@happyvertical/smrt-webhooks 0.0.0-stage → 0.55.10

package/dist/models.d.ts

@@ -0,0 +1,43 @@
+import { SmrtCollection, SmrtObject } from '@happyvertical/smrt-core';
+import { type JobExecutionContext } from '@happyvertical/smrt-jobs';
+/** Server-only subscription. Hosts authorize administration before accessing it. */
+export declare class WebhookSubscription extends SmrtObject {
+    tenantId: string;
+    url: string;
+    events: string[];
+    models: string[];
+    secret: string;
+    enabled: boolean;
+    save(): Promise<this>;
+}
+export declare class WebhookSubscriptionCollection extends SmrtCollection<WebhookSubscription> {
+    static readonly _itemClass: typeof WebhookSubscription;
+}
+/** Durable outbox and safe outcome metadata; payload never appears in public projections. */
+export declare class WebhookDelivery extends SmrtObject {
+    tenantId: string;
+    subscriptionId: string;
+    eventId: string;
+    payload: string;
+    status: string;
+    generation: number;
+    attempts: number;
+    responseStatus: number | null;
+    error: string | null;
+    leaseToken: string | null;
+    leaseUntil: Date | null;
+}
+export declare class WebhookDeliveryCollection extends SmrtCollection<WebhookDelivery> {
+    static readonly _itemClass: typeof WebhookDelivery;
+}
+/** Jobs queue entry point; persisted arguments contain IDs only. */
+export declare class WebhookDeliveryTask extends SmrtObject {
+    deliver(args?: Record<string, unknown>, _context?: JobExecutionContext): Promise<void>;
+}
+/** Tenant-bound durable cursor for replayable model change-feed publication. */
+export declare class WebhookCursor extends SmrtObject {
+    tenantId: string;
+    runtime: string;
+    position: number;
+}
+//# sourceMappingURL=models.d.ts.map

package/dist/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,cAAc,EACd,UAAU,EAEX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,0BAA0B,CAAC;AAIlC,oFAAoF;AACpF,qBAOa,mBAAoB,SAAQ,UAAU;IACrC,QAAQ,EAAE,MAAM,CAAM;IACO,GAAG,EAAE,MAAM,CAAM;IACjC,MAAM,EAAE,MAAM,EAAE,CAAM;IACtB,MAAM,EAAE,MAAM,EAAE,CAAM;IACW,MAAM,EAAE,MAAM,CAAM;IACnC,OAAO,EAAE,OAAO,CAAQ;IAEpD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAcrC;AACD,qBAAa,6BAA8B,SAAQ,cAAc,CAAC,mBAAmB,CAAC;IACpF,MAAM,CAAC,QAAQ,CAAC,UAAU,6BAAuB;CAClD;AAED,6FAA6F;AAC7F,qBAca,eAAgB,SAAQ,UAAU;IACjC,QAAQ,EAAE,MAAM,CAAM;IAKlC,cAAc,EAAE,MAAM,CAAM;IACa,OAAO,EAAE,MAAM,CAAM;IACJ,OAAO,EAAE,MAAM,CACpE;IACwC,MAAM,EAAE,MAAM,CAAa;IAChC,UAAU,EAAE,MAAM,CAAK;IACvB,QAAQ,EAAE,MAAM,CAAK;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAClE;IACkC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAQ;IACX,UAAU,EAChE,MAAM,GACN,IAAI,CAAQ;IAC6B,UAAU,EAAE,IAAI,GAAG,IAAI,CAAQ;CAC7E;AACD,qBAAa,yBAA0B,SAAQ,cAAc,CAAC,eAAe,CAAC;IAC5E,MAAM,CAAC,QAAQ,CAAC,UAAU,yBAAmB;CAC9C;AAED,oEAAoE;AACpE,qBAMa,mBAAoB,SAAQ,UAAU;IAE3C,OAAO,CACX,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,OAAO,CAAC,IAAI,CAAC;CAIjB;AAED,gFAAgF;AAChF,qBAca,aAAc,SAAQ,UAAU;IAC/B,QAAQ,EAAE,MAAM,CAAM;IACO,OAAO,EAAE,MAAM,CAAM;IACtB,QAAQ,EAAE,MAAM,CAAK;CAC9D"}

