@keystrokehq/sentry 0.0.12 → 0.0.16-integration-id-canonicalization.0

package/dist/verification.mjs

@@ -1,83 +0,0 @@
-import { n as SentryWebhookVerificationError } from "./errors-DfEFwcTe.mjs";
-import { createHmac, timingSafeEqual } from "node:crypto";
-
-//#region src/verification.ts
-/**
-* Webhook-request verification helpers for Sentry.
-*
-* Two verification paths are exposed:
-*
-*   1. `verifySentryWebhookRequest` — for integration-platform webhooks,
-*      signed with HMAC-SHA256 of the raw JSON body using the integration's
-*      `clientSecret`. Header: `Sentry-Hook-Signature`. Timestamp skew is
-*      enforced via `Sentry-Hook-Timestamp` with a configurable `maxSkewSeconds`
-*      default of 300.
-*   2. `verifySentryServiceHookRequest` — for legacy project service hooks,
-*      signed with a per-hook secret rather than the integration secret.
-*      Same signing algorithm.
-*
-* Both helpers throw `SentryWebhookVerificationError` on failure and return
-* `void` on success. Comparisons use timing-safe equality.
-*/
-function verifySentryWebhookRequest(input) {
-	verifyCommon({
-		...input,
-		requireTimestamp: true
-	});
-}
-function verifySentryServiceHookRequest(input) {
-	verifyCommon({
-		...input,
-		requireTimestamp: false
-	});
-}
-function verifyCommon(input) {
-	if (!input.secret || input.secret.length === 0) throw new SentryWebhookVerificationError({
-		reason: "invalid_secret",
-		message: "Sentry webhook verification requires a non-empty signing secret."
-	});
-	const signature = getHeader(input.headers, "sentry-hook-signature");
-	if (!signature) throw new SentryWebhookVerificationError({
-		reason: "missing_signature",
-		message: "Sentry webhook request is missing the `Sentry-Hook-Signature` header."
-	});
-	if (input.requireTimestamp) {
-		const timestamp = getHeader(input.headers, "sentry-hook-timestamp");
-		if (!timestamp) throw new SentryWebhookVerificationError({
-			reason: "missing_timestamp",
-			message: "Sentry webhook request is missing the `Sentry-Hook-Timestamp` header."
-		});
-		const skewSeconds = input.maxSkewSeconds ?? 300;
-		const tsSeconds = Number(timestamp);
-		if (!Number.isFinite(tsSeconds)) throw new SentryWebhookVerificationError({
-			reason: "missing_timestamp",
-			message: "Sentry webhook `Sentry-Hook-Timestamp` header is not a number."
-		});
-		const nowSeconds = Math.floor((input.now ?? Date.now)() / 1e3);
-		if (Math.abs(nowSeconds - tsSeconds) > skewSeconds) throw new SentryWebhookVerificationError({
-			reason: "timestamp_skew",
-			message: `Sentry webhook timestamp ${timestamp} is outside the acceptable skew of ${skewSeconds}s (server time ${nowSeconds}).`
-		});
-	}
-	if (!isTimingSafeHexEqual(createHmac("sha256", input.secret).update(input.rawBody, "utf8").digest("hex"), signature)) throw new SentryWebhookVerificationError({
-		reason: "invalid_signature",
-		message: "Sentry webhook signature did not match the computed HMAC-SHA256."
