@headless-lms/core 0.1.0 → 0.2.0

package/dist/automations/service.js

@@ -1,8 +1,11 @@
+import { deliverWebhookInputSchema } from "../types/schemas/automations.js";
 import { noopLogger } from "../shared/logger.js";
-import { catalogActions, catalogTriggers } from "./catalog.js";
+import { ConflictError, NotFoundError } from "../shared/errors.js";
+import { DELIVER_WEBHOOK_ACTION, catalogActions, catalogTriggers } from "./catalog.js";
+import { generateWebhookSecret } from "./webhook-signing.js";
 import { executeAction } from "./actions.js";
 import { automationEvents } from "./events.js";
-import { InvalidTriggerError } from "./model.js";
+import { AutomationKindMismatchError, InvalidTriggerError, ReservedActionError } from "./model.js";
 //#region src/automations/service.ts
 /** True only when `input` sets `enabled` and nothing else — emits automation.enabled|disabled instead of automation.updated. */
 function isEnabledOnlyUpdate(input) {
@@ -10,6 +13,43 @@ function isEnabledOnlyUpdate(input) {
 	const { enabled: _enabled, ...rest } = input;
 	return Object.values(rest).every((v) => v === void 0);
 }
+function unique(values) {
+	return [...new Set(values)];
+}
+function assertAuthorableTriggers(triggers) {
+	for (const trigger of triggers) if (trigger.startsWith("automation.")) throw new InvalidTriggerError(trigger);
+}
+function assertAuthorableActions(actions) {
+	for (const action of actions) if (action.type === "deliverWebhook") throw new ReservedActionError(action.type);
+}
+function webhookTarget(automation) {
+	return deliverWebhookInputSchema.parse(automation.actions[0]?.input);
+}
+function toWebhook(automation) {
+	return {
+		orgId: automation.orgId,
+		id: automation.id,
+		url: webhookTarget(automation).url,
+		events: automation.triggers,
+		description: automation.description,
+		enabled: automation.enabled,
+		createdAt: automation.createdAt,
+		updatedAt: automation.updatedAt
+	};
+}
+function updateEvent(orgId, input, updated) {
+	if (isEnabledOnlyUpdate(input)) return input.enabled ? automationEvents.automationEnabled.make({
+		orgId,
+		data: updated
+	}) : automationEvents.automationDisabled.make({
+		orgId,
+		data: updated
+	});
+	return automationEvents.automationUpdated.make({
+		orgId,
+		data: updated
+	});
+}
 var AutomationsServiceImpl = class {
 	repo;
 	runsRepo;
@@ -18,6 +58,8 @@ var AutomationsServiceImpl = class {
 	mailer;
 	lookups;
 	integrations;
+	credentials;
+	webhooks;
 	logger;
 	constructor(params) {
 		this.repo = params.repo;
@@ -27,6 +69,8 @@ var AutomationsServiceImpl = class {
 		this.mailer = params.mailer;
 		this.lookups = params.lookups;
 		this.integrations = params.integrations;
+		this.credentials = params.credentials;
+		this.webhooks = params.webhooks;
 		this.logger = params.logger ?? noopLogger;
 	}
 	async handle(event) {
@@ -47,34 +91,11 @@ var AutomationsServiceImpl = class {
 		}
 	}
 	async dispatchOne(automation, event) {
-		let run;
+		let run = null;
 		try {
-			run = await this.uow.run(async ({ runs, outbox }) => {
-				const inserted = await runs.insert(event.orgId, {
-					orgId: event.orgId,
-					automationId: automation.id,
-					trigger: automation.trigger,
-					event,
-					status: "running",
-					actionResults: [],
-					startedAt: /* @__PURE__ */ new Date(),
-					finishedAt: null
-				});
-				if (!inserted) return null;
-				await outbox.append([automationEvents.runStarted.make({
-					orgId: event.orgId,
-					data: inserted
-				})]);
-				return inserted;
-			});
+			run = await this.openRun(automation, event);
 			if (!run) return;
-			await this.engine.dispatch({
-				runId: run.id,
-				orgId: event.orgId,
-				automationId: automation.id,
-				actions: automation.actions,
-				event
-			});
+			await this.engine.dispatch(this.dispatchFor(automation, run, event));
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
 			this.logger.error("automation run failed", {
@@ -86,10 +107,42 @@ var AutomationsServiceImpl = class {
 			if (run) await this.recordFailure(run, message);
 		}
 	}
+	openRun(automation, event) {
+		const now = /* @__PURE__ */ new Date();
+		return this.uow.run(async ({ runs, outbox }) => {
+			const inserted = await runs.insert(event.orgId, {
+				orgId: event.orgId,
+				automationId: automation.id,
+				trigger: event.type,
+				event,
+				status: "running",
+				actionResults: [],
+				startedAt: now,
+				finishedAt: null,
+				createdAt: now,
+				updatedAt: now
+			});
+			if (!inserted) return null;
+			await outbox.append([automationEvents.runStarted.make({
+				orgId: event.orgId,
+				data: inserted
+			})]);
+			return inserted;
+		});
+	}
+	dispatchFor(automation, run, event) {
+		return {
+			runId: run.id,
+			orgId: event.orgId,
+			automationId: automation.id,
+			actions: automation.actions,
+			event
+		};
+	}
 	/** Best-effort: logs and never rethrows — `handle` must never throw. */
 	async recordFailure(run, error) {
 		try {
-			await this.uow.run(async ({ runs, outbox }) => {
+			return await this.uow.run(async ({ runs, outbox }) => {
 				const failed = await runs.recordOutcome(run.orgId, run.id, {
 					status: "failed",
 					actionResults: run.actionResults,
@@ -99,6 +152,7 @@ var AutomationsServiceImpl = class {
 					orgId: run.orgId,
 					data: failed
 				})]);
+				return failed;
 			});
 		} catch (err) {
 			this.logger.error("failed to record automation run failure", {
@@ -107,12 +161,18 @@ var AutomationsServiceImpl = class {
 				error: err instanceof Error ? err.message : String(err),
 				originalError: error
 			});
+			return null;
 		}
 	}
 	async runAction(d, index) {
 		const action = d.actions[index];
 		if (!action) throw new Error(`automation ${d.automationId} run ${d.runId}: no action at index ${index}`);
-		await executeAction(action, d.event, this.mailer, this.lookups);
+		await executeAction(action, d.event, {
+			mailer: this.mailer,
+			lookups: this.lookups,
+			credentials: this.credentials,
+			webhooks: this.webhooks
+		});
 		return {
 			index,
 			type: action.type,
@@ -143,9 +203,14 @@ var AutomationsServiceImpl = class {
 		});
 	}
 	async create(orgId, input) {
-		if (input.trigger.startsWith("automation.")) throw new InvalidTriggerError(input.trigger);
+		assertAuthorableTriggers(input.triggers);
+		assertAuthorableActions(input.actions);
 		const automation = await this.uow.run(async ({ automations, outbox }) => {
-			const created = await automations.insert(orgId, input);
+			const created = await automations.insert(orgId, {
+				...input,
+				triggers: unique(input.triggers),
+				kind: "workflow"
+			});
 			await outbox.append([automationEvents.automationCreated.make({
 				orgId,
 				data: created
@@ -159,21 +224,19 @@ var AutomationsServiceImpl = class {
 		return automation;
 	}
 	async update(orgId, id, input) {
-		if (input.trigger !== void 0 && input.trigger.startsWith("automation.")) throw new InvalidTriggerError(input.trigger);
+		if (input.triggers !== void 0) assertAuthorableTriggers(input.triggers);
+		if (input.actions !== void 0) assertAuthorableActions(input.actions);
+		const existing = await this.repo.findById(orgId, id);
+		if (!existing) return null;
+		if (existing.kind !== "workflow") throw new AutomationKindMismatchError(id, existing.kind);
+		const patch = input.triggers === void 0 ? input : {
+			...input,
+			triggers: unique(input.triggers)
+		};
 		const automation = await this.uow.run(async ({ automations, outbox }) => {
-			const updated = await automations.update(orgId, id, input);
+			const updated = await automations.update(orgId, id, patch);
 			if (!updated) return null;
-			if (isEnabledOnlyUpdate(input)) await outbox.append([input.enabled ? automationEvents.automationEnabled.make({
-				orgId,
-				data: updated
-			}) : automationEvents.automationDisabled.make({
-				orgId,
-				data: updated
-			})]);
-			else await outbox.append([automationEvents.automationUpdated.make({
-				orgId,
-				data: updated