package/dist/recipes.d.ts

@@ -0,0 +1,23 @@
+import { SmrtRecipe } from '@happyvertical/smrt-core';
+import { WebhookCursor, WebhookDelivery, WebhookDeliveryTask, WebhookSubscription } from './models.js';
+/** Server-backed administration through authenticated host callbacks. */
+export declare class WebhooksRecipe extends SmrtRecipe {
+    static id: string;
+    static label: string;
+    static summary: string;
+    static models: (typeof WebhookSubscription | typeof WebhookDelivery | typeof WebhookDeliveryTask | typeof WebhookCursor)[];
+    static group: {
+        id: string;
+        label: string;
+        summary: string;
+    };
+    static runtime: "server";
+    static surfaces: readonly [{
+        readonly kind: "settings-panel";
+        readonly export: "@happyvertical/smrt-webhooks/svelte#WebhookAdmin";
+        readonly label: "Outbound webhooks";
+    }];
+    static nav: never[];
+    static help: string;
+}
+//# sourceMappingURL=recipes.d.ts.map

package/dist/recipes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipes.d.ts","sourceRoot":"","sources":["../src/recipes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EACL,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,aAAa,CAAC;AACrB,yEAAyE;AACzE,qBAAa,cAAe,SAAQ,UAAU;IAC5C,MAAM,CAAC,EAAE,SAA2B;IACpC,MAAM,CAAC,KAAK,SAAuB;IACnC,MAAM,CAAC,OAAO,SAC+D;IAC7E,MAAM,CAAC,MAAM,8GAKX;IACF,MAAM,CAAC,KAAK;;;;MAIV;IACF,MAAM,CAAC,OAAO,EAAG,QAAQ,CAAU;IACnC,MAAM,CAAC,QAAQ;;;;OAMJ;IAEX,MAAM,CAAC,GAAG,UAAM;IAChB,MAAM,CAAC,IAAI,SAA0B;CACtC"}

package/dist/security.d.ts

@@ -0,0 +1,15 @@
+/** Conservative public-unicast allowlist. Transition/mapped IPv6 is excluded. */
+export declare function isPublicAddress(address: string): boolean;
+export declare function assertWebhookUrl(value: string): URL;
+export declare function assertHmacSecret(secret: string): void;
+export interface WebhookRequest {
+    url: string;
+    body: string;
+    headers: Record<string, string>;
+}
+export type WebhookTransport = (request: WebhookRequest) => Promise<number>;
+/** Validate every DNS answer, then pin the socket lookup; TLS still verifies the hostname.
+ * No proxy, redirects, pooled sockets, response body buffering, or second DNS lookup.
+ */
+export declare const sendPublicWebhook: WebhookTransport;
+//# sourceMappingURL=security.d.ts.map

package/dist/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAIA,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAgCxD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAuBnD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAQrD;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AACD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,gBAwD/B,CAAC"}