-	});
-}
-function getHeader(headers, name) {
-	if (headers instanceof Headers) return headers.get(name);
-	const lower = name.toLowerCase();
-	for (const key of Object.keys(headers)) if (key.toLowerCase() === lower) return headers[key] ?? null;
-	return null;
-}
-function isTimingSafeHexEqual(expectedHex, actualHex) {
-	if (expectedHex.length !== actualHex.length) return false;
-	try {
-		return timingSafeEqual(Buffer.from(expectedHex, "hex"), Buffer.from(actualHex, "hex"));
-	} catch {
-		return false;
-	}
-}
-
-//#endregion
-export { verifySentryServiceHookRequest, verifySentryWebhookRequest };

package/dist/webhooks.d.mts

@@ -1,199 +0,0 @@
-import * as _keystrokehq_core0 from "@keystrokehq/core";
-import { z } from "zod";
-import * as _keystrokehq_core_credential_set0 from "@keystrokehq/core/credential-set";
-
-//#region src/webhooks.d.ts
-declare const createProjectWebhookSubscription: _keystrokehq_core0.Operation<z.ZodObject<{
-  organization_slug: z.ZodOptional<z.ZodString>;
-  project_slug: z.ZodString;
-  url: z.ZodString;
-  events: z.ZodArray<z.ZodString>;
-}, z.core.$strip>, z.ZodObject<{
-  id: z.ZodString;
-  url: z.ZodString;
-  events: z.ZodArray<z.ZodString>;
-  dateCreated: z.ZodOptional<z.ZodISODateTime>;
-  disabled: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>>[] | undefined>], undefined>;
-declare const retrieveProjectHooks: _keystrokehq_core0.Operation<z.ZodObject<{
-  cursor: z.ZodOptional<z.ZodString>;
-  per_page: z.ZodOptional<z.ZodNumber>;
-  query: z.ZodOptional<z.ZodString>;
-  organization_slug: z.ZodOptional<z.ZodString>;
-  project_slug: z.ZodString;
-}, z.core.$strip>, z.ZodArray<z.ZodObject<{
-  id: z.ZodString;
-  url: z.ZodString;
-  events: z.ZodArray<z.ZodString>;
-  dateCreated: z.ZodOptional<z.ZodISODateTime>;
-  disabled: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>>[] | undefined>], undefined>;
-declare const getProjectHook: _keystrokehq_core0.Operation<z.ZodObject<{
-  organization_slug: z.ZodOptional<z.ZodString>;
-  project_slug: z.ZodString;
-  hook_id: z.ZodString;
-}, z.core.$strip>, z.ZodObject<{
-  id: z.ZodString;
-  url: z.ZodString;
-  events: z.ZodArray<z.ZodString>;
-  dateCreated: z.ZodOptional<z.ZodISODateTime>;
-  disabled: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>>[] | undefined>], undefined>;
-declare const updateWebhookConfiguration: _keystrokehq_core0.Operation<z.ZodObject<{
-  organization_slug: z.ZodOptional<z.ZodString>;
-  project_slug: z.ZodString;
-  hook_id: z.ZodString;
-  url: z.ZodOptional<z.ZodString>;
-  events: z.ZodOptional<z.ZodArray<z.ZodString>>;
-  isActive: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>, z.ZodObject<{
-  id: z.ZodString;
-  url: z.ZodString;
-  events: z.ZodArray<z.ZodString>;
-  dateCreated: z.ZodOptional<z.ZodISODateTime>;
-  disabled: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>>[] | undefined>], undefined>;
-declare const deleteProjectHook: _keystrokehq_core0.Operation<z.ZodObject<{
-  organization_slug: z.ZodOptional<z.ZodString>;
-  project_slug: z.ZodString;
-  hook_id: z.ZodString;
-}, z.core.$strip>, z.ZodUnknown, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-  SENTRY_ACCESS_TOKEN: z.ZodString;
-  SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-  SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>>[] | undefined>], undefined>;
-declare const sentryWebhookOperations: {
-  readonly createProjectWebhookSubscription: _keystrokehq_core0.Operation<z.ZodObject<{
