@end-close/relay 0.12.0

package/dist/forward/enrich.js

@@ -0,0 +1,77 @@
+import { hardDenyDeep, keyNameIsSensitive } from '../mask/defaults.js';
+/** Enrichment cannot be applied to this event. Parks the event; never retried. */
+export class EnrichmentError extends Error {
+}
+export class EnrichTimeoutError extends Error {
+}
+function describe(value) {
+    if (value === null)
+        return 'null';
+    if (Array.isArray(value))
+        return 'an array';
+    if (typeof value === 'number')
+        return `number ${String(value)}`;
+    if (typeof value === 'object')
+        return `a ${value.constructor?.name ?? 'non-plain object'}`;
+    return `a ${typeof value}`;
+}
+function isPlainObject(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+function assertJson(value, path) {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return;
+    if (typeof value === 'number') {
+        if (Number.isFinite(value))
+            return;
+        throw new EnrichmentError(`enriched value at "${path}" is not JSON (${describe(value)})`);
+    }
+    if (Array.isArray(value)) {
+        value.forEach((v, i) => assertJson(v, `${path}[${i}]`));
+        return;
+    }
+    if (isPlainObject(value)) {
+        for (const [k, v] of Object.entries(value)) {
+            if (keyNameIsSensitive(k)) {
+                throw new EnrichmentError(`enriched value at "${path}.${k}" matches the hard denylist (cvv/ssn/account number/...) and cannot be forwarded`);
+            }
+            assertJson(v, `${path}.${k}`);
+        }
+        return;
+    }
+    throw new EnrichmentError(`enriched value at "${path}" is not JSON (${describe(value)})`);
+}
+/**
+ * Check what an enrichment returned before it may enter a record: JSON only (no
+ * undefined-in-objects, functions, NaN, class instances), no sensitive key names at any
+ * depth, and the hard denylist applied to every string. `undefined` means "omit".
+ */
+export function validateEnrichedValue(value, field) {
+    if (value === undefined)
+        return undefined;
+    assertJson(value, field);
+    return hardDenyDeep(value);
+}
+/**
+ * Run a host callback under a deadline. A synchronous throw becomes a rejection; the timer
+ * is cleared on settle so it never keeps the process alive. A timed-out call is abandoned,
+ * not cancelled: hosts must treat enrichments as reads that may run more than once.
+ */
+export function withTimeout(run, ms) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new EnrichTimeoutError(`timed out after ${ms} ms`)), ms);
+        Promise.resolve()
+            .then(run)
+            .then((v) => {
+            clearTimeout(timer);
+            resolve(v);
+        }, (e) => {
+            clearTimeout(timer);
+            reject(e);
+        });
+    });
+}
+//# sourceMappingURL=enrich.js.map

package/dist/forward/enrich.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrich.js","sourceRoot":"","sources":["../../src/forward/enrich.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AA8BtE,kFAAkF;AAClF,MAAM,OAAO,eAAgB,SAAQ,KAAK;CAAG;AAE7C,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAA;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,kBAAkB,EAAE,CAAA;IAC1F,OAAO,KAAK,OAAO,KAAK,EAAE,CAAA;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;IAC1C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAA;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAM;QAClC,MAAM,IAAI,eAAe,CAAC,sBAAsB,IAAI,kBAAkB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACvD,OAAM;IACR,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,eAAe,CACvB,sBAAsB,IAAI,IAAI,CAAC,kFAAkF,CAClH,CAAA;YACH,CAAC;YACD,UAAU,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/B,CAAC;QACD,OAAM;IACR,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,sBAAsB,IAAI,kBAAkB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,KAAa;IACjE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACxB,OAAO,YAAY,CAAC,KAAa,CAAC,CAAA;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAI,GAAyB,EAAE,EAAU;IAClE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9F,OAAO,CAAC,OAAO,EAAE;aACd,IAAI,CAAC,GAAG,CAAC;aACT,IAAI,CACH,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,CAAC,CAAC,CAAA;QACZ,CAAC,EACD,CAAC,CAAU,EAAE,EAAE;YACb,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,CAAC,CAAC,CAAA;QACX,CAAC,CACF,CAAA;IACL,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/forward/mapper.d.ts