-			})]);
+			await outbox.append([updateEvent(orgId, input, updated)]);
 			return updated;
 		});
 		if (automation) this.logger.info("automation updated", {
@@ -183,6 +246,9 @@ var AutomationsServiceImpl = class {
 		return automation;
 	}
 	async delete(orgId, id) {
+		const existing = await this.repo.findById(orgId, id);
+		if (!existing) return false;
+		if (existing.kind !== "workflow") throw new AutomationKindMismatchError(id, existing.kind);
 		const deleted = await this.uow.run(async ({ automations, outbox }) => {
 			const removed = await automations.delete(orgId, id);
 			if (!removed) return null;
@@ -198,8 +264,8 @@ var AutomationsServiceImpl = class {
 		});
 		return deleted !== null;
 	}
-	list(orgId) {
-		return this.repo.listByOrg(orgId);
+	list(orgId, query) {
+		return this.repo.listByOrg(orgId, query?.kind);
 	}
 	get(orgId, id) {
 		return this.repo.findById(orgId, id);
@@ -207,6 +273,160 @@ var AutomationsServiceImpl = class {
 	listRuns(orgId, automationId, query) {
 		return this.runsRepo.list(orgId, automationId, query);
 	}
+	async rerun(orgId, automationId, runId) {
+		const existing = await this.runsRepo.findById(orgId, runId);
+		if (!existing || existing.automationId !== automationId) throw new NotFoundError("Automation run", runId);
+		const automation = await this.repo.findById(orgId, automationId);
+		if (!automation) throw new NotFoundError("Automation", automationId);
+		const run = await this.uow.run(async ({ runs, outbox }) => {
+			const restarted = await runs.restart(orgId, runId, /* @__PURE__ */ new Date());
+			if (!restarted) return null;
+			await outbox.append([automationEvents.runStarted.make({
+				orgId,
+				data: restarted
+			})]);
+			return restarted;
+		});
+		if (!run) throw new ConflictError(`automation run ${runId} is still running`);
+		try {
+			await this.engine.dispatch(this.dispatchFor(automation, run, run.event));
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			this.logger.error("automation rerun failed", {
+				orgId,
+				automationId,
+				runId: run.id,
+				error: message
+			});
+			return await this.recordFailure(run, message) ?? run;
+		}
+		this.logger.info("automation rerun started", {
+			orgId,
+			automationId,
+			runId: run.id
+		});
+		return run;
+	}
+	async listWebhooks(orgId) {
+		return (await this.repo.listByOrg(orgId, "webhook")).map(toWebhook);
+	}
+	async getWebhook(orgId, id) {
+		const automation = await this.findWebhook(orgId, id);
+		return automation ? toWebhook(automation) : null;
+	}
+	async createWebhook(orgId, input) {
+		const events = unique(input.events);
+		this.assertSubscribableEvents(events);
+		const secret = generateWebhookSecret();
+		const automation = await this.uow.run(async ({ automations, credentials, outbox }) => {
+			const secretRef = await credentials.store(orgId, { secret });
+			const created = await automations.insert(orgId, {
+				kind: "webhook",
+				name: input.url,
+				description: input.description,
+				triggers: events,
+				actions: [{
+					type: DELIVER_WEBHOOK_ACTION,
+					input: {
+						url: input.url,
+						secretRef
+					}
+				}]
+			});
+			await outbox.append([automationEvents.automationCreated.make({
+				orgId,
+				data: created
+			})]);
+			return created;
+		});
+		this.logger.info("webhook created", {
+			orgId,
+			automationId: automation.id
+		});
+		return {
+			...toWebhook(automation),
+			secret
+		};
+	}
+	async updateWebhook(orgId, id, input) {
+		const existing = await this.findWebhook(orgId, id);
+		if (!existing) return null;
+		const events = input.events === void 0 ? void 0 : unique(input.events);
+		if (events) this.assertSubscribableEvents(events);
+		const { secretRef } = webhookTarget(existing);
+		const patch = {
+			name: input.url,
+			description: input.description,
+			triggers: events,
+			actions: input.url === void 0 ? void 0 : [{
+				type: DELIVER_WEBHOOK_ACTION,
+				input: {
+					url: input.url,
+					secretRef
+				}
+			}],
+			enabled: input.enabled
+		};
+		const updated = await this.uow.run(async ({ automations, outbox }) => {
+			const row = await automations.update(orgId, id, patch);
+			if (!row) return null;
+			await outbox.append([updateEvent(orgId, input, row)]);
+			return row;
+		});
+		if (!updated) return null;
+		this.logger.info("webhook updated", {
+			orgId,
+			automationId: id
+		});
+		return toWebhook(updated);
+	}
+	async deleteWebhook(orgId, id) {
+		const existing = await this.findWebhook(orgId, id);
+		if (!existing) return false;
+		const { secretRef } = webhookTarget(existing);
+		const deleted = await this.uow.run(async ({ automations, credentials, outbox }) => {
+			const removed = await automations.delete(orgId, id);
+			if (!removed) return null;
+			await credentials.destroy(orgId, secretRef);
+			await outbox.append([automationEvents.automationDeleted.make({
+				orgId,
+				data: removed
+			})]);
+			return removed;
+		});
+		if (deleted) this.logger.info("webhook deleted", {
+			orgId,
+			automationId: id
+		});
+		return deleted !== null;
+	}
+	async revealWebhookSecret(orgId, id) {
+		const existing = await this.findWebhook(orgId, id);
+		if (!existing) return null;
+		const secret = (await this.credentials.reveal(orgId, webhookTarget(existing).secretRef))?.["secret"];
+		if (typeof secret !== "string") throw new Error(`webhook ${id}: signing secret is missing`);
+		return { secret };
+	}
+	async rotateWebhookSecret(orgId, id) {
+		const existing = await this.findWebhook(orgId, id);
+		if (!existing) return null;
+		const secret = generateWebhookSecret();
+		await this.credentials.update(orgId, webhookTarget(existing).secretRef, { secret });
+		this.logger.info("webhook secret rotated", {
+			orgId,
+			automationId: id
+		});
+		return { secret };
+	}
+	async findWebhook(orgId, id) {
+		const automation = await this.repo.findById(orgId, id);
+		return automation?.kind === "webhook" ? automation : null;
+	}
+	assertSubscribableEvents(events) {
+		assertAuthorableTriggers(events);
+		const known = new Set(catalogTriggers().map((t) => t.type));
+		for (const event of events) if (!known.has(event)) throw new InvalidTriggerError(event, "unknown");
+	}
 	availableActions() {
 		return [...catalogActions(), ...this.integrations.available().flatMap((integration) => integration.actions.map((action) => ({
 			type: `${integration.id}.${action.id}`,

package/dist/automations/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../src/automations/service.ts"],"sourcesContent":["// automations context — service implementation (inbound port) and the\n// AutomationExecutor the engine drives.\n//\n// `handle` is subscribed to all events on the EventBus: it matches an event\n// against enabled automations for its trigger, opens one run per match, and\n// hands it to the injected AutomationEngine, which calls back into\n// `runAction`/`finalize`.