@endora-commerce/mod-webhooks 0.100.0

package/dist/backend/services/webhook-delivery-worker.js

@@ -0,0 +1,70 @@
+import { createHmac } from 'crypto';
+export function createDeliveryProcessor(deps = {}) {
+    const { fetchFn, timeoutMs = 10_000, onFailure, recordDelivery } = deps;
+    const record = async (input) => {
+        if (!recordDelivery)
+            return;
+        try {
+            await recordDelivery(input);
+        }
+        catch {
+            // Bookkeeping is best-effort — never let it mask the delivery outcome.
+        }
+    };
+    return async function process(job) {
+        const doFetch = fetchFn ?? globalThis.fetch;
+        const { webhookId, url, secret, payload, eventId, eventType } = job.data;
+        const body = JSON.stringify(payload);
+        const signature = createHmac('sha256', secret).update(body, 'utf8').digest('hex');
+        const attemptCount = job.attemptsMade + 1;
+        const maxAttempts = job.opts?.attempts ?? 1;
+        const abort = new AbortController();
+        const timer = setTimeout(() => abort.abort(), timeoutMs);
+        let responseStatus;
+        try {
+            const response = await doFetch(url, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-Webhook-Event-Id': eventId,
+                    'X-Webhook-Event-Type': eventType,
+                    'X-Webhook-Signature-256': signature,
+                    'X-Webhook-Attempt': String(attemptCount),
+                },
+                body,
+                signal: abort.signal,
+            });
+            responseStatus = response.status;
+            if (!response.ok) {
+                throw new Error(`webhook receiver returned ${response.status}`);
+            }
+            await record({
+                webhookId,
+                eventId,
+                eventType,
+                payload,
+                status: 'succeeded',
+                attemptCount,
+                lastResponseStatus: response.status,
+            });
+        }
+        catch (err) {
+            onFailure?.(err, job);
+            await record({
+                webhookId,
+                eventId,
+                eventType,
+                payload,
+                status: attemptCount >= maxAttempts ? 'dead_lettered' : 'failed',
+                attemptCount,
+                lastError: err instanceof Error ? err.message : String(err),
+                ...(responseStatus !== undefined ? { lastResponseStatus: responseStatus } : {}),
+            });
+            throw err;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+}
+//# sourceMappingURL=webhook-delivery-worker.js.map

package/dist/backend/services/webhook-delivery-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery-worker.js","sourceRoot":"","sources":["../../../src/backend/services/webhook-delivery-worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAqCpC,MAAM,UAAU,uBAAuB,CAAC,OAA8B,EAAE;IACtE,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAExE,MAAM,MAAM,GAAG,KAAK,EAAE,KAA0B,EAAiB,EAAE;QACjE,IAAI,CAAC,cAAc;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,KAAK,UAAU,OAAO,CAAC,GAAwB;QACpD,MAAM,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;QAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,CAAC;QAE5C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,cAAkC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBAClC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,oBAAoB,EAAE,OAAO;oBAC7B,sBAAsB,EAAE,SAAS;oBACjC,yBAAyB,EAAE,SAAS;oBACpC,mBAAmB,EAAE,MAAM,CAAC,YAAY,CAAC;iBAC1C;gBACD,IAAI;gBACJ,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,MAAM,CAAC;gBACX,SAAS;gBACT,OAAO;gBACP,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,WAAW;gBACnB,YAAY;gBACZ,kBAAkB,EAAE,QAAQ,CAAC,MAAM;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtB,MAAM,MAAM,CAAC;gBACX,SAAS;gBACT,OAAO;gBACP,SAAS;gBACT,OAAO;gBACP,MAAM,EAAE,YAAY,IAAI,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ;gBAChE,YAAY;gBACZ,SAAS,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAC3D,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/backend/services/webhook-queue.d.ts

@@ -0,0 +1,24 @@
+import { Queue, Worker, type Processor, type QueueOptions, type WorkerOptions } from 'bullmq';
+import type { Redis } from 'ioredis';
+/**
+ * BullMQ queue manager for outbound webhook delivery (R-13).
+ *
+ * - Single queue `webhook.deliver` with exponential-backoff retries.
+ * - Payloads are opaque; the worker signs + POSTs them.
+ * - Dead-letter is handled by BullMQ's `failed` job state — consumable by the admin
+ *   panel's failed-deliveries view.
+ */
+export interface WebhookJobData {
+    webhookId: string;
+    eventId: string;
+    eventType: string;
+    payload: unknown;
+    /** Receiver URL at enqueue time (copied so URL changes don't retroactively affect queued jobs). */
+    url: string;
+    /** HMAC signing secret at enqueue time. */
+    secret: string;
+}
+export declare const WEBHOOK_QUEUE_NAME = "webhook.deliver";
+export declare function createWebhookQueue(redis: Redis, overrides?: Partial<QueueOptions>): Queue<WebhookJobData>;
+export declare function createWebhookWorker(redis: Redis, processor: Processor<WebhookJobData>, overrides?: Partial<WorkerOptions>): Worker<WebhookJobData>;
+//# sourceMappingURL=webhook-queue.d.ts.map

