eigenpal/cli 0.10.20 → 0.10.22

package/dist/cli.js

@@ -66042,6 +66042,216 @@ var init_sample_rank = __esm(() => {
   UNIT_INTERVAL_DENOMINATOR = BigInt(1) << BigInt(53);
 });
 
+// ../types/src/webhooks.ts
+function serializeWebhookEvent(event) {
+  return JSON.stringify(WebhookEventEnvelopeSchema.parse(event));
+}
+function boundWebhookEventOutput(event, maxBytes) {
+  const parsed = WebhookEventEnvelopeSchema.parse(event);
+  if (new TextEncoder().encode(JSON.stringify(parsed)).byteLength <= maxBytes)
+    return parsed;
+  const run = { ...parsed.data.run };
+  delete run.output;
+  run.outputOmitted = true;
+  const bounded = { ...parsed, data: { ...parsed.data, run } };
+  const serialized = JSON.stringify(bounded);
+  if (new TextEncoder().encode(serialized).byteLength > maxBytes) {
+    throw new Error("Webhook envelope exceeds payload limit without output");
+  }
+  return WebhookEventEnvelopeSchema.parse(bounded);
+}
+function getWebhookDestinationUrlError(raw) {
+  const trimmed = raw.trim();
+  if (!trimmed)
+    return "Enter a valid HTTPS URL.";
+  const result = WebhookDestinationUrlSchema.safeParse(trimmed);
+  if (result.success)
+    return null;
+  return result.error.issues[0]?.message ?? "Enter a valid HTTPS URL.";
+}
+function validateWebhookHeaderCollection(input, ctx) {
+  if (input.customHeaders) {
+    const seen = new Set;
+    let bytes = 0;
+    input.customHeaders.forEach((header, index) => {
+      const normalized = header.name.toLowerCase();
+      if (seen.has(normalized)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["customHeaders", index, "name"],
+          message: "Duplicate webhook header"
+        });
+      }
+      seen.add(normalized);
+      bytes += new TextEncoder().encode(header.name + ("value" in header ? header.value : "")).byteLength;
+    });
+    if (bytes > WEBHOOK_MAX_HEADER_BYTES) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["customHeaders"],
+        message: "Custom webhook headers are too large"
+      });
+    }
+  }
+}
+var WEBHOOK_API_VERSION = "2026-07-01", WEBHOOK_NOTIFY_CHANNEL = "eigenpal:webhooks", WEBHOOK_MAX_PAYLOAD_BYTES, WEBHOOK_MAX_HEADERS = 20, WEBHOOK_MAX_HEADER_BYTES, WEBHOOK_EVENT_TYPES, WEBHOOK_DELIVERY_STATES, WEBHOOK_RESERVED_HEADERS, RESERVED_HEADER_SET, WebhookEventTypeSchema, WebhookDeliveryStateSchema, WebhookEndpointIdSchema, WebhookEventIdSchema, WebhookDeliveryIdSchema, WebhookAttemptIdSchema, HeaderNameSchema, WebhookCustomHeaderSchema, RetainedWebhookCustomHeaderSchema, RedactedWebhookCustomHeaderSchema, PublicWebhookRunSchema, EnvelopeBaseSchema, RunCreatedWebhookEventSchema, RunStatusChangedWebhookEventSchema, WebhookEventEnvelopeSchema, WebhookEndpointSchema, WebhookDestinationUrlSchema, CreateWebhookEndpointSchema, UpdateWebhookEndpointSchema, CreateWebhookEndpointResponseSchema, WebhookDeliverySchema, WebhookDeliveryAttemptSchema;
+var init_webhooks = __esm(() => {
+  init_zod();
+  init_execution_row();
+  WEBHOOK_MAX_PAYLOAD_BYTES = 1024 * 1024;
+  WEBHOOK_MAX_HEADER_BYTES = 16 * 1024;
+  WEBHOOK_EVENT_TYPES = ["run.created", "run.status_changed"];
+  WEBHOOK_DELIVERY_STATES = [
+    "pending",
+    "processing",
+    "succeeded",
+    "failed",
