@gravity-rail/sdk 0.8.0 → 0.11.0

package/dist/helpers.js

@@ -1,3 +1,7 @@
+import {
+  ApiError
+} from "./chunk-FSSXKQR5.js";
+
 // src/helpers/outbound.ts
 function normalizePhoneLast10(phone) {
   const digits = phone.replace(/\D/g, "");
@@ -46,10 +50,10 @@ async function resolveOutboundPhoneNumberId(client, workspaceUuid, configDefault
   return candidate;
 }
 async function resolveOutboundWorkflowId(client, workspaceUuid, defaultWorkflowId, override) {
-  const workflows = await client.getWorkflows(workspaceUuid, false);
-  const options = workflows.filter((workflow) => !workflow.archived).map((workflow) => ({
-    id: workflow.id,
-    name: workflow.name
+  const workflowsPage = await client.getWorkflows(workspaceUuid, { archived: false });
+  const options = workflowsPage.items.filter((item) => !item.workflow.archived).map((item) => ({
+    id: item.workflow.id,
+    name: item.workflow.name
   })).sort((a, b) => a.name.localeCompare(b.name));
   if (options.length === 0) {
     throw new Error("No workflows in this workspace. Create a workflow in Gravity Rail first.");
@@ -67,13 +71,7 @@ async function resolveOutboundWorkflowId(client, workspaceUuid, defaultWorkflowI
 async function findMemberByPhone(client, workspaceUuid, phone) {
   const searchDigits = phone.replace(/\D/g, "");
   for (let page = 1; page <= 5; page += 1) {
-    const response = await client.getWorkspaceMembers(
-      workspaceUuid,
-      page,
-      50,
-      void 0,
-      searchDigits
-    );
+    const response = await client.getWorkspaceMembers(workspaceUuid, page, 50, searchDigits);
     const match = response.items.find(
       (member) => member.phone && phonesMatchLast10(member.phone, phone)
     );
@@ -82,11 +80,156 @@ async function findMemberByPhone(client, workspaceUuid, phone) {
   }
   return null;
 }
+
+// src/helpers/enrollment.ts
+async function resolveMemberId(client, workspaceUuid, ref) {
+  if (typeof ref.memberId === "number") {
+    return ref.memberId;
+  }
+  if (ref.phone) {
+    const member = await findMemberByPhone(client, workspaceUuid, ref.phone);
+    if (member?.id) return member.id;
+    throw new Error("No member found for the provided phone number");
+  }
+  if (ref.externalId) {
+    const page = await client.getWorkspaceMembers(workspaceUuid, 1, 25, ref.externalId);
+    const match = page.items.find((m) => m.externalId === ref.externalId);
+    if (match?.id) return match.id;
+    throw new Error("No member found for the provided externalId");
+  }
+  throw new Error("Provide memberId, phone, or externalId");
+}
+async function findOrCreateMemberLabels(client, workspaceUuid, names, options = {}) {
+  const clean = names.map((n) => n.trim()).filter(Boolean);
+  if (clean.length === 0) return [];
+  const existing = await client.getMemberLabels(workspaceUuid);
+  const byName = new Map(existing.map((l) => [l.name.toLowerCase(), l]));
+  const ids = [];
+  for (const name of clean) {
+    const found = byName.get(name.toLowerCase());
+    if (found) {
+      ids.push(found.id);
+      continue;
+    }
+    const created = await client.createMemberLabel(workspaceUuid, {
+      name,
+      color: options.color ?? "#6366f1"
+    });
+    byName.set(name.toLowerCase(), created);
+    ids.push(created.id);
+  }
+  return ids;
+}
+async function upsertDataRecordForMember(client, workspaceUuid, dataTypeId, memberId, fieldValues) {
+  const existing = await client.getDataRecords(workspaceUuid, dataTypeId, {
+    memberId,
+    pageSize: 1
+  });
+  const record = existing.items?.[0];
+  const body = { dataTypeId, memberId, fieldValues };
+  if (record?.id) {
+    return client.updateDataRecord(workspaceUuid, dataTypeId, record.id, body);
+  }
+  return client.createDataRecord(workspaceUuid, dataTypeId, body);
+}
+async function enrollMemberInJourney(client, workspaceUuid, options) {
+  const memberId = await resolveMemberId(client, workspaceUuid, options);
+  const page = await client.getJourneys(workspaceUuid);
+  const journeys = page.items ?? [];
+  let journey;
+  if (options.journeyId != null) {
+    journey = journeys.find((j) => j.id === options.journeyId) ?? { id: options.journeyId };
+  } else {
+    journey = journeys[0];
+  }
+  if (!journey) {
+    throw new Error("No journey to enroll into: pass journeyId or create a journey");
+  }
+  const labelNames = (options.labels ?? []).map((l) => l.trim()).filter(Boolean);
+  if (labelNames.length > 0) {