@@ -0,0 +1,50 @@
+import { type RouteConfig } from '../config/schema.js';
+import { type Json } from '../mask/paths.js';
+export interface EndCloseRecord {
+    date: string;
+    data_stream_key: string;
+    amount: number;
+    currency?: string;
+    direction: 'credit' | 'debit';
+    description?: string;
+    external_id: string;
+    metadata: Record<string, Json>;
+}
+export interface MapReport {
+    /** output field -> source path (values marked when transformed) */
+    mapped: Record<string, string>;
+    hashed: string[];
+    /** output fields whose value comes from a host enrichment, filled at dispatch time */
+    enriched: string[];
+    /** payload leaf paths that do NOT leave the network */
+    not_forwarded: string[];
+}
+/** An enriched field mapEvent could not fill: the dispatcher runs the host function. */
+export interface PendingEnrichment {
+    /** "metadata.<key>" or "description" */
+    field: string;
+    enrichment: string;
+    /** The source value after transforms; what the enrichment receives. */
+    input: Json;
+    source: string;
+}
+export declare class MappingError extends Error {
+}
+/** "3,762.87" | "3762.87" | "$38.00" | 3762.87 → integer cents. */
+export declare function toCents(value: Json): number;
+/** Payabli transferTime arrives as "M/D/YYYY H:mm:ss"; End Close wants an ISO date. */
+export declare function parseDate(value: Json, format: 'iso8601' | 'mdy_hms'): string;
+export interface MappedEvent {
+    /** Enriched fields are absent here until the dispatcher fills them. */
+    record: EndCloseRecord;
+    report: MapReport;
+    pending: PendingEnrichment[];
+}
+/**
+ * Map a webhook payload to an End Close record. Only fields named in the route's `map`
+ * block are forwarded — the map IS the allowlist. Every mapped value additionally passes
+ * through the hard denylist (PAN/SSN redaction), so no configuration can forward those
+ * in clear. This is the only place payload data crosses toward the network path.
+ */
+export declare function mapEvent(route: RouteConfig, payload: Json, receivedAt: string, maskingKey: Buffer): MappedEvent;
+//# sourceMappingURL=mapper.d.ts.map

package/dist/forward/mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapper.d.ts","sourceRoot":"","sources":["../../src/forward/mapper.ts"],"names":[],"mappings":"AACA,OAAO,EAML,KAAK,WAAW,EAEjB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAwB,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAGlE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,eAAe,EAAE,MAAM,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,QAAQ,GAAG,OAAO,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,sFAAsF;IACtF,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,uDAAuD;IACvD,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAED,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,uEAAuE;IACvE,KAAK,EAAE,IAAI,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf;AAED,qBAAa,YAAa,SAAQ,KAAK;CAAG;AAE1C,mEAAmE;AACnE,wBAAgB,OAAO,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,CAW3C;AAED,uFAAuF;AACvF,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAY5E;AA0BD,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,EAAE,SAAS,CAAA;IACjB,OAAO,EAAE,iBAAiB,EAAE,CAAA;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,IAAI,EACb,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,WAAW,CAuEb"}

