@forumone/throughline-integrations 0.0.1 → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# @forumone/throughline-integrations
+
+## 0.2.0
+
+### Minor Changes
+
+- 789dbd8: Initial release of the integrations server. Provides the `Integration` plugin contract every future integration (Salesforce, Mailchimp, etc.) follows, the registry, the admin-only Integrations collection, and five MCP tools (`list_integrations`, `get_integration_status`, `trigger_sync`, `test_integration`, `list_integration_types`). Includes a generic outbound webhook integration with HMAC-SHA256 signing (RFC 4231 known-answer tests pinned), configurable event filter / payload mode / timeout, healthcheck, and Inngest-driven retries. Configuration is admin-only by design — Claude can trigger and observe integrations but cannot retarget URLs or rotate secrets.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Forum One Communications Corporation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,45 +1,111 @@
 # @forumone/throughline-integrations
 
-## ⚠️ IMPORTANT NOTICE ⚠️
+Plugin architecture for connecting Throughline-powered Payload sites to external systems. Ships the `Integration` contract every future integration follows, the registry, the per-instance configuration collection, five MCP tools, and a generic outbound webhook integration as the reference implementation.
 
-**This package is created solely for the purpose of setting up OIDC (OpenID Connect) trusted publishing with npm.**
+## What this package provides
 
-This is **NOT** a functional package and contains **NO** code or functionality beyond the OIDC setup configuration.
+- **`Integration` contract** — id, name, description, configFields, validateConfig, subscribes, createFunctions, mcpTools (optional), healthcheck. Every Salesforce / Mailchimp / Slack / etc. integration uses this exact shape.
+- **`IntegrationRegistry`** — process-local, per-plugin-init store keyed by integration id. Rejects duplicates synchronously.
+- **Integrations collection** — `name`, `integrationType`, `enabled`, `config` (json), and read-only `lastSyncAt` / `lastSyncStatus` / `lastError`. Admin-only writes; admin/editor reads.
+- **Five MCP tools** at `/api/integrations/mcp`:
 
-## Purpose
+| Tool | Use it for | Access |
+|---|---|---|
+| `list_integrations` | "What integrations are configured?" / "Which are healthy?" | admin / editor |
+| `get_integration_status` | One instance's last-sync info | admin / editor |
+| `trigger_sync` | Manual delivery to verify connectivity after a config change | admin only |
+| `test_integration` | Run the integration's healthcheck (no event emitted) | admin / editor |
+| `list_integration_types` | "What kinds of integrations are supported here?" | any caller |
 
-This package exists to:
-1. Configure OIDC trusted publishing for the package name `@forumone/throughline-integrations`
-2. Enable secure, token-less publishing from CI/CD workflows
-3. Establish provenance for packages published under this name
+- **Webhook integration** — generic outbound HTTPS POST with HMAC-SHA256 signing, configurable event filter, retries (5x), timeout, and a HEAD-based healthcheck. RFC 4231 known-answer test vectors pin the wire format so refactoring can never silently break receivers.
 
-## What is OIDC Trusted Publishing?
+## Why this is separate from the other server packages
 
-OIDC trusted publishing allows package maintainers to publish packages directly from their CI/CD workflows without needing to manage npm access tokens. Instead, it uses OpenID Connect to establish trust between the CI/CD provider (like GitHub Actions) and npm.
+The other server packages do one job well. This is a **framework within the framework**: a contract for integration modules plus tooling to register, configure, observe, and trigger them. Every real client engagement needs integrations; building them ad-hoc produces unmaintainable tangle. This package keeps the surface area bounded as the integration count grows.
 
-## Setup Instructions
+## Installation
 
-To properly configure OIDC trusted publishing for this package:
+```bash
+pnpm add @forumone/throughline-integrations
+```
 
-1. Go to [npmjs.com](https://www.npmjs.com/) and navigate to your package settings
-2. Configure the trusted publisher (e.g., GitHub Actions)
-3. Specify the repository and workflow that should be allowed to publish
-4. Use the configured workflow to publish your actual package
+Peers: `payload@^3.0.0`, `inngest@^4.0.0`. Required runtime peer: `@forumone/throughline-core` (audit log).
 