+    const labelIds = await findOrCreateMemberLabels(client, workspaceUuid, labelNames, {
+      color: options.labelColor
+    });
+    const member = await client.getWorkspaceMember(workspaceUuid, memberId);
+    const existingIds = (member.labels ?? []).map((l) => l.id).filter((id) => typeof id === "number");
+    const mergedIds = Array.from(/* @__PURE__ */ new Set([...existingIds, ...labelIds]));
+    await client.updateMember(workspaceUuid, memberId, { labelIds: mergedIds });
+  }
+  try {
+    await client.enrollMembers(workspaceUuid, journey.id, { memberId });
+  } catch (error) {
+    if (!(error instanceof ApiError && error.statusCode === 409)) {
+      throw error;
+    }
+  }
+  return { journeyId: journey.id, journeyName: journey.name, memberId, appliedLabels: labelNames };
+}
+
+// src/helpers/webhooks.ts
+var WEBHOOK_SIGNATURE_HEADER = "X-Webhook-Signature";
+var encoder = new TextEncoder();
+async function hmacSha256Hex(secret, message) {
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(message));
+  return Array.from(new Uint8Array(signature)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+function timingSafeEqualHex(a, b) {
+  if (a.length !== b.length) return false;
+  let mismatch = 0;
+  for (let i = 0; i < a.length; i += 1) {
+    mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  }
+  return mismatch === 0;
+}
+async function signWebhookPayload(rawBody, secret, timestampSeconds) {
+  const digest = await hmacSha256Hex(secret, `${timestampSeconds}.${rawBody}`);
+  return `t=${timestampSeconds},v1=${digest}`;
+}
+async function verifyWebhookSignature(rawBody, signatureHeader, secret, options = {}) {
+  if (!signatureHeader) {
+    return { ok: false, reason: "missing signature header" };
+  }
+  const parts = {};
+  for (const segment of signatureHeader.split(",")) {
+    const idx = segment.indexOf("=");
+    if (idx > 0) {
+      parts[segment.slice(0, idx).trim()] = segment.slice(idx + 1).trim();
+    }
+  }
+  const timestamp = Number(parts.t);
+  const provided = parts.v1;
+  if (!Number.isFinite(timestamp) || !provided) {
+    return { ok: false, reason: "malformed signature header" };
+  }
+  const tolerance = options.toleranceSeconds ?? 300;
+  const now = options.nowSeconds ?? Math.floor(Date.now() / 1e3);
+  if (Math.abs(now - timestamp) > tolerance) {
+    return { ok: false, reason: "signature timestamp outside tolerance" };
+  }
+  const expected = await hmacSha256Hex(secret, `${timestamp}.${rawBody}`);
+  if (!timingSafeEqualHex(expected, provided)) {
+    return { ok: false, reason: "signature mismatch" };
+  }
+  return { ok: true };
+}
 export {
+  WEBHOOK_SIGNATURE_HEADER,
+  enrollMemberInJourney,
   findMemberByPhone,
+  findOrCreateMemberLabels,
   listOutboundPhoneNumbers,
   normalizePhoneLast10,
+  resolveMemberId,
   resolveOutboundPhoneNumberId,
-  resolveOutboundWorkflowId
+  resolveOutboundWorkflowId,
+  signWebhookPayload,
+  upsertDataRecordForMember,
+  verifyWebhookSignature
 };
 //# sourceMappingURL=helpers.js.map

package/dist/helpers.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/helpers/outbound.ts"],"sourcesContent":["import type { GravityRailClient } from '../client/client';\nimport type { Member } from '../types/member-types';\n\nexport interface OutboundPhoneNumberOption {\n   id: number;\n   number: string;\n   name: string | null;\n}\n\nexport interface WorkspacePhoneNumbersPayload {\n   phones: OutboundPhoneNumberOption[];\n   defaultPhoneNumberId: number | null;\n}\n\n/** App/env fallbacks when resolving outbound phone numbers. */\nexport interface OutboundPhoneNumberConfigDefaults {\n   /** e.g. GRAVITY_RAIL_PHONE_NUMBER_ID */\n   phoneNumberId?: number;\n   /** Explicit selection overriding workspace default */\n   requestedPhoneNumberId?: number;\n}\n\n/** Strip to digits and return the last 10 (US-friendly match). */\nexport function normalizePhoneLast10(phone: string): string {\n   const digits = phone.replace(/\\D/g, '');\n   return digits.length >= 10 ? digits.slice(-10) : digits;\n}\n\nfunction phonesMatchLast10(a: string, b: string): boolean {\n   const da = normalizePhoneLast10(a);\n   const db = normalizePhoneLast10(b);\n   if (!da || !db) return false;\n   if (da.length >= 10 && db.length >= 10) {\n      return da === db;\n   }\n   return da === db;\n}\n\nexport async function listOutboundPhoneNumbers(\n   client: GravityRailClient,\n   workspaceUuid: string\n): Promise<WorkspacePhoneNumbersPayload> {\n   const [phones, defaults] = await Promise.all([\n      client.getPhoneNumbers(workspaceUuid, { isArchived: false }),\n      client.getWorkspaceDefaults(workspaceUuid),\n   ]);\n\n   const voicePhones = phones\n      .filter((phone) => phone.enableVoice && !phone.isArchived)\n      .map((phone) => ({\n         id: phone.id,\n         number: phone.number,\n         name: phone.name,\n      }));\n\n   let defaultPhoneNumberId = defaults.defaultPhoneNumberId ?? null;\n   if (\n      defaultPhoneNumberId !