package/dist/forward/mapper.js

@@ -0,0 +1,141 @@
+import { createHmac } from 'node:crypto';
+import { refEnrichment, refSource, refTransforms, } from '../config/schema.js';
+import { hardDenyDeep } from '../mask/defaults.js';
+import { getAtPath, leafPaths } from '../mask/paths.js';
+import { escapeRe } from '../util/strings.js';
+export class MappingError extends Error {
+}
+/** "3,762.87" | "3762.87" | "$38.00" | 3762.87 → integer cents. */
+export function toCents(value) {
+    let s;
+    if (typeof value === 'number')
+        s = String(value);
+    else if (typeof value === 'string')
+        s = value.replace(/[$,\s]/g, '');
+    else
+        throw new MappingError(`amount is not a string or number: ${JSON.stringify(value)}`);
+    if (!/^-?\d+(\.\d{1,2})?$/.test(s))
+        throw new MappingError(`unparseable amount: ${s}`);
+    const negative = s.startsWith('-');
+    if (negative)
+        s = s.slice(1);
+    const [whole = '0', frac = ''] = s.split('.');
+    const cents = Number(whole) * 100 + Number(frac.padEnd(2, '0') || '0');
+    return negative ? -cents : cents;
+}
+/** Payabli transferTime arrives as "M/D/YYYY H:mm:ss"; End Close wants an ISO date. */
+export function parseDate(value, format) {
+    if (typeof value !== 'string' || value.length === 0) {
+        throw new MappingError(`date is not a string: ${JSON.stringify(value)}`);
+    }
+    if (format === 'mdy_hms') {
+        const m = value.match(/^(\d{1,2})\/(\d{1,2})\/(\d{4})(?:\s|$)/);
+        if (!m)
+            throw new MappingError(`unparseable M/D/YYYY date: ${value}`);
+        return `${m[3]}-${m[1].padStart(2, '0')}-${m[2].padStart(2, '0')}`;
+    }
+    const parsed = new Date(value);
+    if (Number.isNaN(parsed.getTime()))
+        throw new MappingError(`unparseable date: ${value}`);
+    return parsed.toISOString().slice(0, 10);
+}
+function hashValue(maskingKey, value) {
+    const raw = typeof value === 'string' ? value : JSON.stringify(value);
+    return 'hmac256:' + createHmac('sha256', maskingKey).update(raw, 'utf8').digest('hex');
+}
+/** trim/lowercase act on strings (elementwise over arrays from wildcard paths); hash consumes anything. */
+function applyTransform(name, value, maskingKey) {
+    if (name === 'hash')
+        return hashValue(maskingKey, value);
+    if (Array.isArray(value))
+        return value.map((v) => applyTransform(name, v, maskingKey));
+    if (typeof value !== 'string')
+        return value;
+    return name === 'trim' ? value.trim() : value.toLowerCase();
+}
+function resolve(ref, payload, maskingKey) {
+    let value = getAtPath(payload, refSource(ref));
+    if (value === undefined)
+        return undefined;
+    for (const t of refTransforms(ref))
+        value = applyTransform(t, value, maskingKey);
+    return value;
+}
+function dateSource(ref) {
+    return typeof ref === 'string' ? { source: ref, format: 'iso8601' } : ref;
+}
+/**
+ * Map a webhook payload to an End Close record. Only fields named in the route's `map`
+ * block are forwarded — the map IS the allowlist. Every mapped value additionally passes
+ * through the hard denylist (PAN/SSN redaction), so no configuration can forward those
+ * in clear. This is the only place payload data crosses toward the network path.
+ */
+export function mapEvent(route, payload, receivedAt, maskingKey) {
+    const { map: m } = route;
+    const report = { mapped: {}, hashed: [], enriched: [], not_forwarded: [] };
+    const pending = [];
+    const usedPaths = new Set();
+    const use = (field, ref) => {
+        const value = resolve(ref, payload, maskingKey);
+        if (value === undefined)
+            return undefined;
+        const source = refSource(ref);
+        usedPaths.add(source);
+        const enrichment = refEnrichment(ref);
+        if (enrichment !== undefined) {
+            // The host fills this field later; the record leaves here without it.
+            report.mapped[field] = `${source} → enrich:${enrichment}`;
+            report.enriched.push(field);
+            pending.push({ field, enrichment, input: value, source });
+            return undefined;
+        }
+        report.mapped[field] = source;
+        if (refTransforms(ref).includes('hash'))
+            report.hashed.push(field);
+        return value;
+    };
+    const externalId = use('external_id', m.external_id);
+    if (typeof externalId !== 'string' && typeof externalId !== 'number') {
+        throw new MappingError(`missing external id at ${refSource(m.external_id)}`);
+    }
+    const amount = toCents(use('amount', m.amount) ?? null);
+    let date;
+    if (m.date) {
+        const { source, format } = dateSource(m.date);
+        date = parseDate(getAtPath(payload, source) ?? null, format);
+        report.mapped['date'] = source;
+        usedPaths.add(source);
+    }
+    else {
+        date = receivedAt.slice(0, 10);
+        report.mapped['date'] = '(receive time)';
+    }
+    const metadata = {};
+    for (const [outputKey, ref] of Object.entries(m.metadata)) {
+        const value = use(`metadata.${outputKey}`, ref);
+        if (value !== undefined)
+            metadata[outputKey] = hardDenyDeep(value);
+    }
+    const record = {
+        date,
+        data_stream_key: m.data_stream_key,
+        amount,
+        direction: m.direction,
+        external_id: String(externalId),
+        metadata,
+    };
+    if (m.currency)
+        record.currency = m.currency;
+    if (m.description) {
+        const desc = use('description', m.description);
+        if (typeof desc === 'string')
+            record.description = hardDenyDeep(desc);
+    }
+    // Everything in the payload that was not explicitly mapped stays local.
+    const wildcardPrefixes = [...usedPaths]
+        .filter((p) => p.includes('*'))
+        .map((p) => new RegExp('^' + p.split('.').map((s) => (s === '*' ? '[^.]+' : escapeRe(s))).join('\\.') + '$'));
+    report.not_forwarded = leafPaths(payload).filter((leaf) => !usedPaths.has(leaf) && !wildcardPrefixes.some((re) => re.test(leaf)));
+    return { record, report, pending };
+}
+//# sourceMappingURL=mapper.js.map

