@keystrokehq/sentry 0.0.1

package/dist/user-emails.d.mts

@@ -0,0 +1,117 @@
+import * as _keystrokehq_core0 from "@keystrokehq/core";
+import { z } from "zod";
+import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
+
+//#region src/user-emails.d.ts
+declare const retrieveUserEmailInformation: _keystrokehq_core0.Operation<z.ZodObject<{}, z.core.$strip>, z.ZodArray<z.ZodObject<{
+  email: z.ZodString;
+  isPrimary: z.ZodOptional<z.ZodBoolean>;
+  isVerified: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const addRemoveUserEmailById: _keystrokehq_core0.Operation<z.ZodObject<{
+  email: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  email: z.ZodString;
+  isPrimary: z.ZodOptional<z.ZodBoolean>;
+  isVerified: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const updateUserEmail: _keystrokehq_core0.Operation<z.ZodObject<{
+  email: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  email: z.ZodString;
+  isPrimary: z.ZodOptional<z.ZodBoolean>;
+  isVerified: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const deleteUserEmailsById: _keystrokehq_core0.Operation<z.ZodObject<{
+  email: z.ZodString;
+}, z.core.$strip>, z.ZodUnknown, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const sentryUserEmailOperations: {
+  readonly retrieveUserEmailInformation: _keystrokehq_core0.Operation<z.ZodObject<{}, z.core.$strip>, z.ZodArray<z.ZodObject<{
+    email: z.ZodString;
+    isPrimary: z.ZodOptional<z.ZodBoolean>;
+    isVerified: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+  readonly addRemoveUserEmailById: _keystrokehq_core0.Operation<z.ZodObject<{
+    email: z.ZodString;
+  }, z.core.$strip>, z.ZodObject<{
+    email: z.ZodString;
+    isPrimary: z.ZodOptional<z.ZodBoolean>;
+    isVerified: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+  readonly updateUserEmail: _keystrokehq_core0.Operation<z.ZodObject<{
+    email: z.ZodString;
+  }, z.core.$strip>, z.ZodObject<{
+    email: z.ZodString;
+    isPrimary: z.ZodOptional<z.ZodBoolean>;
+    isVerified: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+  readonly deleteUserEmailsById: _keystrokehq_core0.Operation<z.ZodObject<{
+    email: z.ZodString;
+  }, z.core.$strip>, z.ZodUnknown, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+};
+//#endregion
+export { addRemoveUserEmailById, deleteUserEmailsById, retrieveUserEmailInformation, sentryUserEmailOperations, updateUserEmail };

package/dist/user-emails.mjs

@@ -0,0 +1,60 @@
+import { sentryUserEmailSchema } from "./schemas.mjs";
+import { t as defineSentryEndpoint } from "./endpoint-factory-BwjbcPwW.mjs";
+import { z } from "zod";
+
+//#region src/user-emails.ts
+/**
+* Sentry user-email operations (current-user account scope).
+* Maps to PLAN.md §6.21 (4 actions).
+*/
+const retrieveUserEmailInformation = defineSentryEndpoint({
+	id: "retrieve_user_email_information",
+	name: "Retrieve User Emails",
+	description: "List the emails on the authenticated Sentry account.",
+	method: "GET",
+	path: "/api/0/users/me/emails/",
+	input: z.object({}),
+	output: z.array(sentryUserEmailSchema)
+});
+const addRemoveUserEmailById = defineSentryEndpoint({
+	id: "add_remove_user_email_by_id",
+	name: "Add User Email",
+	description: "Add a new email to the authenticated Sentry account.",
+	method: "POST",
+	path: "/api/0/users/me/emails/",
+	input: z.object({ email: z.string().email() }),
+	bodyFields: ["email"],
+	output: sentryUserEmailSchema,
+	needsApproval: true
+});
+const updateUserEmail = defineSentryEndpoint({
+	id: "update_user_email",
+	name: "Set Primary Email",
+	description: "Mark an email as the primary address on the authenticated account.",
+	method: "PUT",
+	path: "/api/0/users/me/emails/",
+	input: z.object({ email: z.string().email() }),
+	bodyFields: ["email"],
+	output: sentryUserEmailSchema,
+	needsApproval: true
+});
+const deleteUserEmailsById = defineSentryEndpoint({
+	id: "delete_user_emails_by_id",
+	name: "Delete User Email",
+	description: "Remove an email from the authenticated Sentry account.",
+	method: "DELETE",
+	path: "/api/0/users/me/emails/",
+	input: z.object({ email: z.string().email() }),
+	queryFields: ["email"],
+	output: z.unknown(),
+	needsApproval: true
+});
+const sentryUserEmailOperations = {
+	retrieveUserEmailInformation,
+	addRemoveUserEmailById,
+	updateUserEmail,
+	deleteUserEmailsById
+};
+
+//#endregion
+export { addRemoveUserEmailById, deleteUserEmailsById, retrieveUserEmailInformation, sentryUserEmailOperations, updateUserEmail };