package/dist/backend/services/webhook-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-queue.d.ts","sourceRoot":"","sources":["../../../src/backend/services/webhook-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,QAAQ,CAAC;AAE9F,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC;;;;;;;GAOG;AAEH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,mGAAmG;IACnG,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AAKpD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAYzG;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,SAAS,CAAC,cAAc,CAAC,EACpC,SAAS,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GACjC,MAAM,CAAC,cAAc,CAAC,CAexB"}

package/dist/backend/services/webhook-queue.js

@@ -0,0 +1,31 @@
+import { Queue, Worker } from 'bullmq';
+import { enterSystemScope } from '@endora-commerce/platform/kernel';
+export const WEBHOOK_QUEUE_NAME = 'webhook.deliver';
+const DEFAULT_ATTEMPTS = 8;
+const DEFAULT_BACKOFF = { type: 'exponential', delay: 1_000 };
+export function createWebhookQueue(redis, overrides) {
+    const options = {
+        connection: redis,
+        defaultJobOptions: {
+            attempts: DEFAULT_ATTEMPTS,
+            backoff: DEFAULT_BACKOFF,
+            removeOnComplete: { count: 500 },
+            removeOnFail: { count: 5_000 },
+        },
+        ...overrides,
+    };
+    return new Queue(WEBHOOK_QUEUE_NAME, options);
+}
+export function createWebhookWorker(redis, processor, overrides) {
+    const options = {
+        connection: redis,
+        concurrency: 8,
+        ...overrides,
+    };
+    // Feature 072 (T033) — a delivery job runs detached, so it establishes its
+    // own scope here. Before this it established NOTHING: it survived only
+    // because `Webhook` and `WebhookDelivery` carry no automatic tenant filter,
+    // which is a fact about their classification, not a guarantee.
+    return new Worker(WEBHOOK_QUEUE_NAME, (job) => enterSystemScope('webhooks: deliver', () => processor(job)), options);
+}
+//# sourceMappingURL=webhook-queue.js.map

package/dist/backend/services/webhook-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-queue.js","sourceRoot":"","sources":["../../../src/backend/services/webhook-queue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAyD,MAAM,QAAQ,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAuBpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEpD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,aAAsB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAEvE,MAAM,UAAU,kBAAkB,CAAC,KAAY,EAAE,SAAiC;IAChF,MAAM,OAAO,GAAiB;QAC5B,UAAU,EAAE,KAAK;QACjB,iBAAiB,EAAE;YACjB,QAAQ,EAAE,gBAAgB;YAC1B,OAAO,EAAE,eAAe;YACxB,gBAAgB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;YAChC,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;SAC/B;QACD,GAAG,SAAS;KACb,CAAC;IACF,OAAO,IAAI,KAAK,CAAiB,kBAAkB,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAY,EACZ,SAAoC,EACpC,SAAkC;IAElC,MAAM,OAAO,GAAkB;QAC7B,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,CAAC;QACd,GAAG,SAAS;KACb,CAAC;IACF,2EAA2E;IAC3E,uEAAuE;IACvE,4EAA4E;IAC5E,+DAA+D;IAC/D,OAAO,IAAI,MAAM,CACf,kBAAkB,EAClB,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EACpE,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/backend/services/webhook-service.d.ts