package/dist/forward/mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapper.js","sourceRoot":"","sources":["../../src/forward/mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EACL,aAAa,EACb,SAAS,EACT,aAAa,GAKd,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAa,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAiC7C,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG;AAE1C,mEAAmE;AACnE,MAAM,UAAU,OAAO,CAAC,KAAW;IACjC,IAAI,CAAS,CAAA;IACb,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;SAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;;QAC/D,MAAM,IAAI,YAAY,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACzF,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAA;IACtF,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,QAAQ;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5B,MAAM,CAAC,KAAK,GAAG,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAA;IACtE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;AAClC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,SAAS,CAAC,KAAW,EAAE,MAA6B;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC/D,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAA;QACrE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAA;IACxF,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB,EAAE,KAAW;IAChD,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACrE,OAAO,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxF,CAAC;AAED,2GAA2G;AAC3G,SAAS,cAAc,CAAC,IAAmB,EAAE,KAAW,EAAE,UAAkB;IAC1E,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAA;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,GAAuB,EAAE,OAAa,EAAE,UAAkB;IACzE,IAAI,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IAChF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;AAC3E,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,KAAkB,EAClB,OAAa,EACb,UAAkB,EAClB,UAAkB;IAElB,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,KAAK,CAAA;IACxB,MAAM,MAAM,GAAc,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAA;IACrF,MAAM,OAAO,GAAwB,EAAE,CAAA;IACvC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IAEnC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,GAAuB,EAAoB,EAAE;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACzC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7B,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACrB,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,sEAAsE;YACtE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,aAAa,UAAU,EAAE,CAAA;YACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC3B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;YACzD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAA;QAC7B,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClE,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,CAAA;IACpD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,YAAY,CAAC,0BAA0B,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAA;IAEvD,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,MAAM,CAAC,CAAA;QAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAA;QAC9B,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAA;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAyB,EAAE,CAAA;IACzC,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,SAAS,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,IAAI;QACJ,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,MAAM;QACN,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;QAC/B,QAAQ;KACT,CAAA;IACD,IAAI,CAAC,CAAC,QAAQ;QAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAA;IAC5C,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC,CAAA;QAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACvE,CAAC;IAED,wEAAwE;IACxE,MAAM,gBAAgB,GAAG,CAAC,GAAG,SAAS,CAAC;SACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;IAC/G,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,CAC9C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAChF,CAAA;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACpC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,36 @@
+export { createRelay, parseRoutes, assertKnownSources, assertKnownEnrichments, routeEnrichments } from './engine/relay.js';
+export type { Relay, RelayOptions, DispatchOnceResult, FlushResult } from './engine/relay.js';
+export type { DispatchCounts } from './forward/dispatcher.js';
+export { DEFAULT_DISPATCH, DEFAULT_RETENTION } from './engine/settings.js';
+export type { DispatchSettings, RetentionSettings } from './engine/settings.js';
+export type { IngestResult, IngestResultOutcome } from './engine/ingest.js';
+export { eventIdempotencyKey } from './engine/ingest.js';
+export * from './engine/store.js';
+export { MemoryEventStore, memoryStore } from './engine/memory-store.js';
+export { aesGcmCodec, plainCodec } from './engine/codec.js';
+export type { PayloadCodec } from './engine/codec.js';
+export { RelayHooks } from './engine/hooks.js';
+export type { RelayEvents, RelayEventName, RelayHandler, IngestOutcome, ForwardResult, EnrichOutcome, EngineErrorKind, } from './engine/hooks.js';
+export { envSecrets, staticSecrets, hasSecret, requireSecret, SecretUnavailableError } from './engine/secrets.js';
+export type { SecretResolver } from './engine/secrets.js';
+export { noopLogger, consoleLogger } from './logger.js';
+export type { Logger, LogMeta } from './logger.js';
+export * from './config/schema.js';
+export { mapEvent, toCents, parseDate, MappingError } from './forward/mapper.js';
+export type { EndCloseRecord, MapReport, MappedEvent, PendingEnrichment } from './forward/mapper.js';
+export { EnrichmentError, EnrichTimeoutError, validateEnrichedValue, withTimeout } from './forward/enrich.js';
+export type { Enrichment, EnrichContext } from './forward/enrich.js';
+export { EndCloseClient, TransientHttpError, PermanentHttpError } from './forward/endclose-client.js';
+export type { BulkRequestSummary, BulkResultItem } from './forward/endclose-client.js';
+export { adapterFor, hasAdapter } from './ingest/adapters/registry.js';
+export { payabliAdapter } from './ingest/adapters/payabli.js';
+export { genericHmacAdapter } from './ingest/adapters/generic-hmac.js';
+export { headerValue } from './ingest/adapters/types.js';
+export type { ProcessorAdapter, RawRequest, VerifyContext, VerifyResult } from './ingest/adapters/types.js';
+export { hardDenyValue, hardDenyDeep, keyNameIsSensitive, REDACTED } from './mask/defaults.js';
+export { getAtPath, leafPaths } from './mask/paths.js';
+export type { Json } from './mask/paths.js';
+export { encrypt, decrypt } from './crypto/at-rest.js';
+export { deriveKey } from './crypto/keys.js';
+export { jsonTopLevelKeys, requestHeaderNames } from './util/payload-shape.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAC1H,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC7F,YAAY,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAC1E,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAC/E,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAExD,cAAc,mBAAmB,CAAA;AACjC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACxE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC3D,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,YAAY,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACZ,aAAa,EACb,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACjH,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACvD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAElD,cAAc,oBAAoB,CAAA;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAChF,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACpG,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAC7G,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AACrG,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AACxD,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAC3G,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC9F,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACtD,YAAY,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/index.js

