@lucern/sdk 0.2.0-alpha.1 → 0.2.0-alpha.10

package/dist/events.d.ts

@@ -0,0 +1,178 @@
+declare const DOMAIN_EVENT_VERSION: "1.0";
+declare const EVENT_RETENTION_DEFAULT_DAYS = 30;
+declare const WEBHOOK_MAX_ATTEMPTS = 5;
+declare const WEBHOOK_RETRY_DELAYS_MS: readonly [1000, 5000, 30000, 300000];
+declare const DOMAIN_EVENT_TYPES: readonly ["belief.created", "belief.forked", "belief.confidence_updated", "belief.archived", "belief.refined", "belief.contract_created", "belief.contract_evaluated", "belief.lineage_queried", "evidence.created", "evidence.linked", "evidence.search_executed", "question.created", "question.answered", "question.refined", "question.status_updated", "question.archived", "edge.created", "contradiction.flagged", "worktree.created", "worktree.activated", "worktree.merged", "worktree.targets_updated", "worktree.metadata_updated", "topic.created", "topic.updated", "topic.archived", "task.created", "task.completed", "task.updated", "ontology.bound", "context.compiled", "identity.key_created", "identity.key_rotated", "identity.key_revoked", "webhook.test"];
+type DomainEventType = (typeof DOMAIN_EVENT_TYPES)[number];
+type DomainResourceType = "belief" | "evidence" | "question" | "edge" | "contradiction" | "worktree" | "topic" | "task" | "ontology" | "context" | "identity" | "webhook";
+type DomainActorType = "human" | "agent" | "service";
+type DomainEventData = Record<string, unknown>;
+type DomainEvent = {
+    eventId: string;
+    type: DomainEventType | string;
+    version: typeof DOMAIN_EVENT_VERSION;
+    timestamp: number;
+    tenantId?: string;
+    workspaceId?: string;
+    topicId: string;
+    resourceId: string;
+    resourceType: DomainResourceType | string;
+    actorId: string;
+    actorType: DomainActorType;
+    data: DomainEventData;
+    correlationId?: string;
+    expiresAt: number;
+};
+type CreateDomainEventInput = {
+    eventId?: string;
+    timestamp?: number;
+    tenantId?: string;
+    workspaceId?: string;
+    topicId: string;
+    type: DomainEventType | string;
+    resourceId: string;
+    resourceType: DomainResourceType | string;
+    actorId: string;
+    actorType: DomainActorType;
+    data?: DomainEventData;
+    correlationId?: string;
+    retentionDays?: number;
+};
+type EventCursor = {
+    timestamp: number;
+    eventId: string;
+};
+type EventListQuery = {
+    topicId?: string;
+    after?: string;
+    types?: string[];
+    startTime?: number;
+    endTime?: number;
+    limit?: number;
+};
+type EventListResult = {
+    events: DomainEvent[];
+    nextCursor: string | null;
+};
+type WebhookSecretMode = "configured";
+type WebhookRecord = {
+    id: string;
+    webhookId: string;
+    tenantId?: string;
+    workspaceId?: string;
+    topicId?: string;
+    url: string;
+    events: string[];
+    active: boolean;
+    secretConfigured: boolean;
+    createdAt: number;
+    updatedAt: number;
+    createdBy: string;
+    updatedBy: string;
+    lastDeliveryAt?: number;
+    lastSuccessfulDeliveryAt?: number;
+};
+type WebhookCreateInput = {
+    url: string;
+    events: string[];
+    secret: string;
+    topicId?: string;
+    active?: boolean;
+};
+type WebhookUpdateInput = {
+    url?: string;
+    events?: string[];
+    secret?: string;
+    topicId?: string | null;
+    active?: boolean;
+};
+type WebhookDeliveryStatus = "pending" | "delivering" | "succeeded" | "failed" | "dead_letter";
+type WebhookDeliveryRecord = {
+    id: string;
+    deliveryId: string;
+    webhookId: string;
+    eventId: string;
+    eventType: string;
+    topicId: string;
+    status: WebhookDeliveryStatus;
+    attemptCount: number;
+    maxAttempts: number;
+    nextAttemptAt?: number;
+    lastAttemptAt?: number;
+    lastStatusCode?: number;
+    lastError?: string;
+    deliveredAt?: number;
+    createdAt: number;