-## DO NOT USE THIS PACKAGE
+## Usage
 
-This package is a placeholder for OIDC configuration only. It:
-- Contains no executable code
-- Provides no functionality
-- Should not be installed as a dependency
-- Exists only for administrative purposes
+```ts
+import { buildConfig } from 'payload'
+import { auditPlugin, createInngestClient } from '@forumone/throughline-core'
+import { integrationsPlugin } from '@forumone/throughline-integrations'
 
-## More Information
+const inngest = createInngestClient({ id: 'my-site' })
 
-For more details about npm's trusted publishing feature, see:
-- [npm Trusted Publishing Documentation](https://docs.npmjs.com/generating-provenance-statements)
-- [GitHub Actions OIDC Documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
+export default buildConfig({
+  // collections, db, secret...
+  plugins: [
+    auditPlugin({ inngest }),
+    integrationsPlugin({ inngest }),
+  ],
+})
+```
 
----
+## Adding integrations
 
-**Maintained for OIDC setup purposes only**
+```ts
+import { integrationsPlugin } from '@forumone/throughline-integrations'
+import { salesforceIntegration } from '@your-org/throughline-salesforce'
+
+integrationsPlugin({
+  inngest,
+  integrations: [salesforceIntegration],
+})
+```
+
+The webhook integration is registered automatically. Additional integrations are appended; duplicate ids throw at plugin init.
+
+## Wiring Inngest functions
+
+Integration `createFunctions` returns Inngest functions, but **this plugin does not serve them**. The client app's Inngest endpoint composes them with its own functions. See [`docs/integrations-wiring.md`](../../docs/integrations-wiring.md) in the repository root for the pattern.
+
+## Why configuration is admin-only
+
+A prompt-injection attacker could otherwise convince Claude to retarget a webhook to attacker-controlled infrastructure or rotate the signing secret. Claude can _trigger_ and _observe_ integrations conversationally, but configuration changes are deliberate human actions in the Payload admin.
+
+This asymmetry is intentional and is why `trigger_sync` is admin-only too — manual triggering writes to an external system, even if it doesn't change configuration.
+
+## Webhook details
+
+| Field | Behaviour |
+|---|---|
+| `targetUrl` | Required, must be `https://`. Validated at write time. |
+| `signingSecret` | Required, ≥ 32 characters. Used as the HMAC-SHA256 key. |
+| `eventFilter` | Optional list of event names; empty list = deliver all subscribed events. |
+| `includeFullPayload` | If false (default), only `id`, `slug`, and `*Id` fields go in the body. |
+| `timeoutSeconds` | Per-request timeout. Default 10. |
+
+Outbound headers:
+
+```
+content-type: application/json
+x-throughline-event: <event name>
+x-throughline-signature: sha256=<hex digest>
+x-throughline-timestamp: <epoch ms>
+```
+
+The HMAC is computed over the entire request body (a JSON-stringified envelope of `{ event, data, timestamp, instanceId }`). Receivers verify by recomputing with the shared secret and comparing in constant time.
+
+## Options
+
+| Option | Type | Default | Notes |
+|---|---|---|---|
+| `inngest` | `Inngest` | required | Throws at validate if missing |
+| `integrations` | `Integration[]` | `[]` | Appended to the built-in webhook integration |
+| `collectionSlug` | `string` | `'integrations'` | |
+| `routePrefix` | `string` | `'/integrations'` | Payload prepends `/api`, so MCP lands at `/api/integrations/mcp` |
+| `enabled` | `boolean` | `true` | Set to false to no-op |
+| `logger` | `Logger` | `defaultLogger` | |
+
+## Related packages
+
+- `@forumone/throughline-core` — required peer; provides audit log and MCP handler
+- `@forumone/throughline-publishing`, `@forumone/throughline-approvals`, `@forumone/throughline-audit` — emit events this package's webhook can deliver

package/dist/collection.d.ts

@@ -0,0 +1,16 @@
+import type { CollectionConfig } from 'payload';
+import type { IntegrationRegistry } from './registry.js';
+export interface CreateIntegrationsCollectionOptions {
+    slug?: string;
+    registry: IntegrationRegistry;
+}
+/**
+ * Collection that persists per-instance integration configuration. Configuration
+ * is admin-only by design: prompt injection that gave Claude write access here
+ * would let an attacker re-target webhook URLs or rotate signing secrets.
+ *
+ * Editors can read instance status (used by the listing/status MCP tools);
+ * write operations are reserved for admins editing in the Payload UI.
+ */
+export declare function createIntegrationsCollection(options: CreateIntegrationsCollectionOptions): CollectionConfig;
+//# sourceMappingURL=collection.d.ts.map