package/dist/verification.d.mts

@@ -0,0 +1,30 @@
+//#region src/verification.d.ts
+/**
+ * Webhook-request verification helpers for Sentry.
+ *
+ * Two verification paths are exposed:
+ *
+ *   1. `verifySentryWebhookRequest` — for integration-platform webhooks,
+ *      signed with HMAC-SHA256 of the raw JSON body using the integration's
+ *      `clientSecret`. Header: `Sentry-Hook-Signature`. Timestamp skew is
+ *      enforced via `Sentry-Hook-Timestamp` with a configurable `maxSkewSeconds`
+ *      default of 300.
+ *   2. `verifySentryServiceHookRequest` — for legacy project service hooks,
+ *      signed with a per-hook secret rather than the integration secret.
+ *      Same signing algorithm.
+ *
+ * Both helpers throw `SentryWebhookVerificationError` on failure and return
+ * `void` on success. Comparisons use timing-safe equality.
+ */
+interface SentryWebhookVerificationInput {
+  readonly rawBody: string;
+  readonly headers: Readonly<Record<string, string>> | Headers;
+  readonly secret: string;
+  readonly maxSkewSeconds?: number;
+  /** Hook for tests to provide a deterministic "now" value. */
+  readonly now?: () => number;
+}
+declare function verifySentryWebhookRequest(input: SentryWebhookVerificationInput): void;
+declare function verifySentryServiceHookRequest(input: SentryWebhookVerificationInput): void;
+//#endregion
+export { SentryWebhookVerificationInput, verifySentryServiceHookRequest, verifySentryWebhookRequest };