package/dist/smrt-knowledge.json

@@ -0,0 +1,418 @@
+{
+  "schemaVersion": 1,
+  "sensitiveFieldsExcluded": true,
+  "generatedAt": "1970-01-01T00:00:00.000Z",
+  "packageName": "@happyvertical/smrt-webhooks",
+  "packageVersion": "0.55.10",
+  "sourceManifestPath": "dist/manifest.json",
+  "agentDocPath": "AGENTS.md",
+  "sourceHashes": {
+    "manifest": "6de4a4cc2ec7b5158d5b5549ce47bf93fb9cbbfa40f3711335132d2cc70f42e5",
+    "packageJson": "92c0b6f55dec98164fa19f30da19d6f1c97b2030f53ec77b8e9055755388bbd9",
+    "agents": "f67b2a340106cf4b4b44c6b2bf918086286236ac3cf34b03b24b1db6e17b40a5"
+  },
+  "exports": [
+    ".",
+    "./admin",
+    "./manifest",
+    "./manifest.json",
+    "./svelte"
+  ],
+  "dependencies": {
+    "@happyvertical/smrt-core": "workspace:*",
+    "@happyvertical/smrt-jobs": "workspace:*",
+    "@happyvertical/smrt-tenancy": "workspace:*",
+    "@happyvertical/sql": "catalog:",
+    "@happyvertical/smrt-ui": "workspace:*",
+    "@happyvertical/smrt-vitest": "workspace:*",
+    "@sveltejs/package": "^2.5.8",
+    "@types/node": "24.13.6",
+    "svelte": "^5.57.0",
+    "svelte-check": "^4.7.6",
+    "typescript": "6.0.3",
+    "vite": "8.1.4",
+    "vitest": "4.1.10",
+    "@playwright/test": "^1.63.0",
+    "@sveltejs/vite-plugin-svelte": "^7.3.0"
+  },
+  "smrtDependencies": [
+    "@happyvertical/smrt-core",
+    "@happyvertical/smrt-jobs",
+    "@happyvertical/smrt-tenancy",
+    "@happyvertical/smrt-ui",
+    "@happyvertical/smrt-vitest"
+  ],
+  "sdkDependencies": [
+    "@happyvertical/sql"
+  ],
+  "tags": [
+    "cross-package"
+  ],
+  "risks": [
+    "sensitive-fields-excluded"
+  ],
+  "objects": [
+    {
+      "name": "WebhookSubscription",
+      "qualifiedName": "@happyvertical/smrt-webhooks:WebhookSubscription",
+      "collection": "webhooksubscriptions",
+      "description": "Server-only subscription. Hosts authorize administration before accessing it.",
+      "tableName": "_smrt_webhook_subscriptions",
+      "packageName": "@happyvertical/smrt-webhooks",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "url",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "events",
+          "type": "json",
+          "required": false,
+          "columnType": "JSON"
+        },
+        {
+          "name": "models",
+          "type": "json",
+          "required": false,
+          "columnType": "JSON"
+        },
+        {
+          "name": "enabled",
+          "type": "boolean",
+          "required": false,
+          "columnType": "BOOLEAN",
+          "default": true
+        }
+      ],
+      "relationships": [],
+      "methods": [
+        "save"
+      ],
+      "methodSignatures": [
+        {
+          "name": "save",
+          "async": true,
+          "returns": "Promise<this>"
+        }
+      ],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "save",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-webhooks:WebhookSubscription"
+        }
+      ],
+      "relationshipFeatures": [
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "WebhookSubscriptionCollection",
+      "qualifiedName": "@happyvertical/smrt-webhooks:WebhookSubscriptionCollection",
+      "collection": "webhooksubscriptions",
+      "tableName": "_smrt_webhook_subscriptions",
+      "packageName": "@happyvertical/smrt-webhooks",
+      "extends": "SmrtCollection",
+      "fields": [],
+      "relationships": [],
+      "methods": [],
+      "surfaces": [],
+      "relationshipFeatures": [
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "WebhookDelivery",
+      "qualifiedName": "@happyvertical/smrt-webhooks:WebhookDelivery",
+      "collection": "webhookdeliveries",
+      "description": "Durable outbox and safe outcome metadata; payload never appears in public projections.",
+      "tableName": "_smrt_webhook_deliveries",
+      "packageName": "@happyvertical/smrt-webhooks",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "subscriptionId",
+          "type": "foreignKey",
+          "required": false,
+          "related": "WebhookSubscription",
+          "columnType": "UUID"
+        },
+        {
+          "name": "eventId",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "status",
+          "type": "text",
+          "required": false,