package/dist/collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,gBAAgB,EAAE,MAAM,SAAS,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAGxD,MAAM,WAAW,mCAAmC;IAClD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,mBAAmB,CAAA;CAC9B;AAYD;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,mCAAmC,GAC3C,gBAAgB,CA4GlB"}

package/dist/collection.js

@@ -0,0 +1,119 @@
+import { DEFAULT_INTEGRATIONS_SLUG } from './options.js';
+const adminOrEditor = ({ req }) => {
+    const roles = req.user?.['roles'] ?? [];
+    return roles.includes('admin') || roles.includes('editor');
+};
+const adminOnly = ({ req }) => {
+    const roles = req.user?.['roles'] ?? [];
+    return roles.includes('admin');
+};
+/**
+ * Collection that persists per-instance integration configuration. Configuration
+ * is admin-only by design: prompt injection that gave Claude write access here
+ * would let an attacker re-target webhook URLs or rotate signing secrets.
+ *
+ * Editors can read instance status (used by the listing/status MCP tools);
+ * write operations are reserved for admins editing in the Payload UI.
+ */
+export function createIntegrationsCollection(options) {
+    const slug = options.slug ?? DEFAULT_INTEGRATIONS_SLUG;
+    const { registry } = options;
+    return {
+        slug,
+        admin: {
+            useAsTitle: 'name',
+            defaultColumns: ['name', 'integrationType', 'enabled', 'lastSyncAt', 'lastSyncStatus'],
+            description: 'External-system connections. Edit only in the admin — Claude can trigger and observe but cannot configure.',
+        },
+        access: {
+            read: adminOrEditor,
+            create: adminOnly,
+            update: adminOnly,
+            delete: adminOnly,
+        },
+        fields: [
+            {
+                name: 'name',
+                type: 'text',
+                required: true,
+                admin: { description: 'Display name for this instance (e.g. "Mailchimp - Newsletter").' },
+            },
+            {
+                name: 'integrationType',
+                type: 'select',
+                required: true,
+                options: registry
+                    .list()
+                    .map((integration) => ({ label: integration.name, value: integration.id })),
+                admin: { description: 'The integration plugin this instance uses.' },
+            },
+            {
+                name: 'enabled',
+                type: 'checkbox',
+                defaultValue: false,
+                admin: {
+                    description: 'Disabled integrations are skipped by event delivery and excluded from `list_integrations` unless onlyEnabled=false.',
+                },
+            },
+            {
+                name: 'config',
+                type: 'json',
+                admin: {
+                    description: 'Integration-specific configuration. The integration\'s configFields drive the admin UI; this JSON store carries the validated payload.',
+                },
+            },
+            {
+                name: 'lastSyncAt',
+                type: 'date',
+                admin: { readOnly: true, position: 'sidebar' },
+            },
+            {
+                name: 'lastSyncStatus',
+                type: 'select',
+                admin: { readOnly: true, position: 'sidebar' },
+                options: [
+                    { label: 'Never run', value: 'never-run' },
+                    { label: 'Success', value: 'success' },
+                    { label: 'Partial', value: 'partial' },
+                    { label: 'Failed', value: 'failed' },
+                ],
+                defaultValue: 'never-run',
+            },
+            {
+                name: 'lastError',
+                type: 'textarea',
+                admin: { readOnly: true },
+            },
+        ],
+        indexes: [
+            { fields: ['integrationType', 'enabled'] },
+            { fields: ['lastSyncStatus'] },
+        ],
+        hooks: {
+            beforeChange: [
+                async ({ data, operation }) => {
+                    if (operation !== 'create' && operation !== 'update')
+                        return data;
+                    const incoming = data;
+                    const integrationType = incoming['integrationType'];
+                    if (typeof integrationType !== 'string')
+                        return data;
+                    const integration = registry.get(integrationType);
+                    if (!integration) {
+                        throw new Error(`Unknown integration type "${integrationType}". Known types: ${registry
+                            .list()
+                            .map((i) => i.id)
+                            .join(', ') || '(none registered)'}.`);
+                    }
+                    const config = (incoming['config'] ?? {});
+                    const validation = await integration.validateConfig(config);
+                    if (!validation.ok) {
+                        throw new Error(`Invalid config for ${integration.name}: ${validation.reason ?? 'no reason given'}`);
+                    }
+                    return data;
+                },
+            ],
+        },
+    };
+}
+//# sourceMappingURL=collection.js.map