+    "cancelled"
+  ];
+  WEBHOOK_RESERVED_HEADERS = [
+    "connection",
+    "content-length",
+    "content-type",
+    "host",
+    "keep-alive",
+    "proxy-authenticate",
+    "proxy-authorization",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade",
+    "user-agent",
+    "webhook-id",
+    "webhook-signature",
+    "webhook-timestamp"
+  ];
+  RESERVED_HEADER_SET = new Set(WEBHOOK_RESERVED_HEADERS);
+  WebhookEventTypeSchema = exports_external.enum(WEBHOOK_EVENT_TYPES);
+  WebhookDeliveryStateSchema = exports_external.enum(WEBHOOK_DELIVERY_STATES);
+  WebhookEndpointIdSchema = exports_external.string().regex(/^whep_[A-Za-z0-9_-]+$/);
+  WebhookEventIdSchema = exports_external.string().regex(/^whev_[A-Za-z0-9_-]+$/);
+  WebhookDeliveryIdSchema = exports_external.string().regex(/^whdl_[A-Za-z0-9_-]+$/);
+  WebhookAttemptIdSchema = exports_external.string().regex(/^what_[A-Za-z0-9_-]+$/);
+  HeaderNameSchema = exports_external.string().min(1).max(128).regex(/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/);
+  WebhookCustomHeaderSchema = exports_external.object({
+    name: HeaderNameSchema.refine((name) => !RESERVED_HEADER_SET.has(name.toLowerCase()) && !name.toLowerCase().startsWith("webhook-"), { message: "Reserved webhook header" }),
+    value: exports_external.string().min(1).max(8192).refine((value) => !/[\r\n]/.test(value), {
+      message: "Header values cannot contain CR or LF"
+    })
+  });
+  RetainedWebhookCustomHeaderSchema = exports_external.object({
+    name: WebhookCustomHeaderSchema.shape.name,
+    retained: exports_external.literal(true)
+  });
+  RedactedWebhookCustomHeaderSchema = exports_external.object({
+    name: HeaderNameSchema,
+    configured: exports_external.literal(true)
+  });
+  PublicWebhookRunSchema = exports_external.object({
+    id: exports_external.string().min(1),
+    automationId: exports_external.string().min(1),
+    type: exports_external.enum(["workflow", "agent"]),
+    status: exports_external.enum(EXECUTION_STATUSES),
+    triggerType: exports_external.string(),
+    createdAt: exports_external.string().datetime(),
+    startedAt: exports_external.string().datetime().nullable(),
+    completedAt: exports_external.string().datetime().nullable(),
+    output: exports_external.unknown().optional(),
+    outputOmitted: exports_external.boolean().optional()
+  });
+  EnvelopeBaseSchema = exports_external.object({
+    id: WebhookEventIdSchema,
+    apiVersion: exports_external.literal(WEBHOOK_API_VERSION),
+    createdAt: exports_external.string().datetime(),
+    test: exports_external.boolean().default(false)
+  });
+  RunCreatedWebhookEventSchema = EnvelopeBaseSchema.extend({
+    type: exports_external.literal("run.created"),
+    data: exports_external.object({ run: PublicWebhookRunSchema })
+  });
+  RunStatusChangedWebhookEventSchema = EnvelopeBaseSchema.extend({
+    type: exports_external.literal("run.status_changed"),
+    data: exports_external.object({
+      run: PublicWebhookRunSchema,
+      previousStatus: exports_external.enum(EXECUTION_STATUSES),
+      currentStatus: exports_external.enum(EXECUTION_STATUSES)
+    })
+  });
+  WebhookEventEnvelopeSchema = exports_external.discriminatedUnion("type", [