== null &&\n      !voicePhones.some((phone) => phone.id === defaultPhoneNumberId)\n   ) {\n      defaultPhoneNumberId = voicePhones[0]?.id ?? null;\n   }\n   if (defaultPhoneNumberId === null) {\n      defaultPhoneNumberId = voicePhones[0]?.id ?? null;\n   }\n\n   return { phones: voicePhones, defaultPhoneNumberId };\n}\n\nexport async function resolveOutboundPhoneNumberId(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   configDefaults: OutboundPhoneNumberConfigDefaults\n): Promise<number> {\n   const { phones, defaultPhoneNumberId } = await listOutboundPhoneNumbers(client, workspaceUuid);\n\n   if (phones.length === 0) {\n      throw new Error(\n         'No voice-enabled phone numbers in this workspace. Add a line in Gravity Rail first.'\n      );\n   }\n\n   const requestedId = configDefaults.requestedPhoneNumberId;\n   const candidate =\n      requestedId ?? defaultPhoneNumberId ?? configDefaults.phoneNumberId ?? phones[0]?.id;\n\n   if (candidate === undefined || !phones.some((phone) => phone.id === candidate)) {\n      throw new Error('Selected outbound phone number is not available.');\n   }\n\n   return candidate;\n}\n\nexport async function resolveOutboundWorkflowId(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   defaultWorkflowId: number,\n   override?: number\n): Promise<number> {\n   const workflows = await client.getWorkflows(workspaceUuid, false);\n   const options = workflows\n      .filter((workflow) => !workflow.archived)\n      .map((workflow) => ({\n         id: workflow.id,\n         name: workflow.name,\n      }))\n      .sort((a, b) => a.name.localeCompare(b.name));\n\n   if (options.length === 0) {\n      throw new Error('No workflows in this workspace. Create a workflow in Gravity Rail first.');\n   }\n\n   let resolvedDefault = defaultWorkflowId;\n   if (!options.some((workflow) => workflow.id === resolvedDefault)) {\n      resolvedDefault = options[0]?.id ?? defaultWorkflowId;\n   }\n\n   const candidate = override ?? resolvedDefault;\n\n   if (!options.some((workflow) => workflow.id === candidate)) {\n      throw new Error('Selected workflow is not available.');\n   }\n\n   return candidate;\n}\n\nexport async function findMemberByPhone(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   phone: string\n): Promise<Member | null> {\n   const searchDigits = phone.replace(/\\D/g, '');\n\n   for (let page = 1; page <= 5; page += 1) {\n      const response = await client.getWorkspaceMembers(\n         workspaceUuid,\n         page,\n         50,\n         undefined,\n         searchDigits\n      );\n      const match = response.items.find(\n         (member) => member.phone && phonesMatchLast10(member.phone, phone)\n      );\n      if (match) return match;\n\n      if (page >= response.totalPages) break;\n   }\n\n   return null;\n}\n"],"mappings":";AAuBO,SAAS,qBAAqB,OAAuB;AACzD,QAAM,SAAS,MAAM,QAAQ,OAAO,EAAE;AACtC,SAAO,OAAO,UAAU,KAAK,OAAO,MAAM,GAAG,IAAI;AACpD;AAEA,SAAS,kBAAkB,GAAW,GAAoB;AACvD,QAAM,KAAK,qBAAqB,CAAC;AACjC,QAAM,KAAK,qBAAqB,CAAC;AACjC,MAAI,CAAC,MAAM,CAAC,GAAI,QAAO;AACvB,MAAI,GAAG,UAAU,MAAM,GAAG,UAAU,IAAI;AACrC,WAAO,OAAO;AAAA,EACjB;AACA,SAAO,OAAO;AACjB;AAEA,eAAsB,yBACnB,QACA,eACsC;AACtC,QAAM,CAAC,QAAQ,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC1C,OAAO,gBAAgB,eAAe,EAAE,YAAY,MAAM,CAAC;AAAA,IAC3D,OAAO,qBAAqB,aAAa;AAAA,EAC5C,CAAC;AAED,QAAM,cAAc,OAChB,OAAO,CAAC,UAAU,MAAM,eAAe,CAAC,MAAM,UAAU,EACxD,IAAI,CAAC,WAAW;AAAA,IACd,IAAI,MAAM;AAAA,IACV,QAAQ,MAAM;AAAA,IACd,MAAM,MAAM;AAAA,EACf,EAAE;AAEL,MAAI,uBAAuB,SAAS,wBAAwB;AAC5D,MACG,yBAAyB,QACzB,CAAC,YAAY,KAAK,CAAC,UAAU,MAAM,OAAO,oBAAoB,GAC/D;AACC,2BAAuB,YAAY,CAAC,GAAG,MAAM;AAAA,EAChD;AACA,MAAI,yBAAyB,MAAM;AAChC,2BAAuB,YAAY,CAAC,GAAG,MAAM;AAAA,EAChD;AAEA,SAAO,EAAE,QAAQ,aAAa,qBAAqB;AACtD;AAEA,eAAsB,6BACnB,QACA,eACA,gBACgB;AAChB,QAAM,EAAE,QAAQ,qBAAqB,IAAI,MAAM,yBAAyB,QAAQ,aAAa;AAE7F,MAAI,OAAO,WAAW,GAAG;AACtB,UAAM,IAAI;AAAA,MACP;AAAA,IACH;AAAA,EACH;AAEA,QAAM,cAAc,eAAe;AACnC,QAAM,YACH,eAAe,wBAAwB,eAAe,iBAAiB,OAAO,CAAC,GAAG;AAErF,MAAI,cAAc,UAAa,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,OAAO,SAAS,GAAG;AAC7E,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACrE;AAEA,SAAO;AACV;AAEA,eAAsB,0BACnB,QACA,eACA,mBACA,UACgB;AAChB,QAAM,YAAY,MAAM,OAAO,aAAa,eAAe,KAAK;AAChE,QAAM,UAAU,UACZ,OAAO,CAAC,aAAa,CAAC,SAAS,QAAQ,EACvC,IAAI,CAAC,cAAc;AAAA,IACjB,IAAI,SAAS;AAAA,IACb,MAAM,SAAS;AAAA,EAClB,EAAE,EACD,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAE/C,MAAI,QAAQ,WAAW,GAAG;AACvB,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC7F;AAEA,MAAI,kBAAkB;AACtB,MAAI,CAAC,QAAQ,KAAK,CAAC,aAAa,SAAS,OAAO,eAAe,GAAG;AAC/D,sBAAkB,QAAQ,CAAC,GAAG,MAAM;AAAA,EACvC;AAEA,QAAM,YAAY,YAAY;AAE9B,MAAI,CAAC,QAAQ,KAAK,CAAC,aAAa,SAAS,OAAO,SAAS,GAAG;AACzD,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACxD;AAEA,SAAO;AACV;AAEA,eAAsB,kBACnB,QACA,eACA,OACuB;AACvB,QAAM,eAAe,MAAM,QAAQ,OAAO,EAAE;AAE5C,WAAS,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG;AACtC,UAAM,WAAW,MAAM,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACH;AACA,UAAM,QAAQ,SAAS,MAAM;AAAA,MAC1B,CAAC,WAAW,OAAO,SAAS,kBAAkB,OAAO,OAAO,KAAK;AAAA,IACpE;AACA,QAAI,MAAO,QAAO;AAElB,QAAI,QAAQ,SAAS,WAAY;AAAA,EACpC;AAEA,SAAO;AACV;","names":[]}
+{"version":3,"sources":["../src/helpers/outbound.ts","../src/helpers/enrollment.ts","../src/helpers/webhooks.ts"],"sourcesContent":["import type { GravityRailClient } from '../client/client';\nimport type { Member } from '../types/member-types';\n\nexport interface OutboundPhoneNumberOption {\n   id: number;\n   number: string;\n   name: string | null;\n}\n\nexport interface WorkspacePhoneNumbersPayload {\n   phones: OutboundPhoneNumberOption[];\n   defaultPhoneNumberId: number | null;\n}\n\n/** App/env fallbacks when resolving outbound phone numbers. */\nexport interface OutboundPhoneNumberConfigDefaults {\n   /** e.g. GRAVITY_RAIL_PHONE_NUMBER_ID */\n   phoneNumberId?: number;\n   /** Explicit selection overriding workspace default */\n   requestedPhoneNumberId?: number;\n}\n\n/** Strip to digits and return the last 10 (US-friendly match). */\nexport function normalizePhoneLast10(phone: string): string {\n   const digits = phone.replace(/\\D/g, '');\n   return digits.length >= 10 ? digits.slice(-10) : digits;\n}\n\nfunction phonesMatchLast10(a: string, b: string): boolean {\n   const da = normalizePhoneLast10(a);\n   const db = normalizePhoneLast10(b);\n   if (!da || !db) return false;\n   if (da.length >= 10 && db.length >= 10) {\n      return da === db;\n   }\n   return da === db;\n}\n\nexport async function listOutboundPhoneNumbers(\n   client: GravityRailClient,\n   workspaceUuid: string\n): Promise<WorkspacePhoneNumbersPayload> {\n   const [phones, defaults] = await Promise.all([\n      client.getPhoneNumbers(workspaceUuid, { isArchived: false }),\n      client.getWorkspaceDefaults(workspaceUuid),\n   ]);\n\n   const voicePhones = phones\n      .filter((phone) => phone.enableVoice && !phone.isArchived)\n      .map((phone) => ({\n         id: phone.id,\n         number: phone.number,\n         name: phone.name,\n      }));\n\n   let defaultPhoneNumberId = defaults.defaultPhoneNumberId ?? null;\n   if (\n      defaultPhoneNumberId !== null &&\n      !voicePhones.some((phone) => phone.id === defaultPhoneNumberId)\n   ) {\n      defaultPhoneNumberId = voicePhones[0]?.id ?? null;\n   }\n   if (defaultPhoneNumberId === null) {\n      defaultPhoneNumberId = voicePhones[0]?.id ?? null;\n   }\n\n   return { phones: voicePhones, defaultPhoneNumberId };\n}\n\nexport async function resolveOutboundPhoneNumberId(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   configDefaults: OutboundPhoneNumberConfigDefaults\n): Promise<number> {\n   const { phones, defaultPhoneNumberId } = await listOutboundPhoneNumbers(client, workspaceUuid);\n\n   if (phones.length === 0) {\n      throw new Error(\n         'No voice-enabled phone numbers in this workspace. Add a line in Gravity Rail first.'