\nimport { catalogActions, catalogTriggers } from './catalog.js';\nimport { executeAction } from './actions.js';\nimport {\n  InvalidTriggerError,\n  type Automation,\n  type AutomationActionResult,\n  type AutomationRun,\n  type Page,\n} from './model.js';\nimport type {\n  AutomationRunsQuery,\n  AvailableActions,\n  AvailableTriggers,\n  CreateAutomationInput,\n  UpdateAutomationInput,\n} from './types.js';\nimport type {\n  AutomationDispatch,\n  AutomationEngine,\n  AutomationExecutor,\n  AutomationRunsRepository,\n  AutomationsRepository,\n  AutomationsService,\n  AutomationsUnitOfWork,\n} from './ports.js';\nimport type { DomainEvent, Logger } from '../shared/ports.js';\nimport type { JsonValue } from '../types/index.js';\nimport { noopLogger } from '../shared/logger.js';\nimport type { Mailer, MailerLookups } from '../shared/mailer.js';\nimport type { IntegrationsService } from '../integrations/index.js';\nimport { automationEvents } from './events.js';\n\n/** True only when `input` sets `enabled` and nothing else — emits automation.enabled|disabled instead of automation.updated. */\nfunction isEnabledOnlyUpdate(input: UpdateAutomationInput): input is { enabled: boolean } {\n  if (input.enabled === undefined) {\n    return false;\n  }\n  const { enabled: _enabled, ...rest } = input;\n  return Object.values(rest).every((v) => v === undefined);\n}\n\nexport type AutomationsServiceParams = {\n  /** Read-only access (list/get/available) — runs outside any transaction. */\n  repo: AutomationsRepository;\n  runsRepo: AutomationRunsRepository;\n  /** Atomic write scope: tx-bound repos + outbox appender. */\n  uow: AutomationsUnitOfWork;\n  engine: AutomationEngine;\n  mailer: Pick<Mailer, 'send'>;\n  lookups: MailerLookups;\n  integrations: Pick<IntegrationsService, 'available'>;\n  logger?: Logger;\n};\n\nexport class AutomationsServiceImpl implements AutomationsService, AutomationExecutor {\n  private readonly repo: AutomationsRepository;\n  private readonly runsRepo: AutomationRunsRepository;\n  private readonly uow: AutomationsUnitOfWork;\n  private readonly engine: AutomationEngine;\n  private readonly mailer: Pick<Mailer, 'send'>;\n  private readonly lookups: MailerLookups;\n  private readonly integrations: Pick<IntegrationsService, 'available'>;\n  private readonly logger: Logger;\n\n  constructor(params: AutomationsServiceParams) {\n    this.repo = params.repo;\n    this.runsRepo = params.runsRepo;\n    this.uow = params.uow;\n    this.engine = params.engine;\n    this.mailer = params.mailer;\n    this.lookups = params.lookups;\n    this.integrations = params.integrations;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async handle(event: DomainEvent): Promise<void> {\n    // automation.* events are this service's own output — matching one as a trigger would self-loop.\n    if (event.type.startsWith('automation.')) {\n      return;\n    }\n    const automations = await this.safeListByTrigger(event);\n    for (const automation of automations.filter((a) => a.enabled)) {\n      await this.dispatchOne(automation, event);\n    }\n  }\n\n  private async safeListByTrigger(event: DomainEvent): Promise<Automation[]> {\n    try {\n      return await this.repo.listByTrigger(event.orgId, event.type);\n    } catch (err) {\n      this.logger.error('automations: failed to load trigger matches', {\n        orgId: event.orgId,\n        trigger: event.type,\n        error: err instanceof Error ? err.message : String(err),\n      });\n      return [];\n    }\n  }\n\n  private async dispatchOne(automation: Automation, event: DomainEvent): Promise<void> {\n    let run: AutomationRun | null | undefined;\n    try {\n      run = await this.uow.run(async ({ runs, outbox }) => {\n        const inserted = await runs.insert(event.orgId, {\n          orgId: event.orgId,\n          automationId: automation.id,\n          trigger: automation.trigger,\n          event,\n          status: 'running',\n          actionResults: [],\n          startedAt: new Date(),\n          finishedAt: null,\n        });\n        if (!inserted) {\n          // At-least-once redelivery of a trigger event already run for this automation — no-op.\n          return null;\n        }\n        await outbox.append([\n          automationEvents.runStarted.make({\n            orgId: event.orgId,\n            data: inserted,\n          }),\n        ]);\n        return inserted;\n      });\n      if (!run) {\n        return;\n      }\n      await this.engine.dispatch({\n        runId: run.id,\n        orgId: event.orgId,\n        automationId: automation.id,\n        actions: automation.actions,\n        event,\n      });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      this.logger.error('automation run failed', {\n        orgId: event.orgId,\n        automationId: automation.id,\n        runId: run?.id,\n        error: message,\n      });\n      if (run) {\n        await this.recordFailure(run, message);\n      }\n    }\n  }\n\n  /** Best-effort: logs and never rethrows — `handle` must never throw. */\n  private async recordFailure(run: AutomationRun, error: string): Promise<void> {\n    try {\n      await this.uow.run(async ({ runs, outbox }) => {\n        const failed = await runs.recordOutcome(run.orgId, run.id, {\n          status: 'failed',\n          actionResults: run.actionResults,\n          finishedAt: new Date(),\n        });\n        if (failed) {\n          await outbox.append([\n            automationEvents.runFailed.make({\n              orgId: run.orgId,\n              data: failed,\n            }),\n          ]);\n        }\n      });\n    } catch (err) {\n      this.logger.error('failed to record automation run failure', {\n        orgId: run.orgId,\n        runId: run.id,\n        error: err instanceof Error ? err.message : String(err),\n        originalError: error,\n      });\n    }\n  }\n\n  async runAction(d: AutomationDispatch, index: number): Promise<AutomationActionResult> {\n    const action = d.actions[index];\n    if (!action) {\n      throw new Error(`automation ${d.automationId} run ${d.runId}: no action at index ${index}`);\n    }\n    await executeAction(action, d.event, this.mailer, this.lookups);\n    return { index, type: action.type, status: 'completed' };\n  }\n\n  async finalize(d: AutomationDispatch, results: AutomationActionResult[]): Promise<void> {\n    const status: 'completed' | 'failed' =\n      results.length === d.actions.length && results.every((r) => r.status === 'completed')\n        ? 'completed'\n        : 'failed';\n    await this.uow.run(async ({ runs, outbox }) => {\n      const run = await runs.recordOutcome(d.orgId, d.runId, {\n        status,\n        actionResults: results,\n        finishedAt: new Date(),\n      });\n      if (!run) {\n        return;\n      }\n      const runEvent =\n        status === 'completed'\n          ? automationEvents.runCompleted.make({ orgId: d.orgId, data: run })\n          : automationEvents.runFailed.make({ orgId: d.orgId, data: run });\n      const actionFailedEvents = results\n        .filter((r) => r.status === 'failed')\n        .map((result) => ({\n          ...automationEvents.actionFailed.make({\n            orgId: d.orgId,\n            data: result,\n          }),\n        }));\n      await outbox.append([runEvent, ...actionFailedEvents]);\n    });\n  }\n\n  async create(orgId: string, input: CreateAutomationInput): Promise<Automation> {\n    if (input.trigger.startsWith('automation.')) {\n      throw new InvalidTriggerError(input.trigger);\n    }\n    const automation = await this.uow.run(async ({ automations, outbox }) => {\n      const created = await automations.insert(orgId, input);\n      await outbox.append([\n        automationEvents.automationCreated.make({ orgId, data: created }),\n      ]);\n      return created;\n    });\n    this.logger.info('automation created', { orgId, automationId: automation.id });\n    return automation;\n  }\n\n  async update(\n    orgId: string,\n    id: string,\n    input: UpdateAutomationInput,\n  ): Promise<Automation | null> {\n    if (input.trigger !== undefined && input.trigger.startsWith('automation.')) {\n      throw new InvalidTriggerError(input.trigger);\n    }\n    const automation = await this.uow.run(async ({ automations, outbox }) => {\n      const updated = await automations.update(orgId, id, input);\n      if (!updated) {\n        return null;\n      }\n      if (isEnabledOnlyUpdate(input)) {\n        await outbox.append([\n          input.enabled\n            ? automationEvents.automationEnabled.make({\n                orgId,\n                data: updated,\n              })\n            : automationEvents.automationDisabled.make({\n                orgId,\n                data: updated,\n              }),\n        ]);\n      } else {\n        await outbox.append([\n          automationEvents.automationUpdated.make({ orgId, data: updated }),\n        ]);\n      }\n      return updated;\n    });\n    if (automation) {\n      this.logger.info('automation updated', { orgId, automationId: id });\n    }\n    return automation;\n  }\n\n  async delete(orgId: string, id: string): Promise<boolean> {\n    const deleted = await this.uow.run(async ({ automations, outbox }) => {\n      const removed = await automations.delete(orgId, id);\n      if (!removed) {\n        return null;\n      }\n      await outbox.append([\n        automationEvents.automationDeleted.make({ orgId, data: removed }),\n      ]);\n      return removed;\n    });\n    if (deleted) {\n      this.logger.info('automation deleted', { orgId, automationId: id });\n    }\n    return deleted !