+    RunCreatedWebhookEventSchema,
+    RunStatusChangedWebhookEventSchema
+  ]);
+  WebhookEndpointSchema = exports_external.object({
+    id: WebhookEndpointIdSchema,
+    tenantId: exports_external.string(),
+    name: exports_external.string().min(1).max(200),
+    url: exports_external.string().url(),
+    eventTypes: exports_external.array(WebhookEventTypeSchema).min(1),
+    enabled: exports_external.boolean(),
+    signingConfigured: exports_external.literal(true),
+    customHeaders: exports_external.array(RedactedWebhookCustomHeaderSchema),
+    createdBy: exports_external.string().nullable(),
+    createdAt: exports_external.coerce.date(),
+    updatedAt: exports_external.coerce.date(),
+    deletedAt: exports_external.coerce.date().nullable()
+  });
+  WebhookDestinationUrlSchema = exports_external.string().url().superRefine((raw, ctx) => {
+    if (!URL.canParse(raw))
+      return;
+    const url2 = new URL(raw);
+    if (url2.protocol !== "https:") {
+      ctx.addIssue({ code: "custom", message: "Webhook URLs must use HTTPS" });
+    }
+    if (url2.username || url2.password) {
+      ctx.addIssue({ code: "custom", message: "Webhook URLs cannot contain credentials" });
+    }
+    if (url2.hash) {
+      ctx.addIssue({ code: "custom", message: "Webhook URLs cannot contain fragments" });
+    }
+  });
+  CreateWebhookEndpointSchema = exports_external.object({
+    name: exports_external.string().trim().min(1).max(200),
+    url: WebhookDestinationUrlSchema,
+    eventTypes: exports_external.array(WebhookEventTypeSchema).min(1),
+    customHeaders: exports_external.array(WebhookCustomHeaderSchema).max(WEBHOOK_MAX_HEADERS).default([])
+  }).superRefine(validateWebhookHeaderCollection);
+  UpdateWebhookEndpointSchema = exports_external.object({
+    name: exports_external.string().trim().min(1).max(200).optional(),
+    url: WebhookDestinationUrlSchema.optional(),
+    eventTypes: exports_external.array(WebhookEventTypeSchema).min(1).optional(),
+    customHeaders: exports_external.array(exports_external.union([WebhookCustomHeaderSchema, RetainedWebhookCustomHeaderSchema])).max(WEBHOOK_MAX_HEADERS).optional(),
+    enabled: exports_external.boolean().optional()
+  }).superRefine(validateWebhookHeaderCollection);
+  CreateWebhookEndpointResponseSchema = exports_external.object({
+    endpoint: WebhookEndpointSchema,
+    signingSecret: exports_external.string().regex(/^whsec_[A-Za-z0-9_-]+$/)
+  });
+  WebhookDeliverySchema = exports_external.object({
+    id: WebhookDeliveryIdSchema,
+    tenantId: exports_external.string(),
+    endpointId: WebhookEndpointIdSchema,
+    eventId: WebhookEventIdSchema,
+    state: WebhookDeliveryStateSchema,
+    attemptCount: exports_external.number().int().nonnegative(),
+    nextAttemptAt: exports_external.coerce.date().nullable(),
+    latestStatusCode: exports_external.number().int().nullable(),
+    latestErrorCategory: exports_external.string().nullable(),
+    createdAt: exports_external.coerce.date(),
+    completedAt: exports_external.coerce.date().nullable()
+  });
+  WebhookDeliveryAttemptSchema = exports_external.object({
+    id: WebhookAttemptIdSchema,
+    deliveryId: WebhookDeliveryIdSchema,