@@ -0,0 +1,24 @@
+// @end-close/relay — the embeddable store-and-forward engine behind the End Close relay.
+export { createRelay, parseRoutes, assertKnownSources, assertKnownEnrichments, routeEnrichments } from './engine/relay.js';
+export { DEFAULT_DISPATCH, DEFAULT_RETENTION } from './engine/settings.js';
+export { eventIdempotencyKey } from './engine/ingest.js';
+export * from './engine/store.js';
+export { MemoryEventStore, memoryStore } from './engine/memory-store.js';
+export { aesGcmCodec, plainCodec } from './engine/codec.js';
+export { RelayHooks } from './engine/hooks.js';
+export { envSecrets, staticSecrets, hasSecret, requireSecret, SecretUnavailableError } from './engine/secrets.js';
+export { noopLogger, consoleLogger } from './logger.js';
+export * from './config/schema.js';
+export { mapEvent, toCents, parseDate, MappingError } from './forward/mapper.js';
+export { EnrichmentError, EnrichTimeoutError, validateEnrichedValue, withTimeout } from './forward/enrich.js';
+export { EndCloseClient, TransientHttpError, PermanentHttpError } from './forward/endclose-client.js';
+export { adapterFor, hasAdapter } from './ingest/adapters/registry.js';
+export { payabliAdapter } from './ingest/adapters/payabli.js';
+export { genericHmacAdapter } from './ingest/adapters/generic-hmac.js';
+export { headerValue } from './ingest/adapters/types.js';
+export { hardDenyValue, hardDenyDeep, keyNameIsSensitive, REDACTED } from './mask/defaults.js';
+export { getAtPath, leafPaths } from './mask/paths.js';
+export { encrypt, decrypt } from './crypto/at-rest.js';
+export { deriveKey } from './crypto/keys.js';
+export { jsonTopLevelKeys, requestHeaderNames } from './util/payload-shape.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAG1H,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAG1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAExD,cAAc,mBAAmB,CAAA;AACjC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACxE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE3D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAU9C,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAEjH,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAGvD,cAAc,oBAAoB,CAAA;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEhF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAE7G,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAErG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC9F,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/ingest/adapters/generic-hmac.d.ts

@@ -0,0 +1,3 @@
+import { type ProcessorAdapter } from './types.js';
+export declare const genericHmacAdapter: ProcessorAdapter;
+//# sourceMappingURL=generic-hmac.d.ts.map

package/dist/ingest/adapters/generic-hmac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-hmac.d.ts","sourceRoot":"","sources":["../../../src/ingest/adapters/generic-hmac.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,gBAAgB,EAItB,MAAM,YAAY,CAAA;AAMnB,eAAO,MAAM,kBAAkB,EAAE,gBAsDhC,CAAA"}