@@ -0,0 +1,82 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { Webhook } from '../entities/webhook.entity.js';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+import { WebhookDelivery } from '../entities/webhook-delivery.entity.js';
+/**
+ * WebhookService (T229) — admin CRUD over Webhook subscriptions plus
+ * read-side queries over the WebhookDelivery audit table.
+ *
+ * Each created Webhook gets a freshly minted 64-char hex secret; the worker
+ * uses the same secret to HMAC-sign each outbound POST.
+ */
+export declare class WebhookService {
+    #private;
+    private readonly emFactory;
+    private readonly auditLog?;
+    constructor(emFactory: () => EntityManager, auditLog?: AuditPort | undefined);
+    list(): Promise<Webhook[]>;
+    getById(id: string): Promise<Webhook>;
+    create(input: {
+        name: string;
+        url: string;
+        eventTypes: string[];
+        /** Feature 062 — optional org binding; null/omitted = platform-wide. */
+        organizationId?: string | null;
+        createdByAdminUserId?: string;
+    }): Promise<Webhook>;
+    update(id: string, patch: {
+        name?: string | undefined;
+        url?: string | undefined;
+        eventTypes?: string[] | undefined;
+        status?: 'active' | 'paused' | undefined;
+        /** Feature 062 — set to bind, null to make platform-wide. */
+        organizationId?: string | null | undefined;
+    }): Promise<Webhook>;
+    remove(id: string): Promise<void>;
+    /**
+     * Re-queue a failed or dead-lettered delivery: copy the source delivery into
+     * a fresh `pending` row referencing the same event/payload. The actual
+     * outbound POST is performed by the BullMQ worker once the job is enqueued
+     * by the production composition root; the new row is the audit trail.
+     *
+     * Only `failed` and `dead_lettered` rows can be replayed — calling this on
+     * an already-pending or successful row is a no-op signalled via 409.
+     */
+    replay(deliveryId: string): Promise<WebhookDelivery>;
+    listDeliveries(filter?: {
+        webhookId?: string;
+        status?: 'pending' | 'in_flight' | 'succeeded' | 'failed' | 'dead_lettered';
+        limit?: number;
+    }): Promise<WebhookDelivery[]>;
+    /**
+     * Look up active subscriptions for a given event type — used by the
+     * event-bridge to decide which receivers should get a delivery.
+     *
+     * Feature 062 (contracts/order-webhooks.md §2): `organizationId` is the
+     * value extracted from the event payload. Platform-wide subscriptions
+     * (`organizationId` NULL) always match; org-bound subscriptions match only
+     * their own organization's events and never an event without one
+     * (fail closed — Principle XI).
+     */
+    findActiveByEventType(eventType: string, organizationId: string | null): Promise<Array<{
+        webhookId: string;
+        url: string;
+        secret: string;
+    }>>;
+    /**
+     * Records an attempted delivery. The worker (webhook-delivery-worker.ts)
+     * is the canonical caller via the BullMQ pipeline; this method also lets
+     * tests + admin replay flows insert audit rows directly.
+     */
+    recordDelivery(input: {
+        webhookId: string;
+        eventId: string;
+        eventType: string;
+        payload: unknown;
+        status: WebhookDelivery['status'];
+        attemptCount: number;
+        lastResponseStatus?: number;
+        lastError?: string;
+    }): Promise<WebhookDelivery>;
+}
+//# sourceMappingURL=webhook-service.d.ts.map

package/dist/backend/services/webhook-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/webhook-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAExD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAGzE;;;;;;GAMG;AACH,qBAAa,cAAc;;IAEvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBADT,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,CAAC,EAAE,SAAS,YAAA;IASjC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAK1B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOrC,MAAM,CAAC,KAAK,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,wEAAwE;QACxE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,OAAO,CAAC;IAsBd,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACzB,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAClC,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;QACzC,6DAA6D;QAC7D,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;KAC5C,GACA,OAAO,CAAC,OAAO,CAAC;IAkBb,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvC;;;;;;;;OAQG;IACG,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA2BpD,cAAc,CAAC,MAAM,GAAE;QAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,eAAe,CAAC;QAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;KACX,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAWnC;;;;;;;;;OASG;IACG,qBAAqB,CACzB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IASrE;;;;OAIG;IACG,cAAc,CAAC,KAAK,EAAE;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;QAClC,YAAY,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,eAAe,CAAC;CAmB7B"}