package/dist/verification.mjs

@@ -0,0 +1,83 @@
+import { n as SentryWebhookVerificationError } from "./errors-DfEFwcTe.mjs";
+import { createHmac, timingSafeEqual } from "node:crypto";
+
+//#region src/verification.ts
+/**
+* Webhook-request verification helpers for Sentry.
+*
+* Two verification paths are exposed:
+*
+*   1. `verifySentryWebhookRequest` — for integration-platform webhooks,
+*      signed with HMAC-SHA256 of the raw JSON body using the integration's
+*      `clientSecret`. Header: `Sentry-Hook-Signature`. Timestamp skew is
+*      enforced via `Sentry-Hook-Timestamp` with a configurable `maxSkewSeconds`
+*      default of 300.
+*   2. `verifySentryServiceHookRequest` — for legacy project service hooks,
+*      signed with a per-hook secret rather than the integration secret.
+*      Same signing algorithm.
+*
+* Both helpers throw `SentryWebhookVerificationError` on failure and return
+* `void` on success. Comparisons use timing-safe equality.
+*/
+function verifySentryWebhookRequest(input) {
+	verifyCommon({
+		...input,
+		requireTimestamp: true
+	});
+}
+function verifySentryServiceHookRequest(input) {
+	verifyCommon({
+		...input,
+		requireTimestamp: false
+	});
+}
+function verifyCommon(input) {
+	if (!input.secret || input.secret.length === 0) throw new SentryWebhookVerificationError({
+		reason: "invalid_secret",
+		message: "Sentry webhook verification requires a non-empty signing secret."
+	});
+	const signature = getHeader(input.headers, "sentry-hook-signature");
+	if (!signature) throw new SentryWebhookVerificationError({
+		reason: "missing_signature",
+		message: "Sentry webhook request is missing the `Sentry-Hook-Signature` header."
+	});
+	if (input.requireTimestamp) {
+		const timestamp = getHeader(input.headers, "sentry-hook-timestamp");
+		if (!timestamp) throw new SentryWebhookVerificationError({
+			reason: "missing_timestamp",
+			message: "Sentry webhook request is missing the `Sentry-Hook-Timestamp` header."
+		});
+		const skewSeconds = input.maxSkewSeconds ?? 300;
+		const tsSeconds = Number(timestamp);
+		if (!Number.isFinite(tsSeconds)) throw new SentryWebhookVerificationError({
+			reason: "missing_timestamp",
+			message: "Sentry webhook `Sentry-Hook-Timestamp` header is not a number."
+		});
+		const nowSeconds = Math.floor((input.now ?? Date.now)() / 1e3);
+		if (Math.abs(nowSeconds - tsSeconds) > skewSeconds) throw new SentryWebhookVerificationError({
+			reason: "timestamp_skew",
+			message: `Sentry webhook timestamp ${timestamp} is outside the acceptable skew of ${skewSeconds}s (server time ${nowSeconds}).`
+		});
+	}
+	if (!isTimingSafeHexEqual(createHmac("sha256", input.secret).update(input.rawBody, "utf8").digest("hex"), signature)) throw new SentryWebhookVerificationError({
+		reason: "invalid_signature",
+		message: "Sentry webhook signature did not match the computed HMAC-SHA256."
+	});
+}
+function getHeader(headers, name) {
+	if (headers instanceof Headers) return headers.get(name);
+	const lower = name.toLowerCase();
+	for (const key of Object.keys(headers)) if (key.toLowerCase() === lower) return headers[key] ?? null;
+	return null;
+}
+function isTimingSafeHexEqual(expectedHex, actualHex) {
+	if (expectedHex.length !== actualHex.length) return false;
+	try {
+		return timingSafeEqual(Buffer.from(expectedHex, "hex"), Buffer.from(actualHex, "hex"));
+	} catch {
+		return false;
+	}
+}
+
+//#endregion
+export { verifySentryServiceHookRequest, verifySentryWebhookRequest };