+          "columnType": "TEXT",
+          "default": "pending"
+        },
+        {
+          "name": "generation",
+          "type": "integer",
+          "required": false,
+          "columnType": "INTEGER",
+          "default": 0
+        },
+        {
+          "name": "attempts",
+          "type": "integer",
+          "required": false,
+          "columnType": "INTEGER",
+          "default": 0
+        },
+        {
+          "name": "responseStatus",
+          "type": "integer",
+          "required": false,
+          "columnType": "INTEGER"
+        },
+        {
+          "name": "error",
+          "type": "text",
+          "required": false,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "leaseUntil",
+          "type": "datetime",
+          "required": false,
+          "columnType": "TIMESTAMP"
+        }
+      ],
+      "relationships": [
+        {
+          "name": "subscriptionId",
+          "type": "foreignKey",
+          "required": false,
+          "related": "WebhookSubscription",
+          "columnType": "UUID"
+        }
+      ],
+      "methods": [],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
+      "surfaces": [],
+      "relationshipFeatures": [
+        "foreignKey",
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "WebhookDeliveryCollection",
+      "qualifiedName": "@happyvertical/smrt-webhooks:WebhookDeliveryCollection",
+      "collection": "webhookdeliveries",
+      "tableName": "_smrt_webhook_deliveries",
+      "packageName": "@happyvertical/smrt-webhooks",
+      "extends": "SmrtCollection",
+      "fields": [],
+      "relationships": [],
+      "methods": [],
+      "surfaces": [],
+      "relationshipFeatures": [
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "WebhookDeliveryTask",
+      "qualifiedName": "@happyvertical/smrt-webhooks:WebhookDeliveryTask",
+      "collection": "webhookdeliverytasks",
+      "description": "Jobs queue entry point; persisted arguments contain IDs only.",
+      "tableName": "_smrt_webhook_delivery_tasks",
+      "packageName": "@happyvertical/smrt-webhooks",
+      "extends": "SmrtObject",
+      "fields": [],
+      "relationships": [],
+      "methods": [
+        "deliver"
+      ],
+      "methodSignatures": [
+        {
+          "name": "deliver",
+          "async": true,
+          "params": [
+            "args?: Record<string, unknown>",
+            "_context?: JobExecutionContext"
+          ],
+          "returns": "Promise<void>"
+        }
+      ],
+      "surfaces": [],
+      "withheldSurfaces": [
+        {
+          "kind": "api",
+          "operation": "deliver",
+          "code": "api-disabled",
+          "reason": "api is disabled",
+          "objectName": "@happyvertical/smrt-webhooks:WebhookDeliveryTask"
+        }
+      ],
+      "relationshipFeatures": [
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    },
+    {
+      "name": "WebhookCursor",
+      "qualifiedName": "@happyvertical/smrt-webhooks:WebhookCursor",
+      "collection": "webhookcursors",
+      "description": "Tenant-bound durable cursor for replayable model change-feed publication.",
+      "tableName": "_smrt_webhook_cursors",
+      "packageName": "@happyvertical/smrt-webhooks",
+      "extends": "SmrtObject",
+      "fields": [
+        {
+          "name": "tenantId",
+          "type": "text",
+          "required": true,
+          "columnType": "UUID"
+        },
+        {
+          "name": "runtime",
+          "type": "text",
+          "required": true,
+          "columnType": "TEXT"
+        },
+        {
+          "name": "position",
+          "type": "integer",
+          "required": false,
+          "columnType": "INTEGER",
+          "default": 0
+        }
+      ],
+      "relationships": [],
+      "methods": [],
+      "tenant": {
+        "scoped": true,
+        "mode": "required",
+        "field": "tenantId"
+      },
+      "conflictColumns": [
+        "tenant_id",
+        "slug",
+        "context"
+      ],
+      "surfaces": [],
+      "relationshipFeatures": [
+        "uuidColumns"
+      ],
+      "tags": [],
+      "risks": []
+    }
+  ],
+  "surfaces": [],
+  "prompts": [],
+  "relationshipsV2": {
+    "foreignKeyFields": 1,
+    "crossPackageRefFields": 0,