package/dist/collection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.js","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAOxD,MAAM,aAAa,GAAW,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;IACxC,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAA;IACjE,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC5D,CAAC,CAAA;AAED,MAAM,SAAS,GAAW,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;IACpC,MAAM,KAAK,GAAI,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAA0B,IAAI,EAAE,CAAA;IACjE,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;AAChC,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA4C;IAE5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,yBAAyB,CAAA;IACtD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAE5B,OAAO;QACL,IAAI;QACJ,KAAK,EAAE;YACL,UAAU,EAAE,MAAM;YAClB,cAAc,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,CAAC;YACtF,WAAW,EACT,4GAA4G;SAC/G;QACD,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;SAClB;QACD,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,EAAE,WAAW,EAAE,iEAAiE,EAAE;aAC1F;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,QAAQ;qBACd,IAAI,EAAE;qBACN,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7E,KAAK,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE;aACrE;YACD;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,UAAU;gBAChB,YAAY,EAAE,KAAK;gBACnB,KAAK,EAAE;oBACL,WAAW,EACT,qHAAqH;iBACxH;aACF;YACD;gBACE,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE;oBACL,WAAW,EACT,wIAAwI;iBAC3I;aACF;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;aAC/C;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC9C,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE;oBAC1C,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;oBACtC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;oBACtC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;iBACrC;gBACD,YAAY,EAAE,WAAW;aAC1B;YACD;gBACE,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1B;SACF;QACD,OAAO,EAAE;YACP,EAAE,MAAM,EAAE,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE;YAC1C,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE;SAC/B;QACD,KAAK,EAAE;YACL,YAAY,EAAE;gBACZ,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;oBAC5B,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ;wBAAE,OAAO,IAAI,CAAA;oBACjE,MAAM,QAAQ,GAAG,IAA+B,CAAA;oBAChD,MAAM,eAAe,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAA;oBACnD,IAAI,OAAO,eAAe,KAAK,QAAQ;wBAAE,OAAO,IAAI,CAAA;oBAEpD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;oBACjD,IAAI,CAAC,WAAW,EAAE,CAAC;wBACjB,MAAM,IAAI,KAAK,CACb,6BAA6B,eAAe,mBAAmB,QAAQ;6BACpE,IAAI,EAAE;6BACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BAChB,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,GAAG,CACxC,CAAA;oBACH,CAAC;oBAED,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;oBACpE,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;oBAC3D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;wBACnB,MAAM,IAAI,KAAK,CACb,sBAAsB,WAAW,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,IAAI,iBAAiB,EAAE,CACpF,CAAA;oBACH,CAAC;oBACD,OAAO,IAAI,CAAA;gBACb,CAAC;aACF;SACF;KACF,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { integrationsPlugin, getIntegrationRegistry, getIntegrationContext, } from './plugin.js';
+export { IntegrationRegistry } from './registry.js';
+export { DEFAULT_INTEGRATIONS_SLUG } from './options.js';
+export type { IntegrationsPluginOptions } from './options.js';
+export { webhookIntegration, WEBHOOK_INTEGRATION_ID } from './integrations/index.js';
+export type { WebhookConfig } from './integrations/index.js';
+export type { Integration, IntegrationCategory, IntegrationContext, IntegrationAuditEvent, IntegrationConfigValidation, IntegrationHealth, IntegrationInstance, IntegrationInstanceLoaded, IntegrationSyncStatus, } from './types.js';
+export { createListIntegrationsTool, createGetIntegrationStatusTool, createTriggerSyncTool, createTestIntegrationTool, createListIntegrationTypesTool, } from './tools/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AACxD,YAAY,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAE7D,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AACpF,YAAY,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAE5D,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,kBAAkB,CAAA"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { integrationsPlugin, getIntegrationRegistry, getIntegrationContext, } from './plugin.js';
+export { IntegrationRegistry } from './registry.js';
+export { DEFAULT_INTEGRATIONS_SLUG } from './options.js';
+export { webhookIntegration, WEBHOOK_INTEGRATION_ID } from './integrations/index.js';
+export { createListIntegrationsTool, createGetIntegrationStatusTool, createTriggerSyncTool, createTestIntegrationTool, createListIntegrationTypesTool, } from './tools/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAGxD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAepF,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,qBAAqB,EACrB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,kBAAkB,CAAA"}

