@hogsend/engine 0.23.1 → 0.24.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hogsend/engine",
-  "version": "0.23.1",
+  "version": "0.24.0",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -40,14 +40,14 @@
     "svix": "^1.95.1",
     "winston": "^3.19.0",
     "zod": "^4.4.3",
-    "@hogsend/core": "^0.23.1",
-    "@hogsend/db": "^0.23.1",
-    "@hogsend/email": "^0.23.1",
-    "@hogsend/plugin-posthog": "^0.23.1",
-    "@hogsend/plugin-resend": "^0.23.1"
+    "@hogsend/core": "^0.24.0",
+    "@hogsend/db": "^0.24.0",
+    "@hogsend/email": "^0.24.0",
+    "@hogsend/plugin-posthog": "^0.24.0",
+    "@hogsend/plugin-resend": "^0.24.0"
   },
   "optionalDependencies": {
-    "@hogsend/plugin-postmark": "^0.23.1"
+    "@hogsend/plugin-postmark": "^0.24.0"
   },
   "devDependencies": {
     "@types/node": "^22.15.3",

package/src/journeys/journey-context.ts

@@ -21,6 +21,7 @@ import {
 import type {
   IfPast,
   JourneyContext,
+  RecentEvent,
   TimeOfDayBuilder,
   WaitForEventResult,
   Weekday,
@@ -451,6 +452,36 @@ export function createJourneyContext(
           count: total,
         };
       },
+
+      async events({
+        userId: targetUserId,
+        limit = 50,
+        within,
+      }): Promise<RecentEvent[]> {
+        const conditions = [eq(userEvents.userId, targetUserId)];
+        if (within) {
+          const since = new Date(Date.now() - durationToMs(within));
+          conditions.push(gte(userEvents.occurredAt, since));
+        }
+        const rows = await db
+          .select({
+            event: userEvents.event,
+            properties: userEvents.properties,
+            occurredAt: userEvents.occurredAt,
+          })
+          .from(userEvents)
+          .where(and(...conditions))
+          .orderBy(desc(userEvents.occurredAt))
+          .limit(limit);
+        return rows.map((row) => ({
+          event: row.event,
+          properties: row.properties ?? null,
+          occurredAt:
+            row.occurredAt instanceof Date
+              ? row.occurredAt.toISOString()
+              : String(row.occurredAt),
+        }));
+      },
     },
   };
 }

package/src/routes/webhooks/sources.ts

@@ -135,7 +135,15 @@ export function registerWebhookSourceRoutes(
     const rawBody = await c.req.text();
     const headers = headersToRecord(c.req.raw.headers);
 
-    let secret = env[auth.envKey as keyof typeof env] as string | undefined;
+    // Engine-declared secrets (presets) resolve from the validated env. A
+    // CONSUMER-defined webhook source may name an env var the engine schema
+    // doesn't declare (a BYO signature/match source), so fall back to the raw
+    // process.env value for it. Both auth branches below gate on truthiness, so
+    // an unset/blank secret stays fail-closed (signature → 401) and
+    // open-when-unconfigured (match) exactly as before.
+    let secret =
+      (env[auth.envKey as keyof typeof env] as string | undefined) ??
+      process.env[auth.envKey];
 
     // For the inbound PostHog source, fall back to the secret minted by
     // `hogsend connect` (kind="derived" store) when env has none — so an