== null;\n  }\n\n  list(orgId: string): Promise<Automation[]> {\n    return this.repo.listByOrg(orgId);\n  }\n\n  get(orgId: string, id: string): Promise<Automation | null> {\n    return this.repo.findById(orgId, id);\n  }\n\n  listRuns(\n    orgId: string,\n    automationId: string,\n    query: AutomationRunsQuery,\n  ): Promise<Page<AutomationRun>> {\n    return this.runsRepo.list(orgId, automationId, query);\n  }\n\n  availableActions(): AvailableActions {\n    return [\n      ...catalogActions(),\n      ...this.integrations.available().flatMap((integration) =>\n        integration.actions.map((action) => ({\n          type: `${integration.id}.${action.id}`,\n          description: action.description,\n          inputSchema: action.inputSchema as Record<string, JsonValue>,\n          source: integration.id,\n        })),\n      ),\n    ];\n  }\n\n  availableTriggers(): AvailableTriggers {\n    return { triggers: catalogTriggers() };\n  }\n}\n"],"mappings":";;;;;;;AAwCA,SAAS,oBAAoB,OAA6D;CACxF,IAAI,MAAM,YAAY,KAAA,GACpB,OAAO;CAET,MAAM,EAAE,SAAS,UAAU,GAAG,SAAS;CACvC,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,OAAO,MAAM,MAAM,KAAA,CAAS;AACzD;AAeA,IAAa,yBAAb,MAAsF;CACpF;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAAkC;EAC5C,KAAK,OAAO,OAAO;EACnB,KAAK,WAAW,OAAO;EACvB,KAAK,MAAM,OAAO;EAClB,KAAK,SAAS,OAAO;EACrB,KAAK,SAAS,OAAO;EACrB,KAAK,UAAU,OAAO;EACtB,KAAK,eAAe,OAAO;EAC3B,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,OAAO,OAAmC;EAE9C,IAAI,MAAM,KAAK,WAAW,aAAa,GACrC;EAEF,MAAM,cAAc,MAAM,KAAK,kBAAkB,KAAK;EACtD,KAAK,MAAM,cAAc,YAAY,QAAQ,MAAM,EAAE,OAAO,GAC1D,MAAM,KAAK,YAAY,YAAY,KAAK;CAE5C;CAEA,MAAc,kBAAkB,OAA2C;EACzE,IAAI;GACF,OAAO,MAAM,KAAK,KAAK,cAAc,MAAM,OAAO,MAAM,IAAI;EAC9D,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,+CAA+C;IAC/D,OAAO,MAAM;IACb,SAAS,MAAM;IACf,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;GACD,OAAO,CAAC;EACV;CACF;CAEA,MAAc,YAAY,YAAwB,OAAmC;EACnF,IAAI;EACJ,IAAI;GACF,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;IACnD,MAAM,WAAW,MAAM,KAAK,OAAO,MAAM,OAAO;KAC9C,OAAO,MAAM;KACb,cAAc,WAAW;KACzB,SAAS,WAAW;KACpB;KACA,QAAQ;KACR,eAAe,CAAC;KAChB,2BAAW,IAAI,KAAK;KACpB,YAAY;IACd,CAAC;IACD,IAAI,CAAC,UAEH,OAAO;IAET,MAAM,OAAO,OAAO,CAClB,iBAAiB,WAAW,KAAK;KAC/B,OAAO,MAAM;KACb,MAAM;IACR,CAAC,CACH,CAAC;IACD,OAAO;GACT,CAAC;GACD,IAAI,CAAC,KACH;GAEF,MAAM,KAAK,OAAO,SAAS;IACzB,OAAO,IAAI;IACX,OAAO,MAAM;IACb,cAAc,WAAW;IACzB,SAAS,WAAW;IACpB;GACF,CAAC;EACH,SAAS,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC/D,KAAK,OAAO,MAAM,yBAAyB;IACzC,OAAO,MAAM;IACb,cAAc,WAAW;IACzB,OAAO,KAAK;IACZ,OAAO;GACT,CAAC;GACD,IAAI,KACF,MAAM,KAAK,cAAc,KAAK,OAAO;EAEzC;CACF;;CAGA,MAAc,cAAc,KAAoB,OAA8B;EAC5E,IAAI;GACF,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;IAC7C,MAAM,SAAS,MAAM,KAAK,cAAc,IAAI,OAAO,IAAI,IAAI;KACzD,QAAQ;KACR,eAAe,IAAI;KACnB,4BAAY,IAAI,KAAK;IACvB,CAAC;IACD,IAAI,QACF,MAAM,OAAO,OAAO,CAClB,iBAAiB,UAAU,KAAK;KAC9B,OAAO,IAAI;KACX,MAAM;IACR,CAAC,CACH,CAAC;GAEL,CAAC;EACH,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,2CAA2C;IAC3D,OAAO,IAAI;IACX,OAAO,IAAI;IACX,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IACtD,eAAe;GACjB,CAAC;EACH;CACF;CAEA,MAAM,UAAU,GAAuB,OAAgD;EACrF,MAAM,SAAS,EAAE,QAAQ;EACzB,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,cAAc,EAAE,aAAa,OAAO,EAAE,MAAM,uBAAuB,OAAO;EAE5F,MAAM,cAAc,QAAQ,EAAE,OAAO,KAAK,QAAQ,KAAK,OAAO;EAC9D,OAAO;GAAE;GAAO,MAAM,OAAO;GAAM,QAAQ;EAAY;CACzD;CAEA,MAAM,SAAS,GAAuB,SAAkD;EACtF,MAAM,SACJ,QAAQ,WAAW,EAAE,QAAQ,UAAU,QAAQ,OAAO,MAAM,EAAE,WAAW,WAAW,IAChF,cACA;EACN,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GAC7C,MAAM,MAAM,MAAM,KAAK,cAAc,EAAE,OAAO,EAAE,OAAO;IACrD;IACA,eAAe;IACf,4BAAY,IAAI,KAAK;GACvB,CAAC;GACD,IAAI,CAAC,KACH;GAEF,MAAM,WACJ,WAAW,cACP,iBAAiB,aAAa,KAAK;IAAE,OAAO,EAAE;IAAO,MAAM;GAAI,CAAC,IAChE,iBAAiB,UAAU,KAAK;IAAE,OAAO,EAAE;IAAO,MAAM;GAAI,CAAC;GACnE,MAAM,qBAAqB,QACxB,QAAQ,MAAM,EAAE,WAAW,QAAQ,CAAC,CACpC,KAAK,YAAY,EAChB,GAAG,iBAAiB,aAAa,KAAK;IACpC,OAAO,EAAE;IACT,MAAM;GACR,CAAC,EACH,EAAE;GACJ,MAAM,OAAO,OAAO,CAAC,UAAU,GAAG,kBAAkB,CAAC;EACvD,CAAC;CACH;CAEA,MAAM,OAAO,OAAe,OAAmD;EAC7E,IAAI,MAAM,QAAQ,WAAW,aAAa,GACxC,MAAM,IAAI,oBAAoB,MAAM,OAAO;EAE7C,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACvE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,KAAK;GACrD,MAAM,OAAO,OAAO,CAClB,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAClE,CAAC;GACD,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc,WAAW;EAAG,CAAC;EAC7E,OAAO;CACT;CAEA,MAAM,OACJ,OACA,IACA,OAC4B;EAC5B,IAAI,MAAM,YAAY,KAAA,KAAa,MAAM,QAAQ,WAAW,aAAa,GACvE,MAAM,IAAI,oBAAoB,MAAM,OAAO;EAE7C,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACvE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK;GACzD,IAAI,CAAC,SACH,OAAO;GAET,IAAI,oBAAoB,KAAK,GAC3B,MAAM,OAAO,OAAO,CAClB,MAAM,UACF,iBAAiB,kBAAkB,KAAK;IACtC;IACA,MAAM;GACR,CAAC,IACD,iBAAiB,mBAAmB,KAAK;IACvC;IACA,MAAM;GACR,CAAC,CACP,CAAC;QAED,MAAM,OAAO,OAAO,CAClB,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAClE,CAAC;GAEH,OAAO;EACT,CAAC;EACD,IAAI,YACF,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEpE,OAAO;CACT;CAEA,MAAM,OAAO,OAAe,IAA8B;EACxD,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACpE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,EAAE;GAClD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,OAAO,OAAO,CAClB,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAClE,CAAC;GACD,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEpE,OAAO,YAAY;CACrB;CAEA,KAAK,OAAsC;EACzC,OAAO,KAAK,KAAK,UAAU,KAAK;CAClC;CAEA,IAAI,OAAe,IAAwC;EACzD,OAAO,KAAK,KAAK,SAAS,OAAO,EAAE;CACrC;CAEA,SACE,OACA,cACA,OAC8B;EAC9B,OAAO,KAAK,SAAS,KAAK,OAAO,cAAc,KAAK;CACtD;CAEA,mBAAqC;EACnC,OAAO,CACL,GAAG,eAAe,GAClB,GAAG,KAAK,aAAa,UAAU,CAAC,CAAC,SAAS,gBACxC,YAAY,QAAQ,KAAK,YAAY;GACnC,MAAM,GAAG,YAAY,GAAG,GAAG,OAAO;GAClC,aAAa,OAAO;GACpB,aAAa,OAAO;GACpB,QAAQ,YAAY;EACtB,EAAE,CACJ,CACF;CACF;CAEA,oBAAuC;EACrC,OAAO,EAAE,UAAU,gBAAgB,EAAE;CACvC;AACF"}
+{"version":3,"file":"service.js","names":[],"sources":["../../src/automations/service.ts"],"sourcesContent":["// automations context — service implementation (inbound port) and the\n// AutomationExecutor the engine drives.\n//\n// `handle` is subscribed to all events on the EventBus: it matches an event\n// against enabled automations for its trigger, opens one run per match, and\n// hands it to the injected AutomationEngine, which calls back into\n// `runAction`/`finalize`.