package/dist/ingest/adapters/generic-hmac.js

@@ -0,0 +1,60 @@
+import { createHash, createHmac, timingSafeEqual } from 'node:crypto';
+import { getAtPath } from '../../mask/paths.js';
+import { headerValue, } from './types.js';
+// Generic HMAC-signature adapter: covers processors that sign `body` or `timestamp.body`
+// with a shared secret. Configuration lives entirely in the route's auth block, so most
+// future processors need no code.
+export const genericHmacAdapter = {
+    name: 'generic_hmac',
+    verify(req, route, ctx) {
+        if (route.auth.mode !== 'hmac')
+            return { ok: false, reason: 'route auth mode mismatch' };
+        const auth = route.auth;
+        let signedContent = req.rawBody;
+        if (auth.signed_content === 'timestamp.body') {
+            if (!auth.timestamp_header)
+                return { ok: false, reason: 'timestamp_header not configured' };
+            const ts = headerValue(req.headers, auth.timestamp_header);
+            if (!ts)
+                return { ok: false, reason: `missing ${auth.timestamp_header} header` };
+            const skew = Math.abs(Date.now() / 1000 - Number(ts));
+            if (!Number.isFinite(skew) || skew > auth.tolerance_seconds) {
+                return { ok: false, reason: 'stale timestamp' };
+            }
+            signedContent = Buffer.concat([Buffer.from(`${ts}.`, 'utf8'), req.rawBody]);
+        }
+        const presented = headerValue(req.headers, auth.header);
+        if (!presented)
+            return { ok: false, reason: `missing ${auth.header} header` };
+        const expectedHex = createHmac(auth.algorithm, ctx.secret).update(signedContent).digest('hex');
+        // Accept optional "sha256=" style prefixes.
+        const presentedHex = (presented.includes('=') && !/^[0-9a-f]+$/i.test(presented)
+            ? presented.slice(presented.indexOf('=') + 1)
+            : presented).toLowerCase();
+        const a = Buffer.from(expectedHex, 'utf8');
+        const b = Buffer.from(presentedHex, 'utf8');
+        if (a.length !== b.length) {
+            timingSafeEqual(a, a);
+            return { ok: false, reason: 'bad signature' };
+        }
+        if (!timingSafeEqual(a, b))
+            return { ok: false, reason: 'bad signature' };
+        return { ok: true };
+    },
+    extractEventId(body, req, route) {
+        if (route.auth.mode === 'hmac' && route.auth.event_id) {
+            const id = getAtPath(body, route.auth.event_id);
+            if ((typeof id === 'string' && id.length > 0) || typeof id === 'number')
+                return String(id);
+        }
+        return 'sha256:' + createHash('sha256').update(req.rawBody).digest('hex');
+    },
+    extractEventType(body, _req, route) {
+        if (route.auth.mode === 'hmac' && route.auth.event_type) {
+            const t = getAtPath(body, route.auth.event_type);
+            return typeof t === 'string' ? t : null;
+        }
+        return null;
+    },
+};
+//# sourceMappingURL=generic-hmac.js.map

package/dist/ingest/adapters/generic-hmac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-hmac.js","sourceRoot":"","sources":["../../../src/ingest/adapters/generic-hmac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAErE,OAAO,EAAE,SAAS,EAAa,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EACL,WAAW,GAKZ,MAAM,YAAY,CAAA;AAEnB,yFAAyF;AACzF,wFAAwF;AACxF,kCAAkC;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAqB;IAClD,IAAI,EAAE,cAAc;IAEpB,MAAM,CAAC,GAAe,EAAE,KAAkB,EAAE,GAAkB;QAC5D,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAA;QACxF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QAEvB,IAAI,aAAa,GAAW,GAAG,CAAC,OAAO,CAAA;QACvC,IAAI,IAAI,CAAC,cAAc,KAAK,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,gBAAgB;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAA;YAC3F,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAC1D,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,gBAAgB,SAAS,EAAE,CAAA;YAChF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;YACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;YACjD,CAAC;YACD,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QAC7E,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACvD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,MAAM,SAAS,EAAE,CAAA;QAE7E,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC9F,4CAA4C;QAC5C,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;YAC9E,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC,CAAC,SAAS,CACZ,CAAC,WAAW,EAAE,CAAA;QAEf,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;QAC/C,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;QACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAED,cAAc,CAAC,IAAU,EAAE,GAAe,EAAE,KAAkB;QAC5D,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC/C,IAAI,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAA;QAC5F,CAAC;QACD,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3E,CAAC;IAED,gBAAgB,CAAC,IAAU,EAAE,IAAgB,EAAE,KAAkB;QAC/D,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAChD,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACzC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/ingest/adapters/payabli.d.ts