package/dist/integrations/index.d.ts

@@ -0,0 +1,3 @@
+export { webhookIntegration, WEBHOOK_INTEGRATION_ID } from './webhook/index.js';
+export type { WebhookConfig } from './webhook/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/integrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC/E,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/integrations/index.js

@@ -0,0 +1,2 @@
+export { webhookIntegration, WEBHOOK_INTEGRATION_ID } from './webhook/index.js';
+//# sourceMappingURL=index.js.map

package/dist/integrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/integrations/webhook/config-fields.d.ts

@@ -0,0 +1,33 @@
+import type { Field } from 'payload';
+/**
+ * The event names the webhook integration can subscribe to. Kept in sync
+ * with the core `FrameworkEvents` taxonomy plus the approval/decided event
+ * augmented by the approvals package.
+ */
+export declare const WEBHOOK_EVENT_OPTIONS: readonly [{
+    readonly label: "Page published";
+    readonly value: "content/page.published";
+}, {
+    readonly label: "Page unpublished";
+    readonly value: "content/page.unpublished";
+}, {
+    readonly label: "Page rolled back";
+    readonly value: "content/page.rolled_back";
+}, {
+    readonly label: "Form submission received";
+    readonly value: "form/submission.received";
+}, {
+    readonly label: "Approval decided";
+    readonly value: "approval/decided";
+}];
+export declare const WEBHOOK_DEFAULT_TIMEOUT_SECONDS = 10;
+export declare const MIN_SIGNING_SECRET_LENGTH = 32;
+export declare const configFields: Field[];
+export interface WebhookConfig {
+    targetUrl: string;
+    signingSecret: string;
+    eventFilter?: string[];
+    includeFullPayload?: boolean;
+    timeoutSeconds?: number;
+}
+//# sourceMappingURL=config-fields.d.ts.map

package/dist/integrations/webhook/config-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-fields.d.ts","sourceRoot":"","sources":["../../../src/integrations/webhook/config-fields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAA;AAEpC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;EAMxB,CAAA;AAEV,eAAO,MAAM,+BAA+B,KAAK,CAAA;AACjD,eAAO,MAAM,yBAAyB,KAAK,CAAA;AAE3C,eAAO,MAAM,YAAY,EAAE,KAAK,EAwC/B,CAAA;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB"}

package/dist/integrations/webhook/config-fields.js

@@ -0,0 +1,54 @@
+/**
+ * The event names the webhook integration can subscribe to. Kept in sync
+ * with the core `FrameworkEvents` taxonomy plus the approval/decided event
+ * augmented by the approvals package.
+ */
+export const WEBHOOK_EVENT_OPTIONS = [
+    { label: 'Page published', value: 'content/page.published' },
+    { label: 'Page unpublished', value: 'content/page.unpublished' },
+    { label: 'Page rolled back', value: 'content/page.rolled_back' },
+    { label: 'Form submission received', value: 'form/submission.received' },
+    { label: 'Approval decided', value: 'approval/decided' },
+];
+export const WEBHOOK_DEFAULT_TIMEOUT_SECONDS = 10;
+export const MIN_SIGNING_SECRET_LENGTH = 32;
+export const configFields = [
+    {
+        name: 'targetUrl',
+        type: 'text',
+        required: true,
+        admin: { description: 'HTTPS URL the integration POSTs events to.' },
+    },
+    {
+        name: 'signingSecret',
+        type: 'text',
+        required: true,
+        admin: {
+            description: `Shared secret used to compute HMAC-SHA256 signatures (>=${MIN_SIGNING_SECRET_LENGTH} chars). The receiver verifies the x-throughline-signature header to confirm the request originated from this site.`,
+        },
+    },
+    {
+        name: 'eventFilter',
+        type: 'select',
+        hasMany: true,
+        options: WEBHOOK_EVENT_OPTIONS.map((o) => ({ label: o.label, value: o.value })),
+        admin: {
+            description: 'Only deliver these event types. Leave empty to deliver every subscribed event.',
+        },
+    },
+    {
+        name: 'includeFullPayload',
+        type: 'checkbox',
+        defaultValue: false,
+        admin: {
+            description: 'If true, send the entire event data block. If false, send only IDs and slugs to keep payloads small.',
+        },
+    },
+    {
+        name: 'timeoutSeconds',
+        type: 'number',
+        defaultValue: WEBHOOK_DEFAULT_TIMEOUT_SECONDS,
+        admin: { description: `Per-request timeout in seconds. Default ${WEBHOOK_DEFAULT_TIMEOUT_SECONDS}.` },
+    },
+];
+//# sourceMappingURL=config-fields.js.map