+    "junctionCollections": 0,
+    "hierarchicalObjects": 0,
+    "polymorphicAssociations": 0,
+    "uuidColumns": 13
+  },
+  "agentDoc": "# @happyvertical/smrt-webhooks\n\nServer-only outbound webhooks. `change-feed.ts` owns durable model publication\nwith tenant/runtime cursors and retained-history recovery; `events.ts` is the\noptional non-atomic hook path. Never enable both for the same models. `store.ts` owns tenant-bound SQL and atomic\noutbox/job enqueue; `dispatcher.ts` owns signing and job execution. Always use\n`requireTenant()` plus explicit tenant predicates, including raw CAS writes.\n\n`security.ts` validates every DNS result, pins HTTPS lookup, disables pooling,\nand bounds DNS/request time. Never substitute a preflight DNS check followed by\nfetch, follow redirects, or persist raw transport errors. Preserve exact stored\npayload bytes for signing. HTTP is at-least-once; receivers deduplicate the\nstable delivery ID. Do not promise exactly-once network effects.\n\nAdmin projections are allowlists. Secrets and payloads are sensitive fields;\ngenerated API/CLI/MCP access is disabled. The host authorizes administrators via\n`WebhookAdminService`; Svelte callbacks must use authenticated, CSRF-protected\nhost routes. No credentials in the browser read model.\n\nValidate: `pnpm test`, `pnpm typecheck`, `pnpm check`, `pnpm test:e2e` within this\npackage after building its dependencies. E2E uses the maintained Playwright\nharness under `e2e/`; no external webhook server or network credential is needed.\nSee README.md for migration, lifecycle-hook boundaries and worker setup.\n",
+  "recipes": [
+    {
+      "id": "integrations.webhooks",
+      "className": "WebhooksRecipe",
+      "label": "Outbound webhooks",
+      "summary": "Deliver signed model events and inspect delivery attempts from a server.",
+      "synonyms": [],
+      "models": [
+        "@happyvertical/smrt-webhooks:WebhookSubscription",
+        "@happyvertical/smrt-webhooks:WebhookDelivery",
+        "@happyvertical/smrt-webhooks:WebhookDeliveryTask",
+        "@happyvertical/smrt-webhooks:WebhookCursor"
+      ],
+      "nav": [],
+      "requires": [],
+      "group": {
+        "id": "integrations",
+        "label": "Integrations",
+        "summary": "Connect your application to external services."
+      },
+      "help": {
+        "markdown": "## Overview\n\nSend signed event notifications to an external HTTPS endpoint. Administrators\ncan pause subscriptions and inspect delivery attempts. This integration requires\na server and a running background worker.\n\n## Tasks\n\n- Add a subscription with a public HTTPS endpoint, signing secret, and event/model filters.\n- Disable a subscription to cancel unsent deliveries.\n- Inspect the delivery log, then retry failed deliveries after correcting their endpoint.\n- Ask the endpoint owner to verify signatures and deduplicate delivery IDs.\n",
+        "fieldRefs": []
+      },
+      "surfaces": [
+        {
+          "kind": "settings-panel",
+          "export": "@happyvertical/smrt-webhooks/svelte#WebhookAdmin",
+          "label": "Outbound webhooks"
+        }
+      ],
+      "runtime": "server",
+      "demo": {
+        "mode": "server",
+        "reasons": [
+          "The recipe declares runtime \"server\".",
+          "Needs a server because its package does not build for a browser: Intentionally server-only outbound delivery: node:crypto HMAC and node:https/dns/net pinned transport enforce signing and SSRF protection. Browser hosts use the separate /svelte admin export with authenticated server callbacks.; and its package depends on @happyvertical/smrt-jobs, @happyvertical/smrt-tenancy, which do not build for a browser (#3615, #3624, #3627, #3717)."
+        ]
+      }
+    }
+  ],
+  "browser": {
+    "status": "server-only",
+    "issues": [
+      "#3615",
+      "#3624",
+      "#3627",
+      "#3717"
+    ],
+    "reason": "Intentionally server-only outbound delivery: node:crypto HMAC and node:https/dns/net pinned transport enforce signing and SSRF protection. Browser hosts use the separate /svelte admin export with authenticated server callbacks.",
+    "via": [
+      "@happyvertical/smrt-jobs",
+      "@happyvertical/smrt-tenancy"
+    ]
+  }
+}