+    updatedAt: number;
+};
+type WebhookDeliveryAttemptRecord = {
+    id: string;
+    attemptId: string;
+    deliveryId: string;
+    webhookId: string;
+    eventId: string;
+    eventType: string;
+    attemptNumber: number;
+    status: "succeeded" | "failed";
+    statusCode?: number;
+    error?: string;
+    responseBody?: string;
+    durationMs?: number;
+    createdAt: number;
+};
+type WebhookDeliveriesResult = {
+    deliveries: Array<WebhookDeliveryRecord & {
+        attempts?: WebhookDeliveryAttemptRecord[];
+    }>;
+};
+type WebhookHealthResult = {
+    webhookId: string;
+    totalAttempts: number;
+    successfulAttempts: number;
+    failedAttempts: number;
+    successRate: number;
+    pendingDeliveries: number;
+    deadLetterDeliveries: number;
+    lastDeliveryAt?: number;
+    lastSuccessfulDeliveryAt?: number;
+};
+type WebhookTestResult = {
+    webhookId: string;
+    deliveryId: string;
+    status: WebhookDeliveryStatus;
+    attempts: number;
+};
+type ReplayEventsInput = EventListQuery & {
+    webhookId?: string;
+};
+type ReplayEventsResult = EventListResult & {
+    replayedDeliveries?: number;
+    replayedWebhookId?: string;
+};
+declare function eventPatternToRegExp(pattern: string): RegExp;
+declare function matchesEventPattern(eventType: string, pattern: string): boolean;
+declare function matchesAnyEventPattern(eventType: string, patterns: readonly string[]): boolean;
+declare function createEventId(): string;
+declare function normalizeRetentionDays(value: number | undefined): number;
+declare function buildDomainEvent(input: CreateDomainEventInput): DomainEvent;
+declare function compareEventCursor(left: EventCursor, right: EventCursor): number;
+declare function encodeEventCursor(cursor: EventCursor): string;
+declare function decodeEventCursor(cursor: string | undefined): EventCursor | null;
+declare function isAfterCursor(event: Pick<DomainEvent, "timestamp" | "eventId">, cursor: EventCursor | null): boolean;
+declare function sortEventsByCursor<T extends Pick<DomainEvent, "timestamp" | "eventId">>(events: readonly T[]): T[];
+declare function inferActorType(args: {
+    sessionType?: "agent" | "user";
+    authMode?: string;
+    principalType?: string;
+}): DomainActorType;
+declare function emitDomainEvent(invokeMutation: (reference: any, args: CreateDomainEventInput) => Promise<unknown>, input: CreateDomainEventInput): Promise<unknown>;
+declare function assertValidWebhookUrl(url: string): string;
+declare function normalizeWebhookPatterns(patterns: readonly string[]): string[];
+declare function assertValidWebhookSecret(secret: string): string;
+declare function computeWebhookSignature(payload: string, secret: string): Promise<string>;
+declare function nextDeliveryAttemptAt(currentAttemptCount: number, now?: number): number | undefined;
+declare function resolveDeliveryFailureStatus(attemptCount: number): WebhookDeliveryStatus;
+declare function sanitizeWebhookRecord(value: Record<string, unknown>): WebhookRecord;
+declare function truncateWebhookResponseBody(responseBody: string | undefined, maxLength?: number): string | undefined;
+
+export { type CreateDomainEventInput, DOMAIN_EVENT_TYPES, DOMAIN_EVENT_VERSION, type DomainActorType, type DomainEvent, type DomainEventData, type DomainEventType, type DomainResourceType, EVENT_RETENTION_DEFAULT_DAYS, type EventCursor, type EventListQuery, type EventListResult, type ReplayEventsInput, type ReplayEventsResult, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_MS, type WebhookCreateInput, type WebhookDeliveriesResult, type WebhookDeliveryAttemptRecord, type WebhookDeliveryRecord, type WebhookDeliveryStatus, type WebhookHealthResult, type WebhookRecord, type WebhookSecretMode, type WebhookTestResult, type WebhookUpdateInput, assertValidWebhookSecret, assertValidWebhookUrl, buildDomainEvent, compareEventCursor, computeWebhookSignature, createEventId, decodeEventCursor, emitDomainEvent, encodeEventCursor, eventPatternToRegExp, inferActorType, isAfterCursor, matchesAnyEventPattern, matchesEventPattern, nextDeliveryAttemptAt, normalizeRetentionDays, normalizeWebhookPatterns, resolveDeliveryFailureStatus, sanitizeWebhookRecord, sortEventsByCursor, truncateWebhookResponseBody };