package/dist/integrations/webhook/config-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-fields.js","sourceRoot":"","sources":["../../../src/integrations/webhook/config-fields.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,wBAAwB,EAAE;IAC5D,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,0BAA0B,EAAE;IAChE,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,0BAA0B,EAAE;IAChE,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,0BAA0B,EAAE;IACxE,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE;CAChD,CAAA;AAEV,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAA;AACjD,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAA;AAE3C,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE;KACrE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,WAAW,EACT,2DAA2D,yBAAyB,qHAAqH;SAC5M;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/E,KAAK,EAAE;YACL,WAAW,EAAE,gFAAgF;SAC9F;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE;YACL,WAAW,EACT,sGAAsG;SACzG;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,QAAQ;QACd,YAAY,EAAE,+BAA+B;QAC7C,KAAK,EAAE,EAAE,WAAW,EAAE,2CAA2C,+BAA+B,GAAG,EAAE;KACtG;CACF,CAAA"}

package/dist/integrations/webhook/functions.d.ts

@@ -0,0 +1,21 @@
+import type { InngestFunction } from 'inngest';
+import type { IntegrationContext } from '../../types.js';
+export declare const WEBHOOK_INTEGRATION_ID = "webhook";
+/**
+ * Builds the two Inngest functions the webhook integration contributes:
+ *
+ * - `webhook-deliver` subscribes to the system events configured at the
+ *   admin layer. For every enabled instance whose `eventFilter` matches,
+ *   it POSTs an HMAC-signed body to the target URL, retries up to five
+ *   times on failure, and records audit + status updates.
+ * - `webhook-manual-trigger` listens for `integration/manual-sync` events
+ *   (fired by the `trigger_sync` MCP tool). It delivers a minimal test
+ *   payload to a single instance so admins can verify connectivity from
+ *   the conversation surface.
+ *
+ * Failures are isolated: each delivery is its own `step.run`, so a broken
+ * instance retries on its own without affecting the others or the
+ * publishing pipeline that fired the originating event.
+ */
+export declare function createWebhookFunctions(ctx: IntegrationContext): InngestFunction.Any[];
+//# sourceMappingURL=functions.d.ts.map

package/dist/integrations/webhook/functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../../../src/integrations/webhook/functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAKxD,eAAO,MAAM,sBAAsB,YAAY,CAAA;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,GAAG,eAAe,CAAC,GAAG,EAAE,CA2DrF"}