@@ -0,0 +1,3 @@
+import { type ProcessorAdapter } from './types.js';
+export declare const payabliAdapter: ProcessorAdapter;
+//# sourceMappingURL=payabli.d.ts.map

package/dist/ingest/adapters/payabli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payabli.d.ts","sourceRoot":"","sources":["../../../src/ingest/adapters/payabli.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,gBAAgB,EAItB,MAAM,YAAY,CAAA;AAyBnB,eAAO,MAAM,cAAc,EAAE,gBAgC5B,CAAA"}

package/dist/ingest/adapters/payabli.js

@@ -0,0 +1,57 @@
+import { createHash, timingSafeEqual } from 'node:crypto';
+import { getAtPath } from '../../mask/paths.js';
+import { headerValue, } from './types.js';
+// Payabli does not sign webhooks. Trust boundary: a customer-defined static header
+// (configured on the Payabli notification via webHeaderParameters) compared in constant
+// time, plus an optional source-IP allowlist (Payabli publishes one static IP per env:
+// sandbox 52.3.204.115, production 54.166.54.170).
+function constantTimeEquals(a, b) {
+    const ab = Buffer.from(a, 'utf8');
+    const bb = Buffer.from(b, 'utf8');
+    if (ab.length !== bb.length) {
+        // Compare against self to keep timing independent of the mismatch position.
+        timingSafeEqual(ab, ab);
+        return false;
+    }
+    return timingSafeEqual(ab, bb);
+}
+// Stable-ID field per payload Event type, per Payabli's OpenAPI webhook schemas.
+const EVENT_ID_PATHS = {
+    TransferFunded: 'transferId', // payout_batch_settlement_funded
+    PayOutBatchPaid: 'BatchId', // payout_batch_paid
+    ApprovedPayment: 'TransactionId', // transaction-level; field names pending the customer's sample
+};
+export const payabliAdapter = {
+    name: 'payabli',
+    verify(req, route, ctx) {
+        if (route.auth.mode !== 'static_header') {
+            return { ok: false, reason: 'route auth mode mismatch' };
+        }
+        if (route.auth.allowed_ips.length > 0 && !route.auth.allowed_ips.includes(req.remoteIp)) {
+            return { ok: false, reason: 'source ip not allowed' };
+        }
+        const presented = headerValue(req.headers, route.auth.header);
+        if (!presented)
+            return { ok: false, reason: `missing ${route.auth.header} header` };
+        if (!constantTimeEquals(presented, ctx.secret))
+            return { ok: false, reason: 'bad auth header' };
+        return { ok: true };
+    },
+    extractEventId(body, req) {
+        const eventType = getAtPath(body, 'Event');
+        if (typeof eventType === 'string') {
+            const path = EVENT_ID_PATHS[eventType];
+            if (path) {
+                const id = getAtPath(body, path);
+                if (typeof id === 'string' && id.length > 0)
+                    return `${eventType}:${id}`;
+            }
+        }
+        return 'sha256:' + createHash('sha256').update(req.rawBody).digest('hex');
+    },
+    extractEventType(body) {
+        const t = getAtPath(body, 'Event');
+        return typeof t === 'string' ? t : null;
+    },
+};
+//# sourceMappingURL=payabli.js.map

package/dist/ingest/adapters/payabli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payabli.js","sourceRoot":"","sources":["../../../src/ingest/adapters/payabli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEzD,OAAO,EAAE,SAAS,EAAa,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EACL,WAAW,GAKZ,MAAM,YAAY,CAAA;AAEnB,mFAAmF;AACnF,wFAAwF;AACxF,uFAAuF;AACvF,mDAAmD;AAEnD,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACjC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACjC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5B,4EAA4E;QAC5E,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QACvB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;AAChC,CAAC;AAED,iFAAiF;AACjF,MAAM,cAAc,GAA2B;IAC7C,cAAc,EAAE,YAAY,EAAE,iCAAiC;IAC/D,eAAe,EAAE,SAAS,EAAE,oBAAoB;IAChD,eAAe,EAAE,eAAe,EAAE,+DAA+D;CAClG,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAqB;IAC9C,IAAI,EAAE,SAAS;IAEf,MAAM,CAAC,GAAe,EAAE,KAAkB,EAAE,GAAkB;QAC5D,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAA;QAC1D,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAA;QACvD,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7D,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,EAAE,CAAA;QACnF,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;QAC/F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAED,cAAc,CAAC,IAAU,EAAE,GAAe;QACxC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1C,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;YACtC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;gBAChC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,GAAG,SAAS,IAAI,EAAE,EAAE,CAAA;YAC1E,CAAC;QACH,CAAC;QACD,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3E,CAAC;IAED,gBAAgB,CAAC,IAAU;QACzB,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAClC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACzC,CAAC;CACF,CAAA"}