package/dist/backend/services/webhook-service.js

@@ -0,0 +1,176 @@
+import { randomBytes } from 'crypto';
+import { ERROR_CODES } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { Webhook } from '../entities/webhook.entity.js';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+import { WebhookDelivery } from '../entities/webhook-delivery.entity.js';
+import { subscriptionReceivesOrganization } from './event-bridge.js';
+/**
+ * WebhookService (T229) — admin CRUD over Webhook subscriptions plus
+ * read-side queries over the WebhookDelivery audit table.
+ *
+ * Each created Webhook gets a freshly minted 64-char hex secret; the worker
+ * uses the same secret to HMAC-sign each outbound POST.
+ */
+export class WebhookService {
+    emFactory;
+    auditLog;
+    constructor(emFactory, auditLog) {
+        this.emFactory = emFactory;
+        this.auditLog = auditLog;
+    }
+    #audit(em, action, objectId, stateBefore, stateAfter) {
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, { action, objectType: 'webhook', objectId, stateBefore, stateAfter });
+        }
+    }
+    async list() {
+        const em = this.emFactory();
+        return em.find(Webhook, {}, { orderBy: { createdAt: 'desc' } });
+    }
+    async getById(id) {
+        const em = this.emFactory();
+        const webhook = await em.findOne(Webhook, { id });
+        if (!webhook)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Webhook not found.');
+        return webhook;
+    }
+    async create(input) {
+        const em = this.emFactory();
+        const webhook = em.create(Webhook, {
+            name: input.name,
+            url: input.url,
+            eventTypes: input.eventTypes,
+            secret: randomBytes(32).toString('hex'),
+            organizationId: input.organizationId ?? null,
+            ...(input.createdByAdminUserId !== undefined
+                ? { createdByAdminUserId: input.createdByAdminUserId }
+                : {}),
+        });
+        em.persist(webhook);
+        this.#audit(em, 'webhook.create', webhook.id, null, {
+            name: webhook.name,
+            url: webhook.url,
+            organizationId: webhook.organizationId ?? null,
+        });
+        await em.flush();
+        return webhook;
+    }
+    async update(id, patch) {
+        const em = this.emFactory();
+        const webhook = await em.findOne(Webhook, { id });
+        if (!webhook)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Webhook not found.');
+        if (patch.name !== undefined)
+            webhook.name = patch.name;
+        if (patch.url !== undefined)
+            webhook.url = patch.url;
+        if (patch.eventTypes !== undefined)
+            webhook.eventTypes = patch.eventTypes;
+        if (patch.status !== undefined)
+            webhook.status = patch.status;
+        if (patch.organizationId !== undefined)
+            webhook.organizationId = patch.organizationId;
+        this.#audit(em, 'webhook.update', webhook.id, null, {
+            name: webhook.name,
+            status: webhook.status,
+            organizationId: webhook.organizationId ?? null,
+        });
+        await em.flush();
+        return webhook;
+    }
+    async remove(id) {
+        const em = this.emFactory();
+        const webhook = await em.findOne(Webhook, { id });
+        if (!webhook)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Webhook not found.');
+        this.#audit(em, 'webhook.delete', webhook.id, { name: webhook.name }, null);
+        await em.removeAndFlush(webhook);
+    }
+    /**
+     * Re-queue a failed or dead-lettered delivery: copy the source delivery into
+     * a fresh `pending` row referencing the same event/payload. The actual
+     * outbound POST is performed by the BullMQ worker once the job is enqueued
+     * by the production composition root; the new row is the audit trail.
+     *
+     * Only `failed` and `dead_lettered` rows can be replayed — calling this on
+     * an already-pending or successful row is a no-op signalled via 409.
+     */
+    async replay(deliveryId) {
+        // command-coverage-ignore: delivery execution/bookkeeping — the config write
+        // is audited separately; this is provider dispatch state.
+        const em = this.emFactory();
+        const source = await em.findOne(WebhookDelivery, { id: deliveryId });
+        if (!source) {
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Webhook delivery not found.');
+        }
+        if (source.status !== 'failed' && source.status !== 'dead_lettered') {
+            throw new HttpError(409, ERROR_CODES.WEBHOOK_DELIVERY_NOT_REPLAYABLE, `Only failed or dead-lettered deliveries can be replayed (status=${source.status}).`);
+        }
+        const copy = em.create(WebhookDelivery, {
+            webhookId: source.webhookId,
+            eventId: source.eventId,
+            eventType: source.eventType,
+            payload: source.payload,
+            status: 'pending',
+            attemptCount: 0,
+        });
+        await em.persistAndFlush(copy);
+        return copy;
+    }
+    async listDeliveries(filter = {}) {
+        const em = this.emFactory();
+        const where = {};
+        if (filter.webhookId)
+            where['webhookId'] = filter.webhookId;
+        if (filter.status)
+            where['status'] = filter.status;
+        return em.find(WebhookDelivery, where, {
+            orderBy: { createdAt: 'desc' },
+            limit: filter.limit ?? 100,
+        });
+    }
+    /**
+     * Look up active subscriptions for a given event type — used by the
+     * event-bridge to decide which receivers should get a delivery.
+     *
+     * Feature 062 (contracts/order-webhooks.md §2): `organizationId` is the
+     * value extracted from the event payload. Platform-wide subscriptions
+     * (`organizationId` NULL) always match; org-bound subscriptions match only
+     * their own organization's events and never an event without one
+     * (fail closed — Principle XI).
+     */
+    async findActiveByEventType(eventType, organizationId) {
+        const em = this.emFactory();
+        const rows = await em.find(Webhook, { status: 'active' });
+        return rows
+            .filter((w) => w.eventTypes.includes(eventType))
+            .filter((w) => subscriptionReceivesOrganization(w.organizationId ?? null, organizationId))
+            .map((w) => ({ webhookId: w.id, url: w.url, secret: w.secret }));
+    }
+    /**
+     * Records an attempted delivery. The worker (webhook-delivery-worker.ts)
+     * is the canonical caller via the BullMQ pipeline; this method also lets
+     * tests + admin replay flows insert audit rows directly.
+     */
+    async recordDelivery(input) {
+        // command-coverage-ignore: delivery execution/bookkeeping — the config write
+        // is audited separately; this is provider dispatch state.
+        const em = this.emFactory();
+        const row = em.create(WebhookDelivery, {
+            webhookId: input.webhookId,
+            eventId: input.eventId,
+            eventType: input.eventType,
+            payload: input.payload,
+            status: input.status,
+            attemptCount: input.attemptCount,
+            ...(input.lastResponseStatus !== undefined
+                ? { lastResponseStatus: input.lastResponseStatus }
+                : {}),
+            ...(input.lastError !== undefined ? { lastError: input.lastError } : {}),
+        });
+        await em.persistAndFlush(row);
+        return row;
+    }
+}
+//# sourceMappingURL=webhook-service.js.map