\n      );\n   }\n\n   const requestedId = configDefaults.requestedPhoneNumberId;\n   const candidate =\n      requestedId ?? defaultPhoneNumberId ?? configDefaults.phoneNumberId ?? phones[0]?.id;\n\n   if (candidate === undefined || !phones.some((phone) => phone.id === candidate)) {\n      throw new Error('Selected outbound phone number is not available.');\n   }\n\n   return candidate;\n}\n\nexport async function resolveOutboundWorkflowId(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   defaultWorkflowId: number,\n   override?: number\n): Promise<number> {\n   const workflowsPage = await client.getWorkflows(workspaceUuid, { archived: false });\n   const options = workflowsPage.items\n      .filter((item) => !item.workflow.archived)\n      .map((item) => ({\n         id: item.workflow.id,\n         name: item.workflow.name,\n      }))\n      .sort((a, b) => a.name.localeCompare(b.name));\n\n   if (options.length === 0) {\n      throw new Error('No workflows in this workspace. Create a workflow in Gravity Rail first.');\n   }\n\n   let resolvedDefault = defaultWorkflowId;\n   if (!options.some((workflow) => workflow.id === resolvedDefault)) {\n      resolvedDefault = options[0]?.id ?? defaultWorkflowId;\n   }\n\n   const candidate = override ?? resolvedDefault;\n\n   if (!options.some((workflow) => workflow.id === candidate)) {\n      throw new Error('Selected workflow is not available.');\n   }\n\n   return candidate;\n}\n\nexport async function findMemberByPhone(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   phone: string\n): Promise<Member | null> {\n   const searchDigits = phone.replace(/\\D/g, '');\n\n   for (let page = 1; page <= 5; page += 1) {\n      const response = await client.getWorkspaceMembers(workspaceUuid, page, 50, searchDigits);\n      const match = response.items.find(\n         (member) => member.phone && phonesMatchLast10(member.phone, phone)\n      );\n      if (match) return match;\n\n      if (page >= response.totalPages) break;\n   }\n\n   return null;\n}\n","/**\n * Enrollment-flow helpers: the small compound operations every integration\n * re-implements when wiring \"register member → populate a form → enroll into a\n * journey\". They build on the plain client methods and are safe to call from a\n * server-side BFF.\n */\nimport { ApiError } from '../api/base';\nimport type { GravityRailClient } from '../client/client';\nimport type { DataRecord } from '../types/data-types';\nimport { findMemberByPhone } from './outbound';\n\n/** Identify a member by any one of these; `memberId` wins when present. */\nexport interface MemberRef {\n   memberId?: number;\n   phone?: string;\n   externalId?: string;\n}\n\n/** Resolve a `MemberRef` to a concrete member id (throws if none matches). */\nexport async function resolveMemberId(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   ref: MemberRef\n): Promise<number> {\n   if (typeof ref.memberId === 'number') {\n      return ref.memberId;\n   }\n   if (ref.phone) {\n      const member = await findMemberByPhone(client, workspaceUuid, ref.phone);\n      if (member?.id) return member.id;\n      // Do not put the phone (PHI) in the message — it propagates to callers.\n      throw new Error('No member found for the provided phone number');\n   }\n   if (ref.externalId) {\n      const page = await client.getWorkspaceMembers(workspaceUuid, 1, 25, ref.externalId);\n      const match = page.items.find((m) => m.externalId === ref.externalId);\n      if (match?.id) return match.id;\n      // Do not put the externalId (PHI) in the message — it propagates to callers.\n      throw new Error('No member found for the provided externalId');\n   }\n   throw new Error('Provide memberId, phone, or externalId');\n}\n\n/**\n * Find member labels by name, creating any that don't exist, and return their\n * ids. Case-insensitive match on name. (The API derives the slug from the name.)\n */\nexport async function findOrCreateMemberLabels(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   names: string[],\n   options: { color?: string } = {}\n): Promise<number[]> {\n   const clean = names.map((n) => n.trim()).filter(Boolean);\n   if (clean.length === 0) return [];\n\n   const existing = await client.getMemberLabels(workspaceUuid);\n   const byName = new Map(existing.map((l) => [l.name.toLowerCase(), l]));\n   const ids: number[] = [];\n   for (const name of clean) {\n      const found = byName.get(name.toLowerCase());\n      if (found) {\n         ids.push(found.id);\n         continue;\n      }\n      const created = await client.createMemberLabel(workspaceUuid, {\n         name,\n         color: options.color ?? '#6366f1',\n      });\n      byName.set(name.toLowerCase(), created);\n      ids.push(created.id);\n   }\n   return ids;\n}\n\n/**\n * Idempotently write a member-scoped data record: update the member's existing\n * record for the DataType if one exists, otherwise create it.