package/dist/integrations/webhook/functions.js

@@ -0,0 +1,124 @@
+import { hmacSha256Hex } from './hmac.js';
+import { extractIds } from './payload.js';
+export const WEBHOOK_INTEGRATION_ID = 'webhook';
+/**
+ * Builds the two Inngest functions the webhook integration contributes:
+ *
+ * - `webhook-deliver` subscribes to the system events configured at the
+ *   admin layer. For every enabled instance whose `eventFilter` matches,
+ *   it POSTs an HMAC-signed body to the target URL, retries up to five
+ *   times on failure, and records audit + status updates.
+ * - `webhook-manual-trigger` listens for `integration/manual-sync` events
+ *   (fired by the `trigger_sync` MCP tool). It delivers a minimal test
+ *   payload to a single instance so admins can verify connectivity from
+ *   the conversation surface.
+ *
+ * Failures are isolated: each delivery is its own `step.run`, so a broken
+ * instance retries on its own without affecting the others or the
+ * publishing pipeline that fired the originating event.
+ */
+export function createWebhookFunctions(ctx) {
+    const deliver = ctx.inngest.createFunction({
+        id: 'webhook-deliver',
+        retries: 5,
+        triggers: [
+            { event: 'content/page.published' },
+            { event: 'content/page.unpublished' },
+            { event: 'content/page.rolled_back' },
+            { event: 'form/submission.received' },
+            { event: 'approval/decided' },
+        ],
+    }, async ({ event, step }) => {
+        const instances = await step.run('load-webhook-instances', () => ctx.loadInstances(WEBHOOK_INTEGRATION_ID));
+        for (const instance of instances) {
+            const filter = instance.config.eventFilter;
+            if (filter && filter.length > 0 && !filter.includes(event.name))
+                continue;
+            await step.run(`deliver-${instance.id}`, async () => {
+                await deliverEvent({ ctx, instance, eventName: event.name, eventData: event.data });
+            });
+        }
+    });
+    const manualTrigger = ctx.inngest.createFunction({
+        id: 'webhook-manual-trigger',
+        triggers: [{ event: 'integration/manual-sync' }],
+    }, async ({ event, step }) => {
+        const data = (event.data ?? {});
+        const targetInstanceId = data.instanceId;
+        if (!targetInstanceId)
+            return;
+        const instances = await step.run('load-target', async () => {
+            const all = await ctx.loadInstances(WEBHOOK_INTEGRATION_ID);
+            return all.filter((i) => i.id === targetInstanceId);
+        });
+        for (const instance of instances) {
+            await step.run(`deliver-test-${instance.id}`, async () => {
+                await deliverEvent({
+                    ctx,
+                    instance,
+                    eventName: 'integration/manual-sync',
+                    eventData: { instanceId: instance.id, message: 'Manual sync triggered' },
+                    includeFullPayloadOverride: true,
+                });
+            });
+        }
+    });
+    return [deliver, manualTrigger];
+}
+async function deliverEvent({ ctx, instance, eventName, eventData, includeFullPayloadOverride, }) {
+    const includeFull = includeFullPayloadOverride ?? instance.config.includeFullPayload ?? false;
+    const body = JSON.stringify({
+        event: eventName,
+        data: includeFull ? eventData : extractIds(eventData),
+        timestamp: Date.now(),
+        instanceId: instance.id,
+    });
+    const signature = await hmacSha256Hex(body, instance.config.signingSecret);
+    const timeoutMs = (instance.config.timeoutSeconds ?? 10) * 1000;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let response;
+    try {
+        response = await fetch(instance.config.targetUrl, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                'x-throughline-event': eventName,
+                'x-throughline-signature': `sha256=${signature}`,
+                'x-throughline-timestamp': String(Date.now()),
+            },
+            body,
+            signal: controller.signal,
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        await ctx.updateStatus(instance.id, 'failed', message);
+        await ctx.recordAudit({
+            integrationId: WEBHOOK_INTEGRATION_ID,
+            instanceName: instance.name,
+            action: 'integration.failed',
+            summary: `Failed to deliver ${eventName} to ${instance.name}: ${message}`,
+            errorMessage: message,
+        });
+        throw error;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    const success = response.ok;
+    await ctx.updateStatus(instance.id, success ? 'success' : 'failed', success ? undefined : `HTTP ${response.status}`);
+    await ctx.recordAudit({
+        integrationId: WEBHOOK_INTEGRATION_ID,
+        instanceName: instance.name,
+        action: success ? 'integration.synced' : 'integration.failed',
+        summary: success
+            ? `Delivered ${eventName} to ${instance.name}`
+            : `Failed to deliver ${eventName} to ${instance.name} (HTTP ${response.status})`,
+        ...(success ? {} : { errorMessage: `HTTP ${response.status}` }),
+    });
+    if (!success) {
+        throw new Error(`Webhook delivery failed: HTTP ${response.status}`);
+    }
+}
+//# sourceMappingURL=functions.js.map