package/dist/backend/services/webhook-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-service.js","sourceRoot":"","sources":["../../../src/backend/services/webhook-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,gCAAgC,EAAE,MAAM,mBAAmB,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,SAA8B,EAC9B,QAAoB;QADpB,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAY;IACpC,CAAC;IAEJ,MAAM,CAAC,EAAiB,EAAE,MAAc,EAAE,QAAgB,EAAE,WAA2C,EAAE,UAA0C;QACjJ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACpF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAOZ;QACC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvC,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;YAC5C,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE;YAClD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;SAC/C,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,KAOC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACrD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9D,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE;YAClD,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;SAC/C,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,6EAA6E;QAC7E,0DAA0D;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACpE,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,+BAA+B,EAC3C,mEAAmE,MAAM,CAAC,MAAM,IAAI,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE;YACtC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAIjB,EAAE;QACJ,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM;YAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACnD,OAAO,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE;YACrC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,GAAG;SAC3B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,qBAAqB,CACzB,SAAiB,EACjB,cAA6B;QAE7B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;aAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,cAAc,CAAC,CAAC;aACzF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,KASpB;QACC,6EAA6E;QAC7E,0DAA0D;QAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE;YACrC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/manifest.d.ts

@@ -0,0 +1,169 @@
+/**
+ * Webhooks module — manifest backfill (Module Lifecycle, feature 018).
+ *
+ * Predates the lifecycle system; this manifest is the static record
+ * required so the module participates in the registry. No install /
+ * uninstall hook today — the module's schema is owned by earlier
+ * platform-wide migrations.
+ */
+export declare const manifest: {
+    id: string;
+    name: string;
+    version: string;
+    dependencies: string[];
+    description?: string | undefined;
+    acknowledgedDependencies?: {
+        moduleId: string;
+        port: string;
+        reason: string;
+    }[] | undefined;
+    nonBindingDependencies?: {
+        moduleId: string;
+        name: string;
+        kind: "contributes-to" | "degrades-without" | "refuses-without";
+        reason: string;
+        whenAbsent?: string | undefined;
+    }[] | undefined;
+    activation?: {
+        settingCode: string;
+        default: boolean;
+    } | {
+        nonDeactivatable: true;
+        reason: string;
+    } | undefined;
+    settings?: {
+        moduleCode: string;
+        groups: {
+            code: string;
+            name: string;
+            salesChannelCodes?: string[] | undefined;
+            isSystemProtected?: boolean | undefined;
+        }[];
+        settings: {
+            code: string;
+            name: string;
+            valueType: "string" | "number" | "boolean" | "json" | "string_list" | "secret" | "credential_ref";
+            defaultValue: unknown;
+            description?: string | undefined;
+            groupCode?: string | undefined;
+            previousDefaultValues?: unknown[] | undefined;
+            salesChannelCodes?: string[] | undefined;
+            enumOptions?: string[] | undefined;
+            configurationType?: string | undefined;
+            hidden?: boolean | undefined;
+        }[];
+    } | undefined;
+    i18n?: {
+        bundlesDir: string;
+    } | undefined;
+    docs?: false | {
+        dir: string;
+    } | undefined;
+    demo?: false | {
+        summary: string;