+    attemptNumber: exports_external.number().int().positive(),
+    startedAt: exports_external.coerce.date(),
+    completedAt: exports_external.coerce.date(),
+    latencyMs: exports_external.number().int().nonnegative(),
+    statusCode: exports_external.number().int().nullable(),
+    errorCategory: exports_external.string().nullable(),
+    responseExcerpt: exports_external.string().nullable()
+  });
+});
+
 // ../types/src/storage/s3-paths.ts
 function assertSegment(name, value) {
   if (!value || !SEGMENT_RX.test(value)) {
@@ -66413,6 +66623,7 @@ __export(exports_src, {
   stripTenantPrefix: () => stripTenantPrefix,
   stringToUnitInterval: () => stringToUnitInterval,
   sourceLockfileInputHash: () => sourceLockfileInputHash,
+  serializeWebhookEvent: () => serializeWebhookEvent,
   scriptParamTypeAlias: () => scriptParamTypeAlias,
   schemaFileUploadMatchesField: () => schemaFileUploadMatchesField,
   s3PathFilename: () => s3PathFilename,
@@ -66482,6 +66693,7 @@ __export(exports_src, {
   hasTriggerMethod: () => hasTriggerMethod,
   hasDeclaredOutput: () => hasDeclaredOutput,
   goldenFileSatisfiedInResult: () => goldenFileSatisfiedInResult,
+  getWebhookDestinationUrlError: () => getWebhookDestinationUrlError,
   getTriggerMethods: () => getTriggerMethods,
   getSupportedFormatsLabel: () => getSupportedFormatsLabel,
   getStepSchema: () => getStepSchema,
@@ -66539,6 +66751,7 @@ __export(exports_src, {
   buildS3Path: () => buildS3Path,
   buildDiscreteJudgeSystemPrompt: () => buildDiscreteJudgeSystemPrompt,
   buildContinuousJudgeSystemPrompt: () => buildContinuousJudgeSystemPrompt,
+  boundWebhookEventOutput: () => boundWebhookEventOutput,
   assertS3PathSegment: () => assertS3PathSegment,
   aliasReplyConfigSchema: () => aliasReplyConfigSchema,
   aggregateEvaluatorCompositionScore: () => aggregateEvaluatorCompositionScore,
@@ -66561,11 +66774,31 @@ __export(exports_src, {
   WorkflowExecutionStatusSchema: () => WorkflowExecutionStatusSchema,
   WorkflowExecutionSchema: () => WorkflowExecutionSchema,
   WorkflowDefinitionSchema: () => WorkflowDefinitionSchema,
+  WebhookEventTypeSchema: () => WebhookEventTypeSchema,
+  WebhookEventIdSchema: () => WebhookEventIdSchema,
+  WebhookEventEnvelopeSchema: () => WebhookEventEnvelopeSchema,
+  WebhookEndpointSchema: () => WebhookEndpointSchema,
+  WebhookEndpointIdSchema: () => WebhookEndpointIdSchema,
+  WebhookDeliveryStateSchema: () => WebhookDeliveryStateSchema,
+  WebhookDeliverySchema: () => WebhookDeliverySchema,
+  WebhookDeliveryIdSchema: () => WebhookDeliveryIdSchema,
+  WebhookDeliveryAttemptSchema: () => WebhookDeliveryAttemptSchema,
+  WebhookCustomHeaderSchema: () => WebhookCustomHeaderSchema,
+  WebhookAttemptIdSchema: () => WebhookAttemptIdSchema,
   WaitStepSchema: () => WaitStepSchema,
   WORKFLOW_TOOL_METADATA: () => WORKFLOW_TOOL_METADATA,
   WORKFLOW_NAME_PATTERN: () => WORKFLOW_NAME_PATTERN,
   WORKFLOW_FILE_REF_JSON_SCHEMA: () => WORKFLOW_FILE_REF_JSON_SCHEMA,
   WORKFLOW_EXECUTION_STATUSES: () => WORKFLOW_EXECUTION_STATUSES,
+  WEBHOOK_RESERVED_HEADERS: () => WEBHOOK_RESERVED_HEADERS,
+  WEBHOOK_NOTIFY_CHANNEL: () => WEBHOOK_NOTIFY_CHANNEL,
+  WEBHOOK_MAX_PAYLOAD_BYTES: () => WEBHOOK_MAX_PAYLOAD_BYTES,