package/dist/webhooks.d.mts

@@ -0,0 +1,199 @@
+import * as _keystrokehq_core0 from "@keystrokehq/core";
+import { z } from "zod";
+import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
+
+//#region src/webhooks.d.ts
+declare const createProjectWebhookSubscription: _keystrokehq_core0.Operation<z.ZodObject<{
+  organization_slug: z.ZodOptional<z.ZodString>;
+  project_slug: z.ZodString;
+  url: z.ZodString;
+  events: z.ZodArray<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  url: z.ZodString;
+  events: z.ZodArray<z.ZodString>;
+  dateCreated: z.ZodOptional<z.ZodISODateTime>;
+  disabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const retrieveProjectHooks: _keystrokehq_core0.Operation<z.ZodObject<{
+  cursor: z.ZodOptional<z.ZodString>;
+  per_page: z.ZodOptional<z.ZodNumber>;
+  query: z.ZodOptional<z.ZodString>;
+  organization_slug: z.ZodOptional<z.ZodString>;
+  project_slug: z.ZodString;
+}, z.core.$strip>, z.ZodArray<z.ZodObject<{
+  id: z.ZodString;
+  url: z.ZodString;
+  events: z.ZodArray<z.ZodString>;
+  dateCreated: z.ZodOptional<z.ZodISODateTime>;
+  disabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const getProjectHook: _keystrokehq_core0.Operation<z.ZodObject<{
+  organization_slug: z.ZodOptional<z.ZodString>;
+  project_slug: z.ZodString;
+  hook_id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  url: z.ZodString;
+  events: z.ZodArray<z.ZodString>;
+  dateCreated: z.ZodOptional<z.ZodISODateTime>;
+  disabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const updateWebhookConfiguration: _keystrokehq_core0.Operation<z.ZodObject<{
+  organization_slug: z.ZodOptional<z.ZodString>;
+  project_slug: z.ZodString;
+  hook_id: z.ZodString;
+  url: z.ZodOptional<z.ZodString>;
+  events: z.ZodOptional<z.ZodArray<z.ZodString>>;
+  isActive: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>, z.ZodObject<{
+  id: z.ZodString;
+  url: z.ZodString;
+  events: z.ZodArray<z.ZodString>;
+  dateCreated: z.ZodOptional<z.ZodISODateTime>;
+  disabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const deleteProjectHook: _keystrokehq_core0.Operation<z.ZodObject<{
+  organization_slug: z.ZodOptional<z.ZodString>;
+  project_slug: z.ZodString;
+  hook_id: z.ZodString;
+}, z.core.$strip>, z.ZodUnknown, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+  SENTRY_ACCESS_TOKEN: z.ZodString;
+  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>[] | undefined>], undefined>;
+declare const sentryWebhookOperations: {
+  readonly createProjectWebhookSubscription: _keystrokehq_core0.Operation<z.ZodObject<{
+    organization_slug: z.ZodOptional<z.ZodString>;
+    project_slug: z.ZodString;
+    url: z.ZodString;
+    events: z.ZodArray<z.ZodString>;
+  }, z.core.$strip>, z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodString;
+    events: z.ZodArray<z.ZodString>;
+    dateCreated: z.ZodOptional<z.ZodISODateTime>;
+    disabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+  readonly retrieveProjectHooks: _keystrokehq_core0.Operation<z.ZodObject<{
+    cursor: z.ZodOptional<z.ZodString>;
+    per_page: z.ZodOptional<z.ZodNumber>;
+    query: z.ZodOptional<z.ZodString>;
+    organization_slug: z.ZodOptional<z.ZodString>;
+    project_slug: z.ZodString;
+  }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodString;
+    events: z.ZodArray<z.ZodString>;
+    dateCreated: z.ZodOptional<z.ZodISODateTime>;
+    disabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+  readonly getProjectHook: _keystrokehq_core0.Operation<z.ZodObject<{
+    organization_slug: z.ZodOptional<z.ZodString>;
+    project_slug: z.ZodString;
+    hook_id: z.ZodString;
+  }, z.core.$strip>, z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodString;
+    events: z.ZodArray<z.ZodString>;
+    dateCreated: z.ZodOptional<z.ZodISODateTime>;
+    disabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+  readonly updateWebhookConfiguration: _keystrokehq_core0.Operation<z.ZodObject<{
+    organization_slug: z.ZodOptional<z.ZodString>;
+    project_slug: z.ZodString;
+    hook_id: z.ZodString;
+    url: z.ZodOptional<z.ZodString>;
+    events: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    isActive: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$strip>, z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodString;
+    events: z.ZodArray<z.ZodString>;
+    dateCreated: z.ZodOptional<z.ZodISODateTime>;
+    disabled: z.ZodOptional<z.ZodBoolean>;
+  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+  readonly deleteProjectHook: _keystrokehq_core0.Operation<z.ZodObject<{
+    organization_slug: z.ZodOptional<z.ZodString>;
+    project_slug: z.ZodString;
+    hook_id: z.ZodString;
+  }, z.core.$strip>, z.ZodUnknown, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
+    SENTRY_ACCESS_TOKEN: z.ZodString;
+    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
+    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>[] | undefined>], undefined>;
+};
+//#endregion
+export { createProjectWebhookSubscription, deleteProjectHook, getProjectHook, retrieveProjectHooks, sentryWebhookOperations, updateWebhookConfiguration };