\n */\nexport async function upsertDataRecordForMember(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   dataTypeId: number,\n   memberId: number,\n   fieldValues: Record<string, unknown>\n): Promise<DataRecord> {\n   const existing = await client.getDataRecords(workspaceUuid, dataTypeId, {\n      memberId,\n      pageSize: 1,\n   });\n   const record = existing.items?.[0];\n   const body = { dataTypeId, memberId, fieldValues };\n   if (record?.id) {\n      return client.updateDataRecord(workspaceUuid, dataTypeId, record.id, body);\n   }\n   return client.createDataRecord(workspaceUuid, dataTypeId, body);\n}\n\nexport interface EnrollMemberInJourneyOptions extends MemberRef {\n   /** Journey to enroll into. Defaults to the workspace's first journey. */\n   journeyId?: number;\n   /** Labels to apply to the member before enrolling (journey/cohort tags). */\n   labels?: string[];\n   labelColor?: string;\n}\n\nexport interface EnrollMemberInJourneyResult {\n   journeyId: number;\n   journeyName?: string;\n   memberId: number;\n   appliedLabels: string[];\n}\n\n/**\n * Resolve a member, optionally tag them, and enroll them into a journey. Treats\n * an \"already enrolled\" (409) response as success.\n */\nexport async function enrollMemberInJourney(\n   client: GravityRailClient,\n   workspaceUuid: string,\n   options: EnrollMemberInJourneyOptions\n): Promise<EnrollMemberInJourneyResult> {\n   const memberId = await resolveMemberId(client, workspaceUuid, options);\n\n   const page = await client.getJourneys(workspaceUuid);\n   const journeys = page.items ?? [];\n   let journey: { id: number; name?: string } | undefined;\n   if (options.journeyId != null) {\n      journey = journeys.find((j) => j.id === options.journeyId) ?? { id: options.journeyId };\n   } else {\n      journey = journeys[0];\n   }\n   if (!journey) {\n      throw new Error('No journey to enroll into: pass journeyId or create a journey');\n   }\n\n   const labelNames = (options.labels ?? []).map((l) => l.trim()).filter(Boolean);\n   if (labelNames.length > 0) {\n      const labelIds = await findOrCreateMemberLabels(client, workspaceUuid, labelNames, {\n         color: options.labelColor,\n      });\n      // updateMember replaces the label set, so merge with the member's existing\n      // labels rather than wiping them.\n      const member = await client.getWorkspaceMember(workspaceUuid, memberId);\n      const existingIds = (member.labels ?? [])\n         .map((l) => l.id)\n         .filter((id): id is number => typeof id === 'number');\n      const mergedIds = Array.from(new Set([...existingIds, ...labelIds]));\n      await client.updateMember(workspaceUuid, memberId, { labelIds: mergedIds });\n   }\n\n   try {\n      await client.enrollMembers(workspaceUuid, journey.id, { memberId });\n   } catch (error) {\n      if (!(error instanceof ApiError && error.statusCode === 409)) {\n         throw error;\n      }\n   }\n\n   return { journeyId: journey.id, journeyName: journey.name, memberId, appliedLabels: labelNames };\n}\n","/**\n * Webhook signature helpers.\n *\n * Gravity Rail signs every outbound webhook with HMAC-SHA256 and sends the\n * result in the `X-Webhook-Signature` header as `t={unixSeconds},v1={hexDigest}`.\n * The signed message is the timestamp, a literal dot, then the raw request body:\n *\n *     HMAC_SHA256(secret, `${t}.` + rawBody)\n *\n * The timestamp defeats replay — reject signatures older than the tolerance\n * window. Verify the signature against the RAW request body bytes, before any\n * JSON parsing/re-serialization.\n *\n * These use the Web Crypto API (`crypto.subtle`), so they run unchanged in Node\n * 18+ and the browser/edge runtimes.\n */\n\nexport const WEBHOOK_SIGNATURE_HEADER = 'X-Webhook-Signature';\n\nconst encoder = new TextEncoder();\n\nasync function hmacSha256Hex(secret: string, message: string): Promise<string> {\n   const key = await crypto.subtle.importKey(\n      'raw',\n      encoder.encode(secret),\n      { name: 'HMAC', hash: 'SHA-256' },\n      false,\n      ['sign']\n   );\n   const signature = await crypto.subtle.sign('HMAC', key, encoder.encode(message));\n   return Array.from(new Uint8Array(signature))\n      .map((b) => b.toString(16).padStart(2, '0'))\n      .join('');\n}\n\n/** Constant-time comparison of two equal-length hex strings. */\nfunction timingSafeEqualHex(a: string, b: string): boolean {\n   if (a.length !