+        seed: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoSeedResult>;
+        reset: (context: import("@endora-commerce/contracts").ModuleDemoContext<never>) => Promise<import("@endora-commerce/contracts").DemoResetResult>;
+        after?: readonly string[] | undefined;
+        package?: string | undefined;
+    } | undefined;
+    actions?: {
+        id: string;
+        labelKey: string;
+        icon: "Plus" | "Sparkles" | "Settings" | "Search" | "Boxes" | "Layers" | "Menu" | "PlusCircle" | "PlusSquare" | "FilePlus" | "FolderPlus" | "Upload" | "FileUp" | "CloudUpload" | "Download" | "FileDown" | "FileText" | "BookOpen" | "Rss" | "Package" | "Tag" | "ShoppingCart" | "Receipt" | "CreditCard" | "Users" | "UserPlus" | "Inbox" | "ListChecks" | "ClipboardList" | "Image" | "Video" | "LayoutDashboard" | "PanelLeft" | "KeyRound" | "ShieldCheck" | "Edit" | "Archive" | "Box" | "Truck" | "CircleDollarSign" | "Activity" | "LineChart" | "Smartphone" | "Webhook" | "Scale" | "PlugZap" | "PercentDiamond" | "Newspaper" | "Languages" | "Eraser" | "Warehouse" | "TrendingDown" | "Bell" | "PackageOpen" | "Building2" | "Store" | "ClipboardCheck";
+        targetRoute: string;
+        keywords: string[];
+        weight: number;
+        descriptionKey?: string | undefined;
+        requiredPermission?: string | undefined;
+    }[] | undefined;
+    permissions?: {
+        code: string;
+        label: string;
+        module?: string | undefined;
+        description?: string | undefined;
+        requires?: string[] | undefined;
+    }[] | undefined;
+    transactionalEmails?: {
+        code: string;
+        name: string;
+        variables: {
+            key: string;
+            label: string;
+            sampleValue?: string | undefined;
+            description?: string | undefined;
+        }[];
+        description?: string | undefined;
+        group?: string | undefined;
+    }[] | undefined;
+    capabilities?: string[] | undefined;
+    exclusiveCapabilities?: {
+        key: string;
+        errorCode: string;
+    }[] | undefined;
+    errorCodes?: {
+        code: string;
+        tokens?: string[] | undefined;
+    }[] | undefined;
+    blocks?: {
+        name: string;
+        labelKey: string;
+        category: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        fields: Record<string, {
+            type: "number" | "object" | "array" | "text" | "textarea" | "select" | "radio" | "external" | "uuid" | "richtext";
+            label?: string | undefined;
+            required?: boolean | undefined;
+            options?: {
+                label: string;
+                value: string | number;
+            }[] | undefined;
+            refKind?: string | undefined;
+        }>;
+        descriptionKey?: string | undefined;
+        defaultProps?: Record<string, unknown> | undefined;
+        responsiveFields?: string[] | undefined;
+        previewIcon?: string | undefined;
+        weight?: number | undefined;
+    }[] | undefined;
+    blockCategories?: {
+        key: string;
+        titleKey: string;
+        contexts: ("invoice" | "email" | "cms" | "newsletter")[];
+        weight?: number | undefined;
+        visible?: boolean | undefined;
+    }[] | undefined;
+    env?: {
+        name: string;
+        describes: {
+            en: string;
+            pl: string;
+        };
+        requirement: {
+            kind: "required";
+        } | {
+            kind: "requiredWhen";
+            input: string;
+            equals: string;
+        } | {
+            kind: "optional";
+            without: {
+                en: string;
+                pl: string;
+            };
+        };
+        secret: boolean;
+        generable: boolean;
+        owner: {
+            kind: "platform";
+        } | {
+            kind: "application";
+            application: "admin" | "backend" | "storefront";
+        } | {
+            kind: "module";
+            moduleId: string;
+        };
+        consumers: ("admin" | "backend" | "storefront")[];
+        addressOf: "admin" | "backend" | "storefront" | null;
+    }[] | undefined;
+};
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiHnB,CAAC"}