\nimport { catalogActions, catalogTriggers, DELIVER_WEBHOOK_ACTION } from './catalog.js';\nimport { executeAction } from './actions.js';\nimport { generateWebhookSecret } from './webhook-signing.js';\nimport {\n  AutomationKindMismatchError,\n  InvalidTriggerError,\n  ReservedActionError,\n  type Automation,\n  type AutomationAction,\n  type AutomationActionResult,\n  type AutomationRun,\n  type CreatedWebhook,\n  type DeliverWebhookInput,\n  type Page,\n  type Webhook,\n  type WebhookSecret,\n} from './model.js';\nimport type {\n  AutomationRunsQuery,\n  AutomationsQuery,\n  AvailableActions,\n  AvailableTriggers,\n  CreateAutomationInput,\n  CreateWebhookInput,\n  UpdateAutomationInput,\n  UpdateWebhookInput,\n} from './types.js';\nimport type {\n  AutomationDispatch,\n  AutomationEngine,\n  AutomationExecutor,\n  AutomationRunsRepository,\n  AutomationsRepository,\n  AutomationsService,\n  AutomationsUnitOfWork,\n  WebhookSender,\n} from './ports.js';\nimport type { CredentialStore, DomainEvent, Logger } from '../shared/ports.js';\nimport type { JsonValue } from '../types/index.js';\nimport { deliverWebhookInputSchema } from '../types/schemas/index.js';\nimport { ConflictError, NotFoundError } from '../shared/errors.js';\nimport { noopLogger } from '../shared/logger.js';\nimport type { Mailer, MailerLookups } from '../shared/mailer.js';\nimport type { IntegrationsService } from '../integrations/index.js';\nimport { automationEvents } from './events.js';\n\n/** True only when `input` sets `enabled` and nothing else — emits automation.enabled|disabled instead of automation.updated. */\nfunction isEnabledOnlyUpdate<T extends { enabled?: boolean }>(\n  input: T,\n): input is T & { enabled: boolean } {\n  if (input.enabled === undefined) {\n    return false;\n  }\n  const { enabled: _enabled, ...rest } = input;\n  return Object.values(rest).every((v) => v === undefined);\n}\n\nfunction unique(values: string[]): string[] {\n  return [...new Set(values)];\n}\n\nfunction assertAuthorableTriggers(triggers: string[]): void {\n  for (const trigger of triggers) {\n    if (trigger.startsWith('automation.')) {\n      throw new InvalidTriggerError(trigger);\n    }\n  }\n}\n\nfunction assertAuthorableActions(actions: AutomationAction[]): void {\n  for (const action of actions) {\n    if (action.type === DELIVER_WEBHOOK_ACTION) {\n      throw new ReservedActionError(action.type);\n    }\n  }\n}\n\nfunction webhookTarget(automation: Automation): DeliverWebhookInput {\n  return deliverWebhookInputSchema.parse(automation.actions[0]?.input);\n}\n\nfunction toWebhook(automation: Automation): Webhook {\n  return {\n    orgId: automation.orgId,\n    id: automation.id,\n    url: webhookTarget(automation).url,\n    events: automation.triggers,\n    description: automation.description,\n    enabled: automation.enabled,\n    createdAt: automation.createdAt,\n    updatedAt: automation.updatedAt,\n  };\n}\n\nfunction updateEvent(orgId: string, input: { enabled?: boolean }, updated: Automation) {\n  if (isEnabledOnlyUpdate(input)) {\n    return input.enabled\n      ? automationEvents.automationEnabled.make({ orgId, data: updated })\n      : automationEvents.automationDisabled.make({ orgId, data: updated });\n  }\n  return automationEvents.automationUpdated.make({ orgId, data: updated });\n}\n\nexport type AutomationsServiceParams = {\n  /** Read-only access (list/get/available) — runs outside any transaction. */\n  repo: AutomationsRepository;\n  runsRepo: AutomationRunsRepository;\n  /** Atomic write scope: tx-bound repos + credential store + outbox appender. */\n  uow: AutomationsUnitOfWork;\n  engine: AutomationEngine;\n  mailer: Pick<Mailer, 'send'>;\n  lookups: MailerLookups;\n  integrations: Pick<IntegrationsService, 'available'>;\n  credentials: CredentialStore;\n  webhooks: WebhookSender;\n  logger?: Logger;\n};\n\nexport class AutomationsServiceImpl implements AutomationsService, AutomationExecutor {\n  private readonly repo: AutomationsRepository;\n  private readonly runsRepo: AutomationRunsRepository;\n  private readonly uow: AutomationsUnitOfWork;\n  private readonly engine: AutomationEngine;\n  private readonly mailer: Pick<Mailer, 'send'>;\n  private readonly lookups: MailerLookups;\n  private readonly integrations: Pick<IntegrationsService, 'available'>;\n  private readonly credentials: CredentialStore;\n  private readonly webhooks: WebhookSender;\n  private readonly logger: Logger;\n\n  constructor(params: AutomationsServiceParams) {\n    this.repo = params.repo;\n    this.runsRepo = params.runsRepo;\n    this.uow = params.uow;\n    this.engine = params.engine;\n    this.mailer = params.mailer;\n    this.lookups = params.lookups;\n    this.integrations = params.integrations;\n    this.credentials = params.credentials;\n    this.webhooks = params.webhooks;\n    this.logger = params.logger ?? noopLogger;\n  }\n\n  async handle(event: DomainEvent): Promise<void> {\n    // automation.* events are this service's own output — matching one as a trigger would self-loop.\n    if (event.type.startsWith('automation.')) {\n      return;\n    }\n    const automations = await this.safeListByTrigger(event);\n    for (const automation of automations.filter((a) => a.enabled)) {\n      await this.dispatchOne(automation, event);\n    }\n  }\n\n  private async safeListByTrigger(event: DomainEvent): Promise<Automation[]> {\n    try {\n      return await this.repo.listByTrigger(event.orgId, event.type);\n    } catch (err) {\n      this.logger.error('automations: failed to load trigger matches', {\n        orgId: event.orgId,\n        trigger: event.type,\n        error: err instanceof Error ? err.message : String(err),\n      });\n      return [];\n    }\n  }\n\n  private async dispatchOne(automation: Automation, event: DomainEvent): Promise<void> {\n    let run: AutomationRun | null = null;\n    try {\n      run = await this.openRun(automation, event);\n      if (!run) {\n        // At-least-once redelivery of a trigger event already run for this automation — no-op.\n        return;\n      }\n      await this.engine.dispatch(this.dispatchFor(automation, run, event));\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      this.logger.error('automation run failed', {\n        orgId: event.orgId,\n        automationId: automation.id,\n        runId: run?.id,\n        error: message,\n      });\n      if (run) {\n        await this.recordFailure(run, message);\n      }\n    }\n  }\n\n  private openRun(automation: Automation, event: DomainEvent): Promise<AutomationRun | null> {\n    const now = new Date();\n    return this.uow.run(async ({ runs, outbox }) => {\n      const inserted = await runs.insert(event.orgId, {\n        orgId: event.orgId,\n        automationId: automation.id,\n        trigger: event.type,\n        event,\n        status: 'running',\n        actionResults: [],\n        startedAt: now,\n        finishedAt: null,\n        createdAt: now,\n        updatedAt: now,\n      });\n      if (!inserted) {\n        return null;\n      }\n      await outbox.append([\n        automationEvents.runStarted.make({\n          orgId: event.orgId,\n          data: inserted,\n        }),\n      ]);\n      return inserted;\n    });\n  }\n\n  private dispatchFor(\n    automation: Automation,\n    run: AutomationRun,\n    event: DomainEvent,\n  ): AutomationDispatch {\n    return {\n      runId: run.id,\n      orgId: event.orgId,\n      automationId: automation.id,\n      actions: automation.actions,\n      event,\n    };\n  }\n\n  /** Best-effort: logs and never rethrows — `handle` must never throw. */\n  private async recordFailure(run: AutomationRun, error: string): Promise<AutomationRun | null> {\n    try {\n      return await this.uow.run(async ({ runs, outbox }) => {\n        const failed = await runs.recordOutcome(run.orgId, run.id, {\n          status: 'failed',\n          actionResults: run.actionResults,\n          finishedAt: new Date(),\n        });\n        if (failed) {\n          await outbox.append([\n            automationEvents.runFailed.make({\n              orgId: run.orgId,\n              data: failed,\n            }),\n          ]);\n        }\n        return failed;\n      });\n    } catch (err) {\n      this.logger.error('failed to record automation run failure', {\n        orgId: run.orgId,\n        runId: run.id,\n        error: err instanceof Error ? err.message : String(err),\n        originalError: error,\n      });\n      return null;\n    }\n  }\n\n  async runAction(d: AutomationDispatch, index: number): Promise<AutomationActionResult> {\n    const action = d.actions[index];\n    if (!action) {\n      throw new Error(`automation ${d.automationId} run ${d.runId}: no action at index ${index}`);\n    }\n    await executeAction(action, d.event, {\n      mailer: this.mailer,\n      lookups: this.lookups,\n      credentials: this.credentials,\n      webhooks: this.webhooks,\n    });\n    return { index, type: action.type, status: 'completed' };\n  }\n\n  async finalize(d: AutomationDispatch, results: AutomationActionResult[]): Promise<void> {\n    const status: 'completed' | 'failed' =\n      results.length === d.actions.length && results.every((r) => r.status === 'completed')\n        ? 