package/dist/ingest/adapters/registry.d.ts

@@ -0,0 +1,4 @@
+import type { ProcessorAdapter } from './types.js';
+export declare function adapterFor(source: string, extra?: Record<string, ProcessorAdapter>): ProcessorAdapter;
+export declare function hasAdapter(source: string, extra?: Record<string, ProcessorAdapter>): boolean;
+//# sourceMappingURL=registry.d.ts.map

package/dist/ingest/adapters/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/ingest/adapters/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AASlD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACvC,gBAAgB,CAIlB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,OAAO,CAE5F"}

package/dist/ingest/adapters/registry.js

@@ -0,0 +1,16 @@
+import { payabliAdapter } from './payabli.js';
+import { genericHmacAdapter } from './generic-hmac.js';
+const adapters = {
+    payabli: payabliAdapter,
+    generic_hmac: genericHmacAdapter,
+};
+export function adapterFor(source, extra) {
+    const adapter = extra?.[source] ?? adapters[source];
+    if (!adapter)
+        throw new Error(`no adapter for source: ${source}`);
+    return adapter;
+}
+export function hasAdapter(source, extra) {
+    return Boolean(extra?.[source] ?? adapters[source]);
+}
+//# sourceMappingURL=registry.js.map

package/dist/ingest/adapters/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/ingest/adapters/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEtD,MAAM,QAAQ,GAAqC;IACjD,OAAO,EAAE,cAAc;IACvB,YAAY,EAAE,kBAAkB;CACjC,CAAA;AAED,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,KAAwC;IAExC,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAA;IACjE,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAwC;IACjF,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;AACrD,CAAC"}

package/dist/ingest/adapters/types.d.ts

@@ -0,0 +1,28 @@
+import type { RouteConfig } from '../../config/schema.js';
+import type { Json } from '../../mask/paths.js';
+export interface RawRequest {
+    rawBody: Buffer;
+    headers: Record<string, string | string[] | undefined>;
+    remoteIp: string;
+}
+export type VerifyResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Resolved by the engine before verification so adapters stay pure and synchronous. */
+export interface VerifyContext {
+    /** The value of the route's `auth.secret_env` reference. */
+    secret: string;
+}
+export interface ProcessorAdapter {
+    name: string;
+    /** Verify authenticity over the raw bytes. Must be constant-time on secret comparisons. */
+    verify(req: RawRequest, route: RouteConfig, ctx: VerifyContext): VerifyResult;
+    /** Stable per-event ID used for idempotency. Falls back to a raw-body hash. */
+    extractEventId(body: Json, req: RawRequest, route: RouteConfig): string;
+    extractEventType(body: Json, req: RawRequest, route: RouteConfig): string | null;
+}
+export declare function headerValue(headers: Record<string, string | string[] | undefined>, name: string): string | undefined;
+//# sourceMappingURL=types.d.ts.map

package/dist/ingest/adapters/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/ingest/adapters/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAA;AAE/C,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACtD,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvE,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,2FAA2F;IAC3F,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,GAAG,YAAY,CAAA;IAC7E,+EAA+E;IAC/E,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,MAAM,CAAA;IACvE,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;CACjF;AAED,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAGpB"}

package/dist/ingest/adapters/types.js

@@ -0,0 +1,5 @@
+export function headerValue(headers, name) {
+    const v = headers[name.toLowerCase()];
+    return Array.isArray(v) ? v[0] : v;
+}
+//# sourceMappingURL=types.js.map

package/dist/ingest/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/ingest/adapters/types.ts"],"names":[],"mappings":"AA0BA,MAAM,UAAU,WAAW,CACzB,OAAsD,EACtD,IAAY;IAEZ,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACpC,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,12 @@
+export type LogMeta = Record<string, string | number | boolean | null | undefined>;
+/** The logging contract the engine depends on. Any host can supply its own implementation. */
+export interface Logger {
+    debug(msg: string, meta?: LogMeta): void;
+    info(msg: string, meta?: LogMeta): void;
+    warn(msg: string, meta?: LogMeta): void;
+    error(msg: string, meta?: LogMeta): void;
+}
+export declare const noopLogger: Logger;
+/** console-backed logger at warn level and above. */
+export declare const consoleLogger: Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;AAElF,8FAA8F;AAC9F,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACvC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IACvC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;CACzC;AAED,eAAO,MAAM,UAAU,EAAE,MAKxB,CAAA;AAED,qDAAqD;AACrD,eAAO,MAAM,aAAa,EAAE,MAK3B,CAAA"}