== b.length) return false;\n   let mismatch = 0;\n   for (let i = 0; i < a.length; i += 1) {\n      mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);\n   }\n   return mismatch === 0;\n}\n\n/**\n * Produce the `X-Webhook-Signature` header value for a payload. Primarily useful\n * for tests and for re-signing when relaying webhooks.\n */\nexport async function signWebhookPayload(\n   rawBody: string,\n   secret: string,\n   timestampSeconds: number\n): Promise<string> {\n   const digest = await hmacSha256Hex(secret, `${timestampSeconds}.${rawBody}`);\n   return `t=${timestampSeconds},v1=${digest}`;\n}\n\nexport interface VerifyWebhookOptions {\n   /** Max age of the signature in seconds (default 300). */\n   toleranceSeconds?: number;\n   /** Override \"now\" (unix seconds) — for deterministic tests. */\n   nowSeconds?: number;\n}\n\nexport type VerifyWebhookResult = { ok: true } | { ok: false; reason: string };\n\n/**\n * Verify a webhook signature against the raw body. Returns a discriminated\n * result so callers can log the reason; it never throws on a bad signature.\n */\nexport async function verifyWebhookSignature(\n   rawBody: string,\n   signatureHeader: string | null | undefined,\n   secret: string,\n   options: VerifyWebhookOptions = {}\n): Promise<VerifyWebhookResult> {\n   if (!signatureHeader) {\n      return { ok: false, reason: 'missing signature header' };\n   }\n\n   const parts: Record<string, string> = {};\n   for (const segment of signatureHeader.split(',')) {\n      const idx = segment.indexOf('=');\n      if (idx > 0) {\n         parts[segment.slice(0, idx).trim()] = segment.slice(idx + 1).trim();\n      }\n   }\n\n   const timestamp = Number(parts.t);\n   const provided = parts.v1;\n   if (!Number.isFinite(timestamp) || !provided) {\n      return { ok: false, reason: 'malformed signature header' };\n   }\n\n   const tolerance = options.toleranceSeconds ?? 300;\n   const now = options.nowSeconds ?? Math.floor(Date.now() / 1000);\n   if (Math.abs(now - timestamp) > tolerance) {\n      return { ok: false, reason: 'signature timestamp outside tolerance' };\n   }\n\n   const expected = await hmacSha256Hex(secret, `${timestamp}.${rawBody}`);\n   if (!timingSafeEqualHex(expected, provided)) {\n      return { ok: false, reason: 'signature mismatch' };\n   }\n\n   return { ok: true };\n}\n"],"mappings":";;;;;AAuBO,SAAS,qBAAqB,OAAuB;AACzD,QAAM,SAAS,MAAM,QAAQ,OAAO,EAAE;AACtC,SAAO,OAAO,UAAU,KAAK,OAAO,MAAM,GAAG,IAAI;AACpD;AAEA,SAAS,kBAAkB,GAAW,GAAoB;AACvD,QAAM,KAAK,qBAAqB,CAAC;AACjC,QAAM,KAAK,qBAAqB,CAAC;AACjC,MAAI,CAAC,MAAM,CAAC,GAAI,QAAO;AACvB,MAAI,GAAG,UAAU,MAAM,GAAG,UAAU,IAAI;AACrC,WAAO,OAAO;AAAA,EACjB;AACA,SAAO,OAAO;AACjB;AAEA,eAAsB,yBACnB,QACA,eACsC;AACtC,QAAM,CAAC,QAAQ,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC1C,OAAO,gBAAgB,eAAe,EAAE,YAAY,MAAM,CAAC;AAAA,IAC3D,OAAO,qBAAqB,aAAa;AAAA,EAC5C,CAAC;AAED,QAAM,cAAc,OAChB,OAAO,CAAC,UAAU,MAAM,eAAe,CAAC,MAAM,UAAU,EACxD,IAAI,CAAC,WAAW;AAAA,IACd,IAAI,MAAM;AAAA,IACV,QAAQ,MAAM;AAAA,IACd,MAAM,MAAM;AAAA,EACf,EAAE;AAEL,MAAI,uBAAuB,SAAS,wBAAwB;AAC5D,MACG,yBAAyB,QACzB,CAAC,YAAY,KAAK,CAAC,UAAU,MAAM,OAAO,oBAAoB,GAC/D;AACC,2BAAuB,YAAY,CAAC,GAAG,MAAM;AAAA,EAChD;AACA,MAAI,yBAAyB,MAAM;AAChC,2BAAuB,YAAY,CAAC,GAAG,MAAM;AAAA,EAChD;AAEA,SAAO,EAAE,QAAQ,aAAa,qBAAqB;AACtD;AAEA,eAAsB,6BACnB,QACA,eACA,gBACgB;AAChB,QAAM,EAAE,QAAQ,qBAAqB,IAAI,MAAM,yBAAyB,QAAQ,aAAa;AAE7F,MAAI,OAAO,WAAW,GAAG;AACtB,UAAM,IAAI;AAAA,MACP;AAAA,IACH;AAAA,EACH;AAEA,QAAM,cAAc,eAAe;AACnC,QAAM,YACH,eAAe,wBAAwB,eAAe,iBAAiB,OAAO,CAAC,GAAG;AAErF,MAAI,cAAc,UAAa,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,OAAO,SAAS,GAAG;AAC7E,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACrE;AAEA,SAAO;AACV;AAEA,eAAsB,0BACnB,QACA,eACA,mBACA,UACgB;AAChB,QAAM,gBAAgB,MAAM,OAAO,aAAa,eAAe,EAAE,UAAU,MAAM,CAAC;AAClF,QAAM,UAAU,cAAc,MAC1B,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS,QAAQ,EACxC,IAAI,CAAC,UAAU;AAAA,IACb,IAAI,KAAK,SAAS;AAAA,IAClB,MAAM,KAAK,SAAS;AAAA,EACvB,EAAE,EACD,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAE/C,MAAI,QAAQ,WAAW,GAAG;AACvB,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC7F;AAEA,MAAI,kBAAkB;AACtB,MAAI,CAAC,QAAQ,KAAK,CAAC,aAAa,SAAS,OAAO,eAAe,GAAG;AAC/D,sBAAkB,QAAQ,CAAC,GAAG,MAAM;AAAA,EACvC;AAEA,QAAM,YAAY,YAAY;AAE9B,MAAI,CAAC,QAAQ,KAAK,CAAC,aAAa,SAAS,OAAO,SAAS,GAAG;AACzD,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACxD;AAEA,SAAO;AACV;AAEA,eAAsB,kBACnB,QACA,eACA,OACuB;AACvB,QAAM,eAAe,MAAM,QAAQ,OAAO,EAAE;AAE5C,WAAS,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG;AACtC,UAAM,WAAW,MAAM,OAAO,oBAAoB,eAAe,MAAM,IAAI,YAAY;AACvF,UAAM,QAAQ,SAAS,MAAM;AAAA,MAC1B,CAAC,WAAW,OAAO,SAAS,kBAAkB,OAAO,OAAO,KAAK;AAAA,IACpE;AACA,QAAI,MAAO,QAAO;AAElB,QAAI,QAAQ,SAAS,WAAY;AAAA,EACpC;AAEA,SAAO;AACV;;;AC7HA,eAAsB,gBACnB,QACA,eACA,KACgB;AAChB,MAAI,OAAO,IAAI,aAAa,UAAU;AACnC,WAAO,IAAI;AAAA,EACd;AACA,MAAI,IAAI,OAAO;AACZ,UAAM,SAAS,MAAM,kBAAkB,QAAQ,eAAe,IAAI,KAAK;AACvE,QAAI,QAAQ,GAAI,QAAO,OAAO;AAE9B,UAAM,IAAI,MAAM,+CAA+C;AAAA,EAClE;AACA,MAAI,IAAI,YAAY;AACjB,UAAM,OAAO,MAAM,OAAO,oBAAoB,eAAe,GAAG,IAAI,IAAI,UAAU;AAClF,UAAM,QAAQ,KAAK,MAAM,KAAK,CAAC,MAAM,EAAE,eAAe,IAAI,UAAU;AACpE,QAAI,OAAO,GAAI,QAAO,MAAM;AAE5B,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAChE;AACA,QAAM,IAAI,MAAM,wCAAwC;AAC3D;AAMA,eAAsB,yBACnB,QACA,eACA,OACA,UAA8B,CAAC,GACb;AAClB,QAAM,QAAQ,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACvD,MAAI,MAAM,WAAW,EAAG,QAAO,CAAC;AAEhC,QAAM,WAAW,MAAM,OAAO,gBAAgB,aAAa;AAC3D,QAAM,SAAS,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC;AACrE,QAAM,MAAgB,CAAC;AACvB,aAAW,QAAQ,OAAO;AACvB,UAAM,QAAQ,OAAO,IAAI,KAAK,YAAY,CAAC;AAC3C,QAAI,OAAO;AACR,UAAI,KAAK,MAAM,EAAE;AACjB;AAAA,IACH;AACA,UAAM,UAAU,MAAM,OAAO,kBAAkB,eAAe;AAAA,MAC3D;AAAA,MACA,OAAO,QAAQ,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,IAAI,KAAK,YAAY,GAAG,OAAO;AACtC,QAAI,KAAK,QAAQ,EAAE;AAAA,EACtB;AACA,SAAO;AACV;AAMA,eAAsB,0BACnB,QACA,eACA,YACA,UACA,aACoB;AACpB,QAAM,WAAW,MAAM,OAAO,eAAe,eAAe,YAAY;AAAA,IACrE;AAAA,IACA,UAAU;AAAA,EACb,CAAC;AACD,QAAM,SAAS,SAAS,QAAQ,CAAC;AACjC,QAAM,OAAO,EAAE,YAAY,UAAU,YAAY;AACjD,MAAI,QAAQ,IAAI;AACb,WAAO,OAAO,iBAAiB,eAAe,YAAY,OAAO,IAAI,IAAI;AAAA,EAC5E;AACA,SAAO,OAAO,iBAAiB,eAAe,YAAY,IAAI;AACjE;AAqBA,eAAsB,sBACnB,QACA,eACA,SACqC;AACrC,QAAM,WAAW,MAAM,gBAAgB,QAAQ,eAAe,OAAO;AAErE,QAAM,OAAO,MAAM,OAAO,YAAY,aAAa;AACnD,QAAM,WAAW,KAAK,SAAS,CAAC;AAChC,MAAI;AACJ,MAAI,QAAQ,aAAa,MAAM;AAC5B,cAAU,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,SAAS,KAAK,EAAE,IAAI,QAAQ,UAAU;AAAA,EACzF,OAAO;AACJ,cAAU,SAAS,CAAC;AAAA,EACvB;AACA,MAAI,CAAC,SAAS;AACX,UAAM,IAAI,MAAM,+DAA+D;AAAA,EAClF;AAEA,QAAM,cAAc,QAAQ,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAC7E,MAAI,WAAW,SAAS,GAAG;AACxB,UAAM,WAAW,MAAM,yBAAyB,QAAQ,eAAe,YAAY;AAAA,MAChF,OAAO,QAAQ;AAAA,IAClB,CAAC;AAGD,UAAM,SAAS,MAAM,OAAO,mBAAmB,eAAe,QAAQ;AACtE,UAAM,eAAe,OAAO,UAAU,CAAC,GACnC,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,CAAC,OAAqB,OAAO,OAAO,QAAQ;AACvD,UAAM,YAAY,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,aAAa,GAAG,QAAQ,CAAC,CAAC;AACnE,UAAM,OAAO,aAAa,eAAe,UAAU,EAAE,UAAU,UAAU,CAAC;AAAA,EAC7E;AAEA,MAAI;AACD,UAAM,OAAO,cAAc,eAAe,QAAQ,IAAI,EAAE,SAAS,CAAC;AAAA,EACrE,SAAS,OAAO;AACb,QAAI,EAAE,iBAAiB,YAAY,MAAM,eAAe,MAAM;AAC3D,YAAM;AAAA,IACT;AAAA,EACH;AAEA,SAAO,EAAE,WAAW,QAAQ,IAAI,aAAa,QAAQ,MAAM,UAAU,eAAe,WAAW;AAClG;;;AC/IO,IAAM,2BAA2B;AAExC,IAAM,UAAU,IAAI,YAAY;AAEhC,eAAe,cAAc,QAAgB,SAAkC;AAC5E,QAAM,MAAM,MAAM,OAAO,OAAO;AAAA,IAC7B;AAAA,IACA,QAAQ,OAAO,MAAM;AAAA,IACrB,EAAE,MAAM,QAAQ,MAAM,UAAU;AAAA,IAChC;AAAA,IACA,CAAC,MAAM;AAAA,EACV;AACA,QAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,QAAQ,OAAO,OAAO,CAAC;AAC/E,SAAO,MAAM,KAAK,IAAI,WAAW,SAAS,CAAC,EACvC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACd;AAGA,SAAS,mBAAmB,GAAW,GAAoB;AACxD,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI,WAAW;AACf,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK,GAAG;AACnC,gBAAY,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC;AAAA,EAC/C;AACA,SAAO,aAAa;AACvB;AAMA,eAAsB,mBACnB,SACA,QACA,kBACgB;AAChB,QAAM,SAAS,MAAM,cAAc,QAAQ,GAAG,gBAAgB,IAAI,OAAO,EAAE;AAC3E,SAAO,KAAK,gBAAgB,OAAO,MAAM;AAC5C;AAeA,eAAsB,uBACnB,SACA,iBACA,QACA,UAAgC,CAAC,GACJ;AAC7B,MAAI,CAAC,iBAAiB;AACnB,WAAO,EAAE,IAAI,OAAO,QAAQ,2BAA2B;AAAA,EAC1D;AAEA,QAAM,QAAgC,CAAC;AACvC,aAAW,WAAW,gBAAgB,MAAM,GAAG,GAAG;AAC/C,UAAM,MAAM,QAAQ,QAAQ,GAAG;AAC/B,QAAI,MAAM,GAAG;AACV,YAAM,QAAQ,MAAM,GAAG,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,MAAM,MAAM,CAAC,EAAE,KAAK;AAAA,IACrE;AAAA,EACH;AAEA,QAAM,YAAY,OAAO,MAAM,CAAC;AAChC,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,OAAO,SAAS,SAAS,KAAK,CAAC,UAAU;AAC3C,WAAO,EAAE,IAAI,OAAO,QAAQ,6BAA6B;AAAA,EAC5D;AAEA,QAAM,YAAY,QAAQ,oBAAoB;AAC9C,QAAM,MAAM,QAAQ,cAAc,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAC9D,MAAI,KAAK,IAAI,MAAM,SAAS,IAAI,WAAW;AACxC,WAAO,EAAE,IAAI,OAAO,QAAQ,wCAAwC;AAAA,EACvE;AAEA,QAAM,WAAW,MAAM,cAAc,QAAQ,GAAG,SAAS,IAAI,OAAO,EAAE;AACtE,MAAI,CAAC,mBAAmB,UAAU,QAAQ,GAAG;AAC1C,WAAO,EAAE,IAAI,OAAO,QAAQ,qBAAqB;AAAA,EACpD;AAEA,SAAO,EAAE,IAAI,KAAK;AACrB;","names":[]}