'completed'\n        : 'failed';\n    await this.uow.run(async ({ runs, outbox }) => {\n      const run = await runs.recordOutcome(d.orgId, d.runId, {\n        status,\n        actionResults: results,\n        finishedAt: new Date(),\n      });\n      if (!run) {\n        return;\n      }\n      const runEvent =\n        status === 'completed'\n          ? automationEvents.runCompleted.make({ orgId: d.orgId, data: run })\n          : automationEvents.runFailed.make({ orgId: d.orgId, data: run });\n      const actionFailedEvents = results\n        .filter((r) => r.status === 'failed')\n        .map((result) => ({\n          ...automationEvents.actionFailed.make({\n            orgId: d.orgId,\n            data: result,\n          }),\n        }));\n      await outbox.append([runEvent, ...actionFailedEvents]);\n    });\n  }\n\n  async create(orgId: string, input: CreateAutomationInput): Promise<Automation> {\n    assertAuthorableTriggers(input.triggers);\n    assertAuthorableActions(input.actions);\n    const automation = await this.uow.run(async ({ automations, outbox }) => {\n      const created = await automations.insert(orgId, {\n        ...input,\n        triggers: unique(input.triggers),\n        kind: 'workflow',\n      });\n      await outbox.append([automationEvents.automationCreated.make({ orgId, data: created })]);\n      return created;\n    });\n    this.logger.info('automation created', { orgId, automationId: automation.id });\n    return automation;\n  }\n\n  async update(\n    orgId: string,\n    id: string,\n    input: UpdateAutomationInput,\n  ): Promise<Automation | null> {\n    if (input.triggers !== undefined) {\n      assertAuthorableTriggers(input.triggers);\n    }\n    if (input.actions !== undefined) {\n      assertAuthorableActions(input.actions);\n    }\n    const existing = await this.repo.findById(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    if (existing.kind !== 'workflow') {\n      throw new AutomationKindMismatchError(id, existing.kind);\n    }\n    const patch =\n      input.triggers === undefined ? input : { ...input, triggers: unique(input.triggers) };\n    const automation = await this.uow.run(async ({ automations, outbox }) => {\n      const updated = await automations.update(orgId, id, patch);\n      if (!updated) {\n        return null;\n      }\n      await outbox.append([updateEvent(orgId, input, updated)]);\n      return updated;\n    });\n    if (automation) {\n      this.logger.info('automation updated', { orgId, automationId: id });\n    }\n    return automation;\n  }\n\n  async delete(orgId: string, id: string): Promise<boolean> {\n    const existing = await this.repo.findById(orgId, id);\n    if (!existing) {\n      return false;\n    }\n    if (existing.kind !== 'workflow') {\n      throw new AutomationKindMismatchError(id, existing.kind);\n    }\n    const deleted = await this.uow.run(async ({ automations, outbox }) => {\n      const removed = await automations.delete(orgId, id);\n      if (!removed) {\n        return null;\n      }\n      await outbox.append([automationEvents.automationDeleted.make({ orgId, data: removed })]);\n      return removed;\n    });\n    if (deleted) {\n      this.logger.info('automation deleted', { orgId, automationId: id });\n    }\n    return deleted !== null;\n  }\n\n  list(orgId: string, query?: AutomationsQuery): Promise<Automation[]> {\n    return this.repo.listByOrg(orgId, query?.kind);\n  }\n\n  get(orgId: string, id: string): Promise<Automation | null> {\n    return this.repo.findById(orgId, id);\n  }\n\n  listRuns(\n    orgId: string,\n    automationId: string,\n    query: AutomationRunsQuery,\n  ): Promise<Page<AutomationRun>> {\n    return this.runsRepo.list(orgId, automationId, query);\n  }\n\n  async rerun(orgId: string, automationId: string, runId: string): Promise<AutomationRun> {\n    const existing = await this.runsRepo.findById(orgId, runId);\n    if (!existing || existing.automationId !== automationId) {\n      throw new NotFoundError('Automation run', runId);\n    }\n    const automation = await this.repo.findById(orgId, automationId);\n    if (!automation) {\n      throw new NotFoundError('Automation', automationId);\n    }\n    const run = await this.uow.run(async ({ runs, outbox }) => {\n      const restarted = await runs.restart(orgId, runId, new Date());\n      if (!restarted) {\n        return null;\n      }\n      await outbox.append([automationEvents.runStarted.make({ orgId, data: restarted })]);\n      return restarted;\n    });\n    if (!run) {\n      throw new ConflictError(`automation run ${runId} is still running`);\n    }\n    try {\n      await this.engine.dispatch(this.dispatchFor(automation, run, run.event));\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      this.logger.error('automation rerun failed', {\n        orgId,\n        automationId,\n        runId: run.id,\n        error: message,\n      });\n      return (await this.recordFailure(run, message)) ?? run;\n    }\n    this.logger.info('automation rerun started', { orgId, automationId, runId: run.id });\n    return run;\n  }\n\n  async listWebhooks(orgId: string): Promise<Webhook[]> {\n    const automations = await this.repo.listByOrg(orgId, 'webhook');\n    return automations.map(toWebhook);\n  }\n\n  async getWebhook(orgId: string, id: string): Promise<Webhook | null> {\n    const automation = await this.findWebhook(orgId, id);\n    return automation ? toWebhook(automation) : null;\n  }\n\n  async createWebhook(orgId: string, input: CreateWebhookInput): Promise<CreatedWebhook> {\n    const events = unique(input.events);\n    this.assertSubscribableEvents(events);\n    const secret = generateWebhookSecret();\n    const automation = await this.uow.run(async ({ automations, credentials, outbox }) => {\n      const secretRef = await credentials.store(orgId, { secret });\n      const created = await automations.insert(orgId, {\n        kind: 'webhook',\n        name: input.url,\n        description: input.description,\n        triggers: events,\n        actions: [{ type: DELIVER_WEBHOOK_ACTION, input: { url: input.url, secretRef } }],\n      });\n      await outbox.append([automationEvents.automationCreated.make({ orgId, data: created })]);\n      return created;\n    });\n    this.logger.info('webhook created', { orgId, automationId: automation.id });\n    return { ...toWebhook(automation), secret };\n  }\n\n  async updateWebhook(\n    orgId: string,\n    id: string,\n    input: UpdateWebhookInput,\n  ): Promise<Webhook | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const events = input.events === undefined ? undefined : unique(input.events);\n    if (events) {\n      this.assertSubscribableEvents(events);\n    }\n    const { secretRef } = webhookTarget(existing);\n    const patch: UpdateAutomationInput = {\n      name: input.url,\n      description: input.description,\n      triggers: events,\n      actions:\n        input.url === undefined\n          ? undefined\n          : [{ type: DELIVER_WEBHOOK_ACTION, input: { url: input.url, secretRef } }],\n      enabled: input.enabled,\n    };\n    const updated = await this.uow.run(async ({ automations, outbox }) => {\n      const row = await automations.update(orgId, id, patch);\n      if (!row) {\n        return null;\n      }\n      await outbox.append([updateEvent(orgId, input, row)]);\n      return row;\n    });\n    if (!updated) {\n      return null;\n    }\n    this.logger.info('webhook updated', { orgId, automationId: id });\n    return toWebhook(updated);\n  }\n\n  async deleteWebhook(orgId: string, id: string): Promise<boolean> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return false;\n    }\n    const { secretRef } = webhookTarget(existing);\n    const deleted = await this.uow.run(async ({ automations, credentials, outbox }) => {\n      const removed = await automations.delete(orgId, id);\n      if (!removed) {\n        return null;\n      }\n      await credentials.destroy(orgId, secretRef);\n      await outbox.append([automationEvents.automationDeleted.make({ orgId, data: removed })]);\n      return removed;\n    });\n    if (deleted) {\n      this.logger.info('webhook deleted', { orgId, automationId: id });\n    }\n    return deleted !