+  WEBHOOK_MAX_HEADER_BYTES: () => WEBHOOK_MAX_HEADER_BYTES,
+  WEBHOOK_MAX_HEADERS: () => WEBHOOK_MAX_HEADERS,
+  WEBHOOK_EVENT_TYPES: () => WEBHOOK_EVENT_TYPES,
+  WEBHOOK_DELIVERY_STATES: () => WEBHOOK_DELIVERY_STATES,
+  WEBHOOK_API_VERSION: () => WEBHOOK_API_VERSION,
+  UpdateWebhookEndpointSchema: () => UpdateWebhookEndpointSchema,
   UNSUPPORTED_SOURCE_MANIFEST_FILENAME: () => UNSUPPORTED_SOURCE_MANIFEST_FILENAME,
   TriggerTypeValue: () => TriggerTypeValue,
   TriggerTypeSchema: () => TriggerTypeSchema,
@@ -66658,6 +66891,8 @@ __export(exports_src, {
   RunTargetStringSchema: () => RunTargetStringSchema,
   RunTargetSchema: () => RunTargetSchema,
   RunTargetObjectSchema: () => RunTargetObjectSchema,
+  RunStatusChangedWebhookEventSchema: () => RunStatusChangedWebhookEventSchema,
+  RunCreatedWebhookEventSchema: () => RunCreatedWebhookEventSchema,
   RootSourceManifestSchema: () => RootSourceManifestSchema,
   RetryTerminalReasonSchema: () => RetryTerminalReasonSchema,
   RetryPolicySourceSchema: () => RetryPolicySourceSchema,
@@ -66666,11 +66901,13 @@ __export(exports_src, {
   ResolvedRetryPolicySchema: () => ResolvedRetryPolicySchema,
   ResolvedProcessorFileSchema: () => ResolvedProcessorFileSchema,
   ReleaseTagSchema: () => ReleaseTagSchema,
+  RedactedWebhookCustomHeaderSchema: () => RedactedWebhookCustomHeaderSchema,
   RUN_TARGET_SEGMENT_PATTERN: () => RUN_TARGET_SEGMENT_PATTERN,
   RUN_EXPAND_SECTIONS: () => RUN_EXPAND_SECTIONS,
   RUN_DETAIL_EXPAND_PRESET: () => RUN_DETAIL_EXPAND_PRESET,
   RUNS_TRIGGERED_BY_SYSTEM: () => RUNS_TRIGGERED_BY_SYSTEM,
   RERUN_ORIGINAL_VERSION: () => RERUN_ORIGINAL_VERSION,
+  PublicWebhookRunSchema: () => PublicWebhookRunSchema,
   ProcessorPortSchema: () => ProcessorPortSchema,
   ProcessorExecutionContextSchema: () => ProcessorExecutionContextSchema,
   ProcessorDefinitionSchema: () => ProcessorDefinitionSchema,
@@ -66803,6 +67040,8 @@ __export(exports_src, {
   DATASET_NAME_PATTERN: () => DATASET_NAME_PATTERN,
   CustomScriptConfigSchema: () => CustomScriptConfigSchema,
   CreateWorkflowDefinitionSchema: () => CreateWorkflowDefinitionSchema,
+  CreateWebhookEndpointSchema: () => CreateWebhookEndpointSchema,
+  CreateWebhookEndpointResponseSchema: () => CreateWebhookEndpointResponseSchema,
   CoordinateUnitSchema: () => CoordinateUnitSchema,
   ControlWaitOutputSchema: () => ControlWaitOutputSchema,
   ControlWaitConfigSchema: () => ControlWaitConfigSchema,
@@ -66864,6 +67103,7 @@ var init_src = __esm(() => {
   init_eval();
   init_git_source();
   init_triggers();
+  init_webhooks();
   init_typed_script();
 });
 
@@ -181580,7 +181820,7 @@ import { fileURLToPath as fileURLToPath8 } from "url";
 // package.json
 var package_default = {
   name: "@eigenpal/cli",
-  version: "0.10.20",
+  version: "0.10.22",
   description: "Eigenpal CLI — author and run document workflows from your terminal. Agent-ready.",
   keywords: [
     "eigenpal",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eigenpal/cli",
-  "version": "0.10.20",
+  "version": "0.10.22",
   "description": "Eigenpal CLI — author and run document workflows from your terminal. Agent-ready.",
   "keywords": [
     "eigenpal",