package/dist/webhooks.mjs

@@ -0,0 +1,108 @@
+import { orgProjectScopeInputSchema, sentryIdSchema, sentryListInputSchema, sentryProjectHookSchema } from "./schemas.mjs";
+import { t as defineSentryEndpoint } from "./endpoint-factory-BwjbcPwW.mjs";
+import { t as SENTRY_SCOPE } from "./scopes-RRU0vt-a.mjs";
+import { z } from "zod";
+
+//#region src/webhooks.ts
+/**
+* Sentry legacy project service-hook operations. Maps to PLAN.md §6.16 (5 actions).
+*/
+const ORG_PROJECT = [{
+	name: "organization_slug",
+	placeholder: "{organization_slug}"
+}, {
+	name: "project_slug",
+	placeholder: "{project_slug}"
+}];
+const ORG_PROJECT_HOOK = [...ORG_PROJECT, {
+	name: "hook_id",
+	placeholder: "{hook_id}"
+}];
+const createProjectWebhookSubscription = defineSentryEndpoint({
+	id: "create_project_webhook_subscription",
+	name: "Create Project Service Hook",
+	description: "Create a legacy per-project service hook. Prefer an integration webhook for new installs.",
+	method: "POST",
+	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/",
+	pathParams: ORG_PROJECT,
+	input: orgProjectScopeInputSchema.extend({
+		url: z.string().url(),
+		events: z.array(z.string()).min(1)
+	}),
+	bodyFields: ["url", "events"],
+	output: sentryProjectHookSchema,
+	needsApproval: true,
+	requiredOAuthScopes: [...SENTRY_SCOPE.projectAdmin]
+});
+const retrieveProjectHooks = defineSentryEndpoint({
+	id: "retrieve_project_hooks",
+	name: "List Project Service Hooks",
+	description: "List the service hooks configured on a project.",
+	method: "GET",
+	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/",
+	pathParams: ORG_PROJECT,
+	input: sentryListInputSchema.merge(orgProjectScopeInputSchema),
+	queryFields: [
+		"cursor",
+		"per_page",
+		"query"
+	],
+	output: z.array(sentryProjectHookSchema),
+	pagination: "cursor",
+	requiredOAuthScopes: [...SENTRY_SCOPE.projectRead]
+});
+const getProjectHook = defineSentryEndpoint({
+	id: "get_project_hook",
+	name: "Get Project Service Hook",
+	description: "Fetch a project service hook by id.",
+	method: "GET",
+	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/{hook_id}/",
+	pathParams: ORG_PROJECT_HOOK,
+	input: orgProjectScopeInputSchema.extend({ hook_id: sentryIdSchema }),
+	output: sentryProjectHookSchema,
+	requiredOAuthScopes: [...SENTRY_SCOPE.projectRead]
+});
+const updateWebhookConfiguration = defineSentryEndpoint({
+	id: "update_webhook_configuration_xp",
+	name: "Update Project Service Hook",
+	description: "Update a project service hook in place.",
+	method: "PUT",
+	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/{hook_id}/",
+	pathParams: ORG_PROJECT_HOOK,
+	input: orgProjectScopeInputSchema.extend({
+		hook_id: sentryIdSchema,
+		url: z.string().url().optional(),
+		events: z.array(z.string()).optional(),
+		isActive: z.boolean().optional()
+	}),
+	bodyFields: [
+		"url",
+		"events",
+		"isActive"
+	],
+	output: sentryProjectHookSchema,
+	needsApproval: true,
+	requiredOAuthScopes: [...SENTRY_SCOPE.projectAdmin]
+});
+const deleteProjectHook = defineSentryEndpoint({
+	id: "delete_project_hook",
+	name: "Delete Project Service Hook",
+	description: "Delete a project service hook by id.",
+	method: "DELETE",
+	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/{hook_id}/",
+	pathParams: ORG_PROJECT_HOOK,
+	input: orgProjectScopeInputSchema.extend({ hook_id: sentryIdSchema }),
+	output: z.unknown(),
+	needsApproval: true,
+	requiredOAuthScopes: [...SENTRY_SCOPE.projectAdmin]
+});
+const sentryWebhookOperations = {
+	createProjectWebhookSubscription,
+	retrieveProjectHooks,
+	getProjectHook,
+	updateWebhookConfiguration,
+	deleteProjectHook
+};
+
+//#endregion
+export { createProjectWebhookSubscription, deleteProjectHook, getProjectHook, retrieveProjectHooks, sentryWebhookOperations, updateWebhookConfiguration };