-    organization_slug: z.ZodOptional<z.ZodString>;
-    project_slug: z.ZodString;
-    url: z.ZodString;
-    events: z.ZodArray<z.ZodString>;
-  }, z.core.$strip>, z.ZodObject<{
-    id: z.ZodString;
-    url: z.ZodString;
-    events: z.ZodArray<z.ZodString>;
-    dateCreated: z.ZodOptional<z.ZodISODateTime>;
-    disabled: z.ZodOptional<z.ZodBoolean>;
-  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>>[] | undefined>], undefined>;
-  readonly retrieveProjectHooks: _keystrokehq_core0.Operation<z.ZodObject<{
-    cursor: z.ZodOptional<z.ZodString>;
-    per_page: z.ZodOptional<z.ZodNumber>;
-    query: z.ZodOptional<z.ZodString>;
-    organization_slug: z.ZodOptional<z.ZodString>;
-    project_slug: z.ZodString;
-  }, z.core.$strip>, z.ZodArray<z.ZodObject<{
-    id: z.ZodString;
-    url: z.ZodString;
-    events: z.ZodArray<z.ZodString>;
-    dateCreated: z.ZodOptional<z.ZodISODateTime>;
-    disabled: z.ZodOptional<z.ZodBoolean>;
-  }, z.core.$loose>>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>>[] | undefined>], undefined>;
-  readonly getProjectHook: _keystrokehq_core0.Operation<z.ZodObject<{
-    organization_slug: z.ZodOptional<z.ZodString>;
-    project_slug: z.ZodString;
-    hook_id: z.ZodString;
-  }, z.core.$strip>, z.ZodObject<{
-    id: z.ZodString;
-    url: z.ZodString;
-    events: z.ZodArray<z.ZodString>;
-    dateCreated: z.ZodOptional<z.ZodISODateTime>;
-    disabled: z.ZodOptional<z.ZodBoolean>;
-  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>>[] | undefined>], undefined>;
-  readonly updateWebhookConfiguration: _keystrokehq_core0.Operation<z.ZodObject<{
-    organization_slug: z.ZodOptional<z.ZodString>;
-    project_slug: z.ZodString;
-    hook_id: z.ZodString;
-    url: z.ZodOptional<z.ZodString>;
-    events: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    isActive: z.ZodOptional<z.ZodBoolean>;
-  }, z.core.$strip>, z.ZodObject<{
-    id: z.ZodString;
-    url: z.ZodString;
-    events: z.ZodArray<z.ZodString>;
-    dateCreated: z.ZodOptional<z.ZodISODateTime>;
-    disabled: z.ZodOptional<z.ZodBoolean>;
-  }, z.core.$loose>, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>>[] | undefined>], undefined>;
-  readonly deleteProjectHook: _keystrokehq_core0.Operation<z.ZodObject<{
-    organization_slug: z.ZodOptional<z.ZodString>;
-    project_slug: z.ZodString;
-    hook_id: z.ZodString;
-  }, z.core.$strip>, z.ZodUnknown, readonly [_keystrokehq_core0.CredentialSet<"sentry", z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>, readonly _keystrokehq_core_credential_set0.CredentialConnection<z.ZodObject<{
-    SENTRY_ACCESS_TOKEN: z.ZodString;
-    SENTRY_REGION_URL: z.ZodOptional<z.ZodString>;
-    SENTRY_ORG_SLUG: z.ZodOptional<z.ZodString>;
-  }, z.core.$strip>>[] | undefined>], undefined>;
-};
-//#endregion
-export { createProjectWebhookSubscription, deleteProjectHook, getProjectHook, retrieveProjectHooks, sentryWebhookOperations, updateWebhookConfiguration };

package/dist/webhooks.mjs

@@ -1,108 +0,0 @@
-import { orgProjectScopeInputSchema, sentryIdSchema, sentryListInputSchema, sentryProjectHookSchema } from "./schemas.mjs";
-import { t as defineSentryEndpoint } from "./endpoint-factory-C0WIFmtK.mjs";
-import { t as SENTRY_SCOPE } from "./scopes-RRU0vt-a.mjs";
-import { z } from "zod";
-
-//#region src/webhooks.ts
-/**
-* Sentry legacy project service-hook operations. Maps to PLAN.md §6.16 (5 actions).