package/dist/store.d.ts

@@ -0,0 +1,26 @@
+import type { DatabaseInterface } from '@happyvertical/sql';
+import { type WebhookSubscription } from './models.js';
+import type { WebhookEventEnvelope } from './types.js';
+/** Explicit tenant predicates also protect deployments that have not enabled interceptors. */
+export declare class WebhookStore {
+    readonly db: DatabaseInterface;
+    readonly runtime: string;
+    constructor(db: DatabaseInterface, runtime: string);
+    subscriptions(): Promise<WebhookSubscription[]>;
+    subscription(id: string): Promise<WebhookSubscription | null>;
+    delivery(id: string): Promise<import("./models.js").WebhookDelivery | null>;
+    deliveries(): Promise<import("./models.js").WebhookDelivery[]>;
+    /** The unique outbox identity and jobs enqueue commit or roll back together. */
+    accept(subscriptionId: string, event: WebhookEventEnvelope): Promise<string>;
+    private enqueue;
+    /** A bounded lease prevents overlapping jobs; expired leases recover after process death. */
+    claim(id: string, generation?: number): Promise<string | null>;
+    finish(id: string, token: string, status: string, responseStatus: number | null, error: string | null): Promise<void>;
+    /** Reconcile exhausted/cancelled jobs, including process death before an attempt starts.
+     * Tenant-scoped and lease-aware; safe to call on each admin refresh or operator sweep.
+     */
+    reconcile(): Promise<void>;
+    /** Explicit operator recovery for exhausted jobs. Repeated/concurrent replay is a no-op. */
+    replay(id: string): Promise<boolean>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,8FAA8F;AAC9F,qBAAa,YAAY;IAErB,QAAQ,CAAC,EAAE,EAAE,iBAAiB;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM;gBADf,EAAE,EAAE,iBAAiB,EACrB,OAAO,EAAE,MAAM;IAIpB,aAAa;IAiBb,YAAY,CAAC,EAAE,EAAE,MAAM;IAOvB,QAAQ,CAAC,EAAE,EAAE,MAAM;IAOnB,UAAU;IAShB,gFAAgF;IAC1E,MAAM,CACV,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,MAAM,CAAC;YAoCJ,OAAO;IAsBrB,6FAA6F;IACvF,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,SAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiBzD,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,KAAK,EAAE,MAAM,GAAG,IAAI;IAgBtB;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IA6BhC,4FAA4F;IACtF,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAqB3C"}

package/dist/svelte/WebhookAdmin.svelte

@@ -0,0 +1,113 @@
+<script lang="ts">
+import { Alert } from '@happyvertical/smrt-ui/feedback';
+import { Input } from '@happyvertical/smrt-ui/forms';
+import { Button, Card } from '@happyvertical/smrt-ui/ui';
+import type {
+  WebhookDeliveryRecord,
+  WebhookSubscriptionRecord,
+} from '../types.js';
+
+interface Props {
+  /** Safe subscription summaries for the authenticated administrator. */
+  subscriptions: WebhookSubscriptionRecord[];
+  /** Recent delivery outcomes without payloads, credentials, or lease tokens. */
+  deliveries: WebhookDeliveryRecord[];
+  /** Create a subscription through the host's authorized server endpoint. */
+  onCreate: (input: {
+    url: string;
+    events: string[];
+    models: string[];
+    secret: string;
+  }) => Promise<void>;
+  /** Enable or pause the selected subscription through the authorized host. */
+  onToggle: (id: string, enabled: boolean) => Promise<void>;
+  /** Retry a failed delivery after the host verifies administrator access. */
+  onReplay: (id: string) => Promise<void>;
+}
+let { subscriptions, deliveries, onCreate, onToggle, onReplay }: Props =
+  $props();
+const uid = $props.id();
+let url = $state('');
+let events = $state('create,update,delete');
+let models = $state('');
+let secret = $state('');
+let error = $state('');
+let busy = $state(false);
+const split = (value: string) =>
+  value
+    .split(',')
+    .map((v) => v.trim())
+    .filter(Boolean);
+async function action(callback: () => Promise<void>) {
+  if (busy) return;
+  busy = true;
+  error = '';
+  try {
+    await callback();
+  } catch {
+    error = 'The webhook operation could not be completed. Please try again.';
+  } finally {
+    busy = false;
+  }
+}
+async function submit() {
+  await action(async () => {
+    await onCreate({
+      url,
+      events: split(events),
+      models: split(models),
+      secret,
+    });
+    url = '';
+    secret = '';
+  });
+}
+</script>
+<Card>
+  <section aria-labelledby={`${uid}-title`} aria-busy={busy}>
+    <h2 id={`${uid}-title`}>Outbound webhooks</h2>
+    <form onsubmit={(event) => { event.preventDefault(); void submit(); }}>
+      <label for={`${uid}-url`}>Endpoint</label>
+      <Input id={`${uid}-url`} bind:value={url} type="url" required placeholder="https://partner.example/webhooks" disabled={busy} />
+      <label for={`${uid}-events`}>Events</label>
+      <Input id={`${uid}-events`} bind:value={events} disabled={busy} />
+      <label for={`${uid}-models`}>Models</label>
+      <Input id={`${uid}-models`} bind:value={models} disabled={busy} />
+      <p>Use comma-separated names. Empty filters match all events or models.</p>
+      <label for={`${uid}-secret`}>Signing secret</label>
+      <Input id={`${uid}-secret`} bind:value={secret} type="password" required minlength={32} autocomplete="new-password" interaction={false} disabled={busy} />
+      <Button type="submit" disabled={busy} loading={busy}>Add subscription</Button>
+    </form>
+    {#if error}<Alert variant="error">{error}</Alert>{/if}
+    <h3>Subscriptions</h3>
+    <ul aria-label="Webhook subscriptions">
+      {#each subscriptions as subscription (subscription.id)}
+        <li><code>{subscription.url}</code>
+          <Button disabled={busy} aria-label={`${subscription.enabled ? 'Disable' : 'Enable'} ${subscription.url}`} onclick={() => action(() => onToggle(subscription.id, !subscription.enabled))}>
+            {subscription.enabled ? 'Disable' : 'Enable'}
+          </Button>
+        </li>
+      {:else}<li>No subscriptions yet.</li>{/each}
+    </ul>
+    <h3>Delivery log</h3>
+    <div class="table-scroll">
+      <table>
+        <caption>Recent webhook deliveries</caption>
+        <thead><tr><th scope="col">Delivery</th><th scope="col">Status</th><th scope="col">Attempts</th><th scope="col">Response</th><th scope="col">Actions</th></tr></thead>
+        <tbody>{#each deliveries as delivery (delivery.id)}
+          <tr><td>{delivery.id}</td><td>{delivery.status}</td><td>{delivery.attempts}</td><td>{delivery.responseStatus ?? '—'}</td><td>
+            {#if delivery.status === 'failed'}<Button disabled={busy} onclick={() => action(() => onReplay(delivery.id))}>Retry delivery</Button>{/if}
+          </td></tr>
+        {:else}<tr><td colspan="5">No deliveries yet.</td></tr>{/each}</tbody>
+      </table>
+    </div>
+  </section>
+</Card>
+<style>
+  form { display: grid; gap: var(--smrt-spacing-2, 0.5rem); }
+  li { display: flex; gap: var(--smrt-spacing-2, 0.5rem); align-items: center; flex-wrap: wrap; }
+  code { overflow-wrap: anywhere; }
+  .table-scroll { overflow-x: auto; }
+  table { width: 100%; text-align: left; }
+  th, td { padding: var(--smrt-spacing-2, 0.5rem); }
+</style>