package/dist/integrations/webhook/functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"functions.js","sourceRoot":"","sources":["../../../src/integrations/webhook/functions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAA;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAuB;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CACxC;QACE,EAAE,EAAE,iBAAiB;QACrB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE;YACR,EAAE,KAAK,EAAE,wBAAwB,EAAE;YACnC,EAAE,KAAK,EAAE,0BAA0B,EAAE;YACrC,EAAE,KAAK,EAAE,0BAA0B,EAAE;YACrC,EAAE,KAAK,EAAE,0BAA0B,EAAE;YACrC,EAAE,KAAK,EAAE,kBAAkB,EAAE;SAC9B;KACF,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAC9D,GAAG,CAAC,aAAa,CAAgB,sBAAsB,CAAC,CACzD,CAAA;QAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAA;YAC1C,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAEzE,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;gBAClD,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YACrF,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CACF,CAAA;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAC9C;QACE,EAAE,EAAE,wBAAwB;QAC5B,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;KACjD,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAoD,CAAA;QAClF,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAA;QACxC,IAAI,CAAC,gBAAgB;YAAE,OAAM;QAE7B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,aAAa,CAAgB,sBAAsB,CAAC,CAAA;YAC1E,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;QAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;gBACvD,MAAM,YAAY,CAAC;oBACjB,GAAG;oBACH,QAAQ;oBACR,SAAS,EAAE,yBAAyB;oBACpC,SAAS,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE;oBACxE,0BAA0B,EAAE,IAAI;iBACjC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CACF,CAAA;IAED,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;AACjC,CAAC;AAUD,KAAK,UAAU,YAAY,CAAC,EAC1B,GAAG,EACH,QAAQ,EACR,SAAS,EACT,SAAS,EACT,0BAA0B,GACd;IACZ,MAAM,WAAW,GAAG,0BAA0B,IAAI,QAAQ,CAAC,MAAM,CAAC,kBAAkB,IAAI,KAAK,CAAA;IAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QACrD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,UAAU,EAAE,QAAQ,CAAC,EAAE;KACxB,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAC1E,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,GAAG,IAAI,CAAA;IAC/D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;IAE7D,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,qBAAqB,EAAE,SAAS;gBAChC,yBAAyB,EAAE,UAAU,SAAS,EAAE;gBAChD,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aAC9C;YACD,IAAI;YACJ,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QACtD,MAAM,GAAG,CAAC,WAAW,CAAC;YACpB,aAAa,EAAE,sBAAsB;YACrC,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,MAAM,EAAE,oBAAoB;YAC5B,OAAO,EAAE,qBAAqB,SAAS,OAAO,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE;YACzE,YAAY,EAAE,OAAO;SACtB,CAAC,CAAA;QACF,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAA;IAC3B,MAAM,GAAG,CAAC,YAAY,CACpB,QAAQ,CAAC,EAAE,EACX,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAC9B,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAChD,CAAA;IACD,MAAM,GAAG,CAAC,WAAW,CAAC;QACpB,aAAa,EAAE,sBAAsB;QACrC,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB;QAC7D,OAAO,EAAE,OAAO;YACd,CAAC,CAAC,aAAa,SAAS,OAAO,QAAQ,CAAC,IAAI,EAAE;YAC9C,CAAC,CAAC,qBAAqB,SAAS,OAAO,QAAQ,CAAC,IAAI,UAAU,QAAQ,CAAC,MAAM,GAAG;QAClF,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;KAChE,CAAC,CAAA;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACrE,CAAC;AACH,CAAC"}

package/dist/integrations/webhook/healthcheck.d.ts

@@ -0,0 +1,10 @@
+import type { IntegrationHealth } from '../../types.js';
+import type { WebhookConfig } from './config-fields.js';
+/**
+ * Light reachability check for the webhook target. Sends a HEAD request and
+ * accepts any 2xx, plus 405 (Method Not Allowed) since plenty of webhook
+ * receivers only allow POST and reject HEAD with 405. That's healthy enough
+ * for a "your endpoint is up" probe.
+ */
+export declare function healthcheck(config: WebhookConfig): Promise<IntegrationHealth>;
+//# sourceMappingURL=healthcheck.d.ts.map