== null;\n  }\n\n  async revealWebhookSecret(orgId: string, id: string): Promise<WebhookSecret | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const secrets = await this.credentials.reveal(orgId, webhookTarget(existing).secretRef);\n    const secret = secrets?.['secret'];\n    if (typeof secret !== 'string') {\n      throw new Error(`webhook ${id}: signing secret is missing`);\n    }\n    return { secret };\n  }\n\n  async rotateWebhookSecret(orgId: string, id: string): Promise<WebhookSecret | null> {\n    const existing = await this.findWebhook(orgId, id);\n    if (!existing) {\n      return null;\n    }\n    const secret = generateWebhookSecret();\n    await this.credentials.update(orgId, webhookTarget(existing).secretRef, { secret });\n    this.logger.info('webhook secret rotated', { orgId, automationId: id });\n    return { secret };\n  }\n\n  private async findWebhook(orgId: string, id: string): Promise<Automation | null> {\n    const automation = await this.repo.findById(orgId, id);\n    return automation?.kind === 'webhook' ? automation : null;\n  }\n\n  private assertSubscribableEvents(events: string[]): void {\n    assertAuthorableTriggers(events);\n    const known = new Set(catalogTriggers().map((t) => t.type));\n    for (const event of events) {\n      if (!known.has(event)) {\n        throw new InvalidTriggerError(event, 'unknown');\n      }\n    }\n  }\n\n  availableActions(): AvailableActions {\n    return [\n      ...catalogActions(),\n      ...this.integrations.available().flatMap((integration) =>\n        integration.actions.map((action) => ({\n          type: `${integration.id}.${action.id}`,\n          description: action.description,\n          inputSchema: action.inputSchema as Record<string, JsonValue>,\n          source: integration.id,\n        })),\n      ),\n    ];\n  }\n\n  availableTriggers(): AvailableTriggers {\n    return { triggers: catalogTriggers() };\n  }\n}\n"],"mappings":";;;;;;;;;;AAsDA,SAAS,oBACP,OACmC;CACnC,IAAI,MAAM,YAAY,KAAA,GACpB,OAAO;CAET,MAAM,EAAE,SAAS,UAAU,GAAG,SAAS;CACvC,OAAO,OAAO,OAAO,IAAI,CAAC,CAAC,OAAO,MAAM,MAAM,KAAA,CAAS;AACzD;AAEA,SAAS,OAAO,QAA4B;CAC1C,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;AAEA,SAAS,yBAAyB,UAA0B;CAC1D,KAAK,MAAM,WAAW,UACpB,IAAI,QAAQ,WAAW,aAAa,GAClC,MAAM,IAAI,oBAAoB,OAAO;AAG3C;AAEA,SAAS,wBAAwB,SAAmC;CAClE,KAAK,MAAM,UAAU,SACnB,IAAI,OAAO,SAAA,kBACT,MAAM,IAAI,oBAAoB,OAAO,IAAI;AAG/C;AAEA,SAAS,cAAc,YAA6C;CAClE,OAAO,0BAA0B,MAAM,WAAW,QAAQ,EAAE,EAAE,KAAK;AACrE;AAEA,SAAS,UAAU,YAAiC;CAClD,OAAO;EACL,OAAO,WAAW;EAClB,IAAI,WAAW;EACf,KAAK,cAAc,UAAU,CAAC,CAAC;EAC/B,QAAQ,WAAW;EACnB,aAAa,WAAW;EACxB,SAAS,WAAW;EACpB,WAAW,WAAW;EACtB,WAAW,WAAW;CACxB;AACF;AAEA,SAAS,YAAY,OAAe,OAA8B,SAAqB;CACrF,IAAI,oBAAoB,KAAK,GAC3B,OAAO,MAAM,UACT,iBAAiB,kBAAkB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC,IAChE,iBAAiB,mBAAmB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC;CAEvE,OAAO,iBAAiB,kBAAkB,KAAK;EAAE;EAAO,MAAM;CAAQ,CAAC;AACzE;AAiBA,IAAa,yBAAb,MAAsF;CACpF;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAAkC;EAC5C,KAAK,OAAO,OAAO;EACnB,KAAK,WAAW,OAAO;EACvB,KAAK,MAAM,OAAO;EAClB,KAAK,SAAS,OAAO;EACrB,KAAK,SAAS,OAAO;EACrB,KAAK,UAAU,OAAO;EACtB,KAAK,eAAe,OAAO;EAC3B,KAAK,cAAc,OAAO;EAC1B,KAAK,WAAW,OAAO;EACvB,KAAK,SAAS,OAAO,UAAU;CACjC;CAEA,MAAM,OAAO,OAAmC;EAE9C,IAAI,MAAM,KAAK,WAAW,aAAa,GACrC;EAEF,MAAM,cAAc,MAAM,KAAK,kBAAkB,KAAK;EACtD,KAAK,MAAM,cAAc,YAAY,QAAQ,MAAM,EAAE,OAAO,GAC1D,MAAM,KAAK,YAAY,YAAY,KAAK;CAE5C;CAEA,MAAc,kBAAkB,OAA2C;EACzE,IAAI;GACF,OAAO,MAAM,KAAK,KAAK,cAAc,MAAM,OAAO,MAAM,IAAI;EAC9D,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,+CAA+C;IAC/D,OAAO,MAAM;IACb,SAAS,MAAM;IACf,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GACxD,CAAC;GACD,OAAO,CAAC;EACV;CACF;CAEA,MAAc,YAAY,YAAwB,OAAmC;EACnF,IAAI,MAA4B;EAChC,IAAI;GACF,MAAM,MAAM,KAAK,QAAQ,YAAY,KAAK;GAC1C,IAAI,CAAC,KAEH;GAEF,MAAM,KAAK,OAAO,SAAS,KAAK,YAAY,YAAY,KAAK,KAAK,CAAC;EACrE,SAAS,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC/D,KAAK,OAAO,MAAM,yBAAyB;IACzC,OAAO,MAAM;IACb,cAAc,WAAW;IACzB,OAAO,KAAK;IACZ,OAAO;GACT,CAAC;GACD,IAAI,KACF,MAAM,KAAK,cAAc,KAAK,OAAO;EAEzC;CACF;CAEA,QAAgB,YAAwB,OAAmD;EACzF,MAAM,sBAAM,IAAI,KAAK;EACrB,OAAO,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GAC9C,MAAM,WAAW,MAAM,KAAK,OAAO,MAAM,OAAO;IAC9C,OAAO,MAAM;IACb,cAAc,WAAW;IACzB,SAAS,MAAM;IACf;IACA,QAAQ;IACR,eAAe,CAAC;IAChB,WAAW;IACX,YAAY;IACZ,WAAW;IACX,WAAW;GACb,CAAC;GACD,IAAI,CAAC,UACH,OAAO;GAET,MAAM,OAAO,OAAO,CAClB,iBAAiB,WAAW,KAAK;IAC/B,OAAO,MAAM;IACb,MAAM;GACR,CAAC,CACH,CAAC;GACD,OAAO;EACT,CAAC;CACH;CAEA,YACE,YACA,KACA,OACoB;EACpB,OAAO;GACL,OAAO,IAAI;GACX,OAAO,MAAM;GACb,cAAc,WAAW;GACzB,SAAS,WAAW;GACpB;EACF;CACF;;CAGA,MAAc,cAAc,KAAoB,OAA8C;EAC5F,IAAI;GACF,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;IACpD,MAAM,SAAS,MAAM,KAAK,cAAc,IAAI,OAAO,IAAI,IAAI;KACzD,QAAQ;KACR,eAAe,IAAI;KACnB,4BAAY,IAAI,KAAK;IACvB,CAAC;IACD,IAAI,QACF,MAAM,OAAO,OAAO,CAClB,iBAAiB,UAAU,KAAK;KAC9B,OAAO,IAAI;KACX,MAAM;IACR,CAAC,CACH,CAAC;IAEH,OAAO;GACT,CAAC;EACH,SAAS,KAAK;GACZ,KAAK,OAAO,MAAM,2CAA2C;IAC3D,OAAO,IAAI;IACX,OAAO,IAAI;IACX,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IACtD,eAAe;GACjB,CAAC;GACD,OAAO;EACT;CACF;CAEA,MAAM,UAAU,GAAuB,OAAgD;EACrF,MAAM,SAAS,EAAE,QAAQ;EACzB,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,cAAc,EAAE,aAAa,OAAO,EAAE,MAAM,uBAAuB,OAAO;EAE5F,MAAM,cAAc,QAAQ,EAAE,OAAO;GACnC,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,UAAU,KAAK;EACjB,CAAC;EACD,OAAO;GAAE;GAAO,MAAM,OAAO;GAAM,QAAQ;EAAY;CACzD;CAEA,MAAM,SAAS,GAAuB,SAAkD;EACtF,MAAM,SACJ,QAAQ,WAAW,EAAE,QAAQ,UAAU,QAAQ,OAAO,MAAM,EAAE,WAAW,WAAW,IAChF,cACA;EACN,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GAC7C,MAAM,MAAM,MAAM,KAAK,cAAc,EAAE,OAAO,EAAE,OAAO;IACrD;IACA,eAAe;IACf,4BAAY,IAAI,KAAK;GACvB,CAAC;GACD,IAAI,CAAC,KACH;GAEF,MAAM,WACJ,WAAW,cACP,iBAAiB,aAAa,KAAK;IAAE,OAAO,EAAE;IAAO,MAAM;GAAI,CAAC,IAChE,iBAAiB,UAAU,KAAK;IAAE,OAAO,EAAE;IAAO,MAAM;GAAI,CAAC;GACnE,MAAM,qBAAqB,QACxB,QAAQ,MAAM,EAAE,WAAW,QAAQ,CAAC,CACpC,KAAK,YAAY,EAChB,GAAG,iBAAiB,aAAa,KAAK;IACpC,OAAO,EAAE;IACT,MAAM;GACR,CAAC,EACH,EAAE;GACJ,MAAM,OAAO,OAAO,CAAC,UAAU,GAAG,kBAAkB,CAAC;EACvD,CAAC;CACH;CAEA,MAAM,OAAO,OAAe,OAAmD;EAC7E,yBAAyB,MAAM,QAAQ;EACvC,wBAAwB,MAAM,OAAO;EACrC,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACvE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;IAC9C,GAAG;IACH,UAAU,OAAO,MAAM,QAAQ;IAC/B,MAAM;GACR,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc,WAAW;EAAG,CAAC;EAC7E,OAAO;CACT;CAEA,MAAM,OACJ,OACA,IACA,OAC4B;EAC5B,IAAI,MAAM,aAAa,KAAA,GACrB,yBAAyB,MAAM,QAAQ;EAEzC,IAAI,MAAM,YAAY,KAAA,GACpB,wBAAwB,MAAM,OAAO;EAEvC,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACnD,IAAI,CAAC,UACH,OAAO;EAET,IAAI,SAAS,SAAS,YACpB,MAAM,IAAI,4BAA4B,IAAI,SAAS,IAAI;EAEzD,MAAM,QACJ,MAAM,aAAa,KAAA,IAAY,QAAQ;GAAE,GAAG;GAAO,UAAU,OAAO,MAAM,QAAQ;EAAE;EACtF,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACvE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK;GACzD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,YAAY,OAAO,OAAO,OAAO,CAAC,CAAC;GACxD,OAAO;EACT,CAAC;EACD,IAAI,YACF,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEpE,OAAO;CACT;CAEA,MAAM,OAAO,OAAe,IAA8B;EACxD,MAAM,WAAW,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACnD,IAAI,CAAC,UACH,OAAO;EAET,IAAI,SAAS,SAAS,YACpB,MAAM,IAAI,4BAA4B,IAAI,SAAS,IAAI;EAEzD,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACpE,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,EAAE;GAClD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,sBAAsB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEpE,OAAO,YAAY;CACrB;CAEA,KAAK,OAAe,OAAiD;EACnE,OAAO,KAAK,KAAK,UAAU,OAAO,OAAO,IAAI;CAC/C;CAEA,IAAI,OAAe,IAAwC;EACzD,OAAO,KAAK,KAAK,SAAS,OAAO,EAAE;CACrC;CAEA,SACE,OACA,cACA,OAC8B;EAC9B,OAAO,KAAK,SAAS,KAAK,OAAO,cAAc,KAAK;CACtD;CAEA,MAAM,MAAM,OAAe,cAAsB,OAAuC;EACtF,MAAM,WAAW,MAAM,KAAK,SAAS,SAAS,OAAO,KAAK;EAC1D,IAAI,CAAC,YAAY,SAAS,iBAAiB,cACzC,MAAM,IAAI,cAAc,kBAAkB,KAAK;EAEjD,MAAM,aAAa,MAAM,KAAK,KAAK,SAAS,OAAO,YAAY;EAC/D,IAAI,CAAC,YACH,MAAM,IAAI,cAAc,cAAc,YAAY;EAEpD,MAAM,MAAM,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,aAAa;GACzD,MAAM,YAAY,MAAM,KAAK,QAAQ,OAAO,uBAAO,IAAI,KAAK,CAAC;GAC7D,IAAI,CAAC,WACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,iBAAiB,WAAW,KAAK;IAAE;IAAO,MAAM;GAAU,CAAC,CAAC,CAAC;GAClF,OAAO;EACT,CAAC;EACD,IAAI,CAAC,KACH,MAAM,IAAI,cAAc,kBAAkB,MAAM,kBAAkB;EAEpE,IAAI;GACF,MAAM,KAAK,OAAO,SAAS,KAAK,YAAY,YAAY,KAAK,IAAI,KAAK,CAAC;EACzE,SAAS,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAC/D,KAAK,OAAO,MAAM,2BAA2B;IAC3C;IACA;IACA,OAAO,IAAI;IACX,OAAO;GACT,CAAC;GACD,OAAQ,MAAM,KAAK,cAAc,KAAK,OAAO,KAAM;EACrD;EACA,KAAK,OAAO,KAAK,4BAA4B;GAAE;GAAO;GAAc,OAAO,IAAI;EAAG,CAAC;EACnF,OAAO;CACT;CAEA,MAAM,aAAa,OAAmC;EAEpD,QAAO,MADmB,KAAK,KAAK,UAAU,OAAO,SAAS,EAAA,CAC3C,IAAI,SAAS;CAClC;CAEA,MAAM,WAAW,OAAe,IAAqC;EACnE,MAAM,aAAa,MAAM,KAAK,YAAY,OAAO,EAAE;EACnD,OAAO,aAAa,UAAU,UAAU,IAAI;CAC9C;CAEA,MAAM,cAAc,OAAe,OAAoD;EACrF,MAAM,SAAS,OAAO,MAAM,MAAM;EAClC,KAAK,yBAAyB,MAAM;EACpC,MAAM,SAAS,sBAAsB;EACrC,MAAM,aAAa,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa,aAAa;GACpF,MAAM,YAAY,MAAM,YAAY,MAAM,OAAO,EAAE,OAAO,CAAC;GAC3D,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO;IAC9C,MAAM;IACN,MAAM,MAAM;IACZ,aAAa,MAAM;IACnB,UAAU;IACV,SAAS,CAAC;KAAE,MAAM;KAAwB,OAAO;MAAE,KAAK,MAAM;MAAK;KAAU;IAAE,CAAC;GAClF,CAAC;GACD,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc,WAAW;EAAG,CAAC;EAC1E,OAAO;GAAE,GAAG,UAAU,UAAU;GAAG;EAAO;CAC5C;CAEA,MAAM,cACJ,OACA,IACA,OACyB;EACzB,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,SAAS,MAAM,WAAW,KAAA,IAAY,KAAA,IAAY,OAAO,MAAM,MAAM;EAC3E,IAAI,QACF,KAAK,yBAAyB,MAAM;EAEtC,MAAM,EAAE,cAAc,cAAc,QAAQ;EAC5C,MAAM,QAA+B;GACnC,MAAM,MAAM;GACZ,aAAa,MAAM;GACnB,UAAU;GACV,SACE,MAAM,QAAQ,KAAA,IACV,KAAA,IACA,CAAC;IAAE,MAAM;IAAwB,OAAO;KAAE,KAAK,MAAM;KAAK;IAAU;GAAE,CAAC;GAC7E,SAAS,MAAM;EACjB;EACA,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa;GACpE,MAAM,MAAM,MAAM,YAAY,OAAO,OAAO,IAAI,KAAK;GACrD,IAAI,CAAC,KACH,OAAO;GAET,MAAM,OAAO,OAAO,CAAC,YAAY,OAAO,OAAO,GAAG,CAAC,CAAC;GACpD,OAAO;EACT,CAAC;EACD,IAAI,CAAC,SACH,OAAO;EAET,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc;EAAG,CAAC;EAC/D,OAAO,UAAU,OAAO;CAC1B;CAEA,MAAM,cAAc,OAAe,IAA8B;EAC/D,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,EAAE,cAAc,cAAc,QAAQ;EAC5C,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,EAAE,aAAa,aAAa,aAAa;GACjF,MAAM,UAAU,MAAM,YAAY,OAAO,OAAO,EAAE;GAClD,IAAI,CAAC,SACH,OAAO;GAET,MAAM,YAAY,QAAQ,OAAO,SAAS;GAC1C,MAAM,OAAO,OAAO,CAAC,iBAAiB,kBAAkB,KAAK;IAAE;IAAO,MAAM;GAAQ,CAAC,CAAC,CAAC;GACvF,OAAO;EACT,CAAC;EACD,IAAI,SACF,KAAK,OAAO,KAAK,mBAAmB;GAAE;GAAO,cAAc;EAAG,CAAC;EAEjE,OAAO,YAAY;CACrB;CAEA,MAAM,oBAAoB,OAAe,IAA2C;EAClF,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAGT,MAAM,UAAS,MADO,KAAK,YAAY,OAAO,OAAO,cAAc,QAAQ,CAAC,CAAC,SAAS,EAAA,GAC7D;EACzB,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,MAAM,WAAW,GAAG,4BAA4B;EAE5D,OAAO,EAAE,OAAO;CAClB;CAEA,MAAM,oBAAoB,OAAe,IAA2C;EAClF,MAAM,WAAW,MAAM,KAAK,YAAY,OAAO,EAAE;EACjD,IAAI,CAAC,UACH,OAAO;EAET,MAAM,SAAS,sBAAsB;EACrC,MAAM,KAAK,YAAY,OAAO,OAAO,cAAc,QAAQ,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;EAClF,KAAK,OAAO,KAAK,0BAA0B;GAAE;GAAO,cAAc;EAAG,CAAC;EACtE,OAAO,EAAE,OAAO;CAClB;CAEA,MAAc,YAAY,OAAe,IAAwC;EAC/E,MAAM,aAAa,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE;EACrD,OAAO,YAAY,SAAS,YAAY,aAAa;CACvD;CAEA,yBAAiC,QAAwB;EACvD,yBAAyB,MAAM;EAC/B,MAAM,QAAQ,IAAI,IAAI,gBAAgB,CAAC,CAAC,KAAK,MAAM,EAAE,IAAI,CAAC;EAC1D,KAAK,MAAM,SAAS,QAClB,IAAI,CAAC,MAAM,IAAI,KAAK,GAClB,MAAM,IAAI,oBAAoB,OAAO,SAAS;CAGpD;CAEA,mBAAqC;EACnC,OAAO,CACL,GAAG,eAAe,GAClB,GAAG,KAAK,aAAa,UAAU,CAAC,CAAC,SAAS,gBACxC,YAAY,QAAQ,KAAK,YAAY;GACnC,MAAM,GAAG,YAAY,GAAG,GAAG,OAAO;GAClC,aAAa,OAAO;GACpB,aAAa,OAAO;GACpB,QAAQ,YAAY;EACtB,EAAE,CACJ,CACF;CACF;CAEA,oBAAuC;EACrC,OAAO,EAAE,UAAU,gBAAgB,EAAE;CACvC;AACF"}

package/dist/automations/types.d.ts

@@ -1,3 +1,3 @@
-import { AutomationRunsQuery, AvailableAction, AvailableActions, AvailableTriggers, CreateAutomationInput, UpdateAutomationInput } from "../types/schemas/automations.js";
+import { AutomationRunsQuery, AutomationsQuery, AvailableAction, AvailableActions, AvailableTriggers, CreateAutomationInput, CreateWebhookInput, UpdateAutomationInput, UpdateWebhookInput } from "../types/schemas/automations.js";
 import "../types/index.js";
-export type { AutomationRunsQuery, AvailableAction, AvailableActions, AvailableTriggers, CreateAutomationInput, UpdateAutomationInput };
+export type { AutomationRunsQuery, AutomationsQuery, AvailableAction, AvailableActions, AvailableTriggers, CreateAutomationInput, CreateWebhookInput, UpdateAutomationInput, UpdateWebhookInput };

package/dist/automations/webhook-signing.d.ts

@@ -0,0 +1,7 @@
+//#region src/automations/webhook-signing.d.ts
+declare function generateWebhookSecret(): string;
+declare function signWebhook(secret: string, id: string, timestamp: number, body: string): string;
+declare function webhookHeaders(secret: string, id: string, timestamp: number, body: string): Record<string, string>;
+//#endregion
+export { generateWebhookSecret, signWebhook, webhookHeaders };
+//# sourceMappingURL=webhook-signing.d.ts.map

package/dist/automations/webhook-signing.js

@@ -0,0 +1,22 @@
+import { createHmac, randomBytes } from "node:crypto";
+//#region src/automations/webhook-signing.ts
+const SECRET_PREFIX = "whsec_";
+const SECRET_BYTES = 32;
+function generateWebhookSecret() {
+	return `${SECRET_PREFIX}${randomBytes(SECRET_BYTES).toString("base64")}`;
+}
+function signWebhook(secret, id, timestamp, body) {
+	return `v1,${createHmac("sha256", Buffer.from(secret.slice(6), "base64")).update(`${id}.${timestamp}.${body}`).digest("base64")}`;
+}
+function webhookHeaders(secret, id, timestamp, body) {
+	return {
+		"content-type": "application/json",
+		"webhook-id": id,
+		"webhook-timestamp": String(timestamp),
+		"webhook-signature": signWebhook(secret, id, timestamp, body)
+	};
+}
+//#endregion
+export { generateWebhookSecret, signWebhook, webhookHeaders };
+
+//# sourceMappingURL=webhook-signing.js.map

package/dist/automations/webhook-signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-signing.js","names":[],"sources":["../../src/automations/webhook-signing.ts"],"sourcesContent":["import { createHmac, randomBytes } from 'node:crypto';\n\nconst SECRET_PREFIX = 'whsec_';\nconst SECRET_BYTES = 32;\n\nexport function generateWebhookSecret(): string {\n  return `${SECRET_PREFIX}${randomBytes(SECRET_BYTES).toString('base64')}`;\n}\n\nexport function signWebhook(secret: string, id: string, timestamp: number, body: string): string {\n  const key = Buffer.from(secret.slice(SECRET_PREFIX.length), 'base64');\n  const signature = createHmac('sha256', key).update(`${id}.${timestamp}.${body}`).digest('base64');\n  return `v1,${signature}`;\n}\n\nexport function webhookHeaders(\n  secret: string,\n  id: string,\n  timestamp: number,\n  body: string,\n): Record<string, string> {\n  return {\n    'content-type': 'application/json',\n    'webhook-id': id,\n    'webhook-timestamp': String(timestamp),\n    'webhook-signature': signWebhook(secret, id, timestamp, body),\n  };\n}\n"],"mappings":";;AAEA,MAAM,gBAAgB;AACtB,MAAM,eAAe;AAErB,SAAgB,wBAAgC;CAC9C,OAAO,GAAG,gBAAgB,YAAY,YAAY,CAAC,CAAC,SAAS,QAAQ;AACvE;AAEA,SAAgB,YAAY,QAAgB,IAAY,WAAmB,MAAsB;CAG/F,OAAO,MADW,WAAW,UADjB,OAAO,KAAK,OAAO,MAAM,CAAoB,GAAG,QACnB,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,GAAG,UAAU,GAAG,MAAM,CAAC,CAAC,OAAO,QACnE;AACvB;AAEA,SAAgB,eACd,QACA,IACA,WACA,MACwB;CACxB,OAAO;EACL,gBAAgB;EAChB,cAAc;EACd,qBAAqB,OAAO,SAAS;EACrC,qBAAqB,YAAY,QAAQ,IAAI,WAAW,IAAI;CAC9D;AACF"}