-*/
-const ORG_PROJECT = [{
-	name: "organization_slug",
-	placeholder: "{organization_slug}"
-}, {
-	name: "project_slug",
-	placeholder: "{project_slug}"
-}];
-const ORG_PROJECT_HOOK = [...ORG_PROJECT, {
-	name: "hook_id",
-	placeholder: "{hook_id}"
-}];
-const createProjectWebhookSubscription = defineSentryEndpoint({
-	id: "sentry.create-project-webhook-subscription",
-	name: "Create Project Service Hook",
-	description: "Create a legacy per-project service hook. Prefer an integration webhook for new installs.",
-	method: "POST",
-	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/",
-	pathParams: ORG_PROJECT,
-	input: orgProjectScopeInputSchema.extend({
-		url: z.string().url(),
-		events: z.array(z.string()).min(1)
-	}),
-	bodyFields: ["url", "events"],
-	output: sentryProjectHookSchema,
-	needsApproval: true,
-	requiredOAuthScopes: [...SENTRY_SCOPE.projectAdmin]
-});
-const retrieveProjectHooks = defineSentryEndpoint({
-	id: "sentry.retrieve-project-hooks",
-	name: "List Project Service Hooks",
-	description: "List the service hooks configured on a project.",
-	method: "GET",
-	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/",
-	pathParams: ORG_PROJECT,
-	input: sentryListInputSchema.merge(orgProjectScopeInputSchema),
-	queryFields: [
-		"cursor",
-		"per_page",
-		"query"
-	],
-	output: z.array(sentryProjectHookSchema),
-	pagination: "cursor",
-	requiredOAuthScopes: [...SENTRY_SCOPE.projectRead]
-});
-const getProjectHook = defineSentryEndpoint({
-	id: "sentry.get-project-hook",
-	name: "Get Project Service Hook",
-	description: "Fetch a project service hook by id.",
-	method: "GET",
-	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/{hook_id}/",
-	pathParams: ORG_PROJECT_HOOK,
-	input: orgProjectScopeInputSchema.extend({ hook_id: sentryIdSchema }),
-	output: sentryProjectHookSchema,
-	requiredOAuthScopes: [...SENTRY_SCOPE.projectRead]
-});
-const updateWebhookConfiguration = defineSentryEndpoint({
-	id: "sentry.update-webhook-configuration-xp",
-	name: "Update Project Service Hook",
-	description: "Update a project service hook in place.",
-	method: "PUT",
-	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/{hook_id}/",
-	pathParams: ORG_PROJECT_HOOK,
-	input: orgProjectScopeInputSchema.extend({
-		hook_id: sentryIdSchema,
-		url: z.string().url().optional(),
-		events: z.array(z.string()).optional(),
-		isActive: z.boolean().optional()
-	}),
-	bodyFields: [
-		"url",
-		"events",
-		"isActive"
-	],
-	output: sentryProjectHookSchema,
-	needsApproval: true,
-	requiredOAuthScopes: [...SENTRY_SCOPE.projectAdmin]
-});
-const deleteProjectHook = defineSentryEndpoint({
-	id: "sentry.delete-project-hook",
-	name: "Delete Project Service Hook",
-	description: "Delete a project service hook by id.",
-	method: "DELETE",
-	path: "/api/0/projects/{organization_slug}/{project_slug}/hooks/{hook_id}/",
-	pathParams: ORG_PROJECT_HOOK,
-	input: orgProjectScopeInputSchema.extend({ hook_id: sentryIdSchema }),
-	output: z.unknown(),
-	needsApproval: true,
-	requiredOAuthScopes: [...SENTRY_SCOPE.projectAdmin]
-});
-const sentryWebhookOperations = {
-	createProjectWebhookSubscription,
-	retrieveProjectHooks,
-	getProjectHook,
-	updateWebhookConfiguration,
-	deleteProjectHook
-};
-
-//#endregion
-export { createProjectWebhookSubscription, deleteProjectHook, getProjectHook, retrieveProjectHooks, sentryWebhookOperations, updateWebhookConfiguration };