package/dist/events.js

@@ -0,0 +1,249 @@
+// src/events.ts
+var DOMAIN_EVENT_VERSION = "1.0";
+var EVENT_RETENTION_DEFAULT_DAYS = 30;
+var WEBHOOK_MAX_ATTEMPTS = 5;
+var WEBHOOK_RETRY_DELAYS_MS = [1e3, 5e3, 3e4, 3e5];
+var DOMAIN_EVENT_TYPES = [
+  "belief.created",
+  "belief.forked",
+  "belief.confidence_updated",
+  "belief.archived",
+  "belief.refined",
+  "belief.contract_created",
+  "belief.contract_evaluated",
+  "belief.lineage_queried",
+  "evidence.created",
+  "evidence.linked",
+  "evidence.search_executed",
+  "question.created",
+  "question.answered",
+  "question.refined",
+  "question.status_updated",
+  "question.archived",
+  "edge.created",
+  "contradiction.flagged",
+  "worktree.created",
+  "worktree.activated",
+  "worktree.merged",
+  "worktree.targets_updated",
+  "worktree.metadata_updated",
+  "topic.created",
+  "topic.updated",
+  "topic.archived",
+  "task.created",
+  "task.completed",
+  "task.updated",
+  "ontology.bound",
+  "context.compiled",
+  "identity.key_created",
+  "identity.key_rotated",
+  "identity.key_revoked",
+  "webhook.test"
+];
+function escapeRegex(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function eventPatternToRegExp(pattern) {
+  const normalized = pattern.trim();
+  if (!normalized) {
+    return /^$/;
+  }
+  if (normalized === "*") {
+    return /^.*$/;
+  }
+  const source = escapeRegex(normalized).replace(/\\\*/g, ".*");
+  return new RegExp(`^${source}$`);
+}
+function matchesEventPattern(eventType, pattern) {
+  return eventPatternToRegExp(pattern).test(eventType.trim());
+}
+function matchesAnyEventPattern(eventType, patterns) {
+  if (patterns.length === 0) {
+    return true;
+  }
+  return patterns.some((pattern) => matchesEventPattern(eventType, pattern));
+}
+function toBase64(value) {
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(value, "utf8").toString("base64url");
+  }
+  return btoa(unescape(encodeURIComponent(value))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+function fromBase64(value) {
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(value, "base64url").toString("utf8");
+  }
+  const normalized = value.replace(/-/g, "+").replace(/_/g, "/");
+  return decodeURIComponent(escape(atob(normalized)));
+}
+function createEventId() {
+  const random = typeof globalThis.crypto?.randomUUID === "function" ? globalThis.crypto.randomUUID().replace(/-/g, "") : Array.from(
+    typeof globalThis.crypto?.getRandomValues === "function" ? globalThis.crypto.getRandomValues(new Uint8Array(16)) : Array.from({ length: 16 }, () => Math.floor(Math.random() * 256)),
+    (value) => value.toString(16).padStart(2, "0")
+  ).join("");
+  return `evt_${random}`;
+}
+function normalizeRetentionDays(value) {
+  if (!Number.isFinite(value) || typeof value !== "number" || value <= 0) {
+    return EVENT_RETENTION_DEFAULT_DAYS;
+  }
+  return Math.max(1, Math.trunc(value));
+}
+function buildDomainEvent(input) {
+  const timestamp = input.timestamp ?? Date.now();
+  const retentionDays = normalizeRetentionDays(input.retentionDays);
+  return {
+    eventId: input.eventId?.trim() || createEventId(),
+    type: input.type.trim(),
+    version: DOMAIN_EVENT_VERSION,
+    timestamp,
+    tenantId: input.tenantId?.trim() || void 0,
+    workspaceId: input.workspaceId?.trim() || void 0,
+    topicId: input.topicId.trim(),
+    resourceId: input.resourceId.trim(),
+    resourceType: input.resourceType.trim(),
+    actorId: input.actorId.trim(),
+    actorType: input.actorType,
+    data: input.data ?? {},
+    correlationId: input.correlationId?.trim() || void 0,
+    expiresAt: timestamp + retentionDays * 24 * 60 * 60 * 1e3
+  };
+}
+function compareEventCursor(left, right) {
+  if (left.timestamp !== right.timestamp) {
+    return left.timestamp - right.timestamp;
+  }
+  return left.eventId.localeCompare(right.eventId);
+}
+function encodeEventCursor(cursor) {
+  return toBase64(JSON.stringify(cursor));
+}
+function decodeEventCursor(cursor) {
+  if (!cursor || cursor.trim().length === 0) {
+    return null;
+  }
+  try {
+    const parsed = JSON.parse(fromBase64(cursor.trim()));
+    if (typeof parsed.timestamp !== "number" || !Number.isFinite(parsed.timestamp) || typeof parsed.eventId !== "string" || parsed.eventId.trim().length === 0) {
+      return null;
+    }
+    return {
+      timestamp: parsed.timestamp,
+      eventId: parsed.eventId.trim()
+    };
+  } catch {
+    return null;
+  }
+}
+function isAfterCursor(event, cursor) {
+  if (!cursor) {
+    return true;
+  }
+  return compareEventCursor(event, cursor) > 0;
+}
+function sortEventsByCursor(events) {
+  return [...events].sort((left, right) => compareEventCursor(left, right));
+}
+function inferActorType(args) {
+  if (args.sessionType === "agent") {
+    return "agent";
+  }
+  if (args.authMode === "service_principal" || args.authMode === "tenant_api_key" || args.principalType === "service") {
+    return "service";
+  }
+  return "human";
+}
+async function emitDomainEvent(invokeMutation, input) {
+  return await invokeMutation("events:recordEvent", input);
+}
+var LOCALHOST_HOSTS = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1"]);
+function normalizeUrl(url) {
+  try {
+    return new URL(url.trim());
+  } catch {
+    throw new Error("Webhook URL must be a valid absolute URL.");
+  }
+}
+function assertValidWebhookUrl(url) {
+  const parsed = normalizeUrl(url);
+  const hostname = parsed.hostname.trim().toLowerCase();
+  const nodeEnv = typeof process !== "undefined" ? process.env?.NODE_ENV : void 0;
+  const allowLocalHttp = nodeEnv === "test" || LOCALHOST_HOSTS.has(hostname);
+  if (parsed.protocol !== "https:" && !(allowLocalHttp && parsed.protocol === "http:")) {
+    throw new Error("Webhook URL must use HTTPS.");
+  }
+  return parsed.toString();
+}
+function normalizeWebhookPatterns(patterns) {
+  const normalized = Array.from(
+    new Set(
+      patterns.map((pattern) => pattern.trim()).filter((pattern) => pattern.length > 0)
+    )
+  );
+  if (normalized.length === 0) {
+    throw new Error("At least one webhook event pattern is required.");
+  }
+  return normalized;
+}
+function assertValidWebhookSecret(secret) {
+  const normalized = secret.trim();
+  if (normalized.length < 8) {
+    throw new Error("Webhook secret must be at least 8 characters.");
+  }
+  return normalized;
+}
+async function computeWebhookSignature(payload, secret) {
+  const encoder = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(payload));
+  return Array.from(new Uint8Array(signature)).map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function nextDeliveryAttemptAt(currentAttemptCount, now = Date.now()) {
+  if (currentAttemptCount >= WEBHOOK_MAX_ATTEMPTS) {
+    return void 0;
+  }
+  const retryIndex = currentAttemptCount - 1;
+  const delay = WEBHOOK_RETRY_DELAYS_MS[retryIndex];
+  return typeof delay === "number" ? now + delay : void 0;
+}
+function resolveDeliveryFailureStatus(attemptCount) {
+  return attemptCount >= WEBHOOK_MAX_ATTEMPTS ? "dead_letter" : "failed";
+}
+function sanitizeWebhookRecord(value) {
+  return {
+    id: String(value.id ?? value.webhookId ?? value._id ?? ""),
+    webhookId: String(value.webhookId ?? value.id ?? value._id ?? ""),
+    tenantId: typeof value.tenantId === "string" && value.tenantId.trