@hasna/events 0.1.2 → 0.1.4

package/README.md

@@ -111,11 +111,15 @@ sha256=<hex digest>
 Consumers can verify with:
 
 ```ts
-import { verifyPayloadSignature } from "@hasna/events/signing";
+import { verifyWebhookSignature } from "@hasna/events/signing";
 
-const ok = verifyPayloadSignature(secret, timestamp, body, signature);
+const ok = verifyWebhookSignature(secret, timestamp, body, signature);
 ```
 
+`verifyWebhookSignature` rejects timestamps outside a five-minute window by default.
+Pass an explicit `toleranceMs` when a consumer needs a tighter or wider replay
+window.
+
 ## Command Transport
 
 Command channels run a local process and pass the event on stdin and environment variables.
@@ -150,6 +154,14 @@ The transport type union already reserves `email`, `sse`, and `mcp-relay` for la
 
 ## Redaction
 
+Events scrub obvious sensitive keys such as `secret`, `token`, `password`,
+`apiKey`, and `authorization` before local storage and delivery by default.
+Callers that intentionally need raw local payloads can pass:
+
+```ts
+await events.emit(input, { redactSensitiveData: false });
+```
+
 Use channel-level paths for config-only redaction:
 
 ```ts

package/dist/cli/index.js

@@ -646,6 +646,46 @@ Usage:
 Environment:
   HASNA_EVENTS_DIR or HASNA_EVENTS_HOME overrides the default ${getEventsDataDir()}`);
 }
+function printWebhooksHelp() {
+  console.log(`events webhooks
+
+Usage:
+  events [--dir <path>] [--json] webhooks add <url|command> [options]
+  events [--dir <path>] [--json] webhooks list
+  events [--dir <path>] [--json] webhooks remove <id>
+  events [--dir <path>] [--json] webhooks test <id>
+
+Options:
+  --id <id>                 Channel id for add
+  --type <pattern>          Event type filter, supports wildcards
+  --source <source>         Event source filter
+  --subject <subject>       Event subject filter
+  --severity <severity>     Event severity filter
+  --transport <kind>        webhook or command
+  --secret <secret>         Webhook signing secret
+  --header <name=value>     Webhook header, repeatable
+  --redact <path>           Redaction path, repeatable
+  --no-deliver              Available on events emit`);
+}
+function printEventsHelp() {
+  console.log(`events events
+
+Usage:
+  events [--dir <path>] [--json] events emit <type> --source <source> [options]
+  events [--dir <path>] [--json] events list [--limit <n>]
+  events [--dir <path>] [--json] events replay [--id <event-id>] [--dry-run]
+
+Options:
+  --source <source>         Event source
+  --subject <subject>       Event subject
+  --severity <severity>     Event severity
+  --message <message>       Human-readable event message
+  --dedupe-key <key>        Deduplicate repeated events
+  --data <json>             JSON object payload
+  --metadata <json>         JSON object metadata
+  --no-deliver              Record without delivering webhooks
+  --dry-run                 Preview replay matches without delivery`);
+}
 async function main(argv = process.argv.slice(2)) {
   const parsed = parseGlobalArgs(argv);
   const [group, command, ...tail] = parsed.rest;
@@ -660,10 +700,18 @@ async function main(argv = process.argv.slice(2)) {
   const store = new JsonEventsStore(parsed.dir);
   const client = new EventsClient({ store });
   if (group === "webhooks") {
+    if (!command || command === "--help" || command === "-h") {
+      printWebhooksHelp();
+      return;
+    }
     await handleWebhooks(client, command, tail, parsed);
     return;
   }
   if (group === "events") {
+    if (!command || command === "--help" || command === "-h") {
+      printEventsHelp();
+      return;
+    }
     await handleEvents(client, command, tail, parsed);
     return;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/events",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Shared event envelopes, local subscriptions, and webhook delivery for Hasna open-source apps",
   "type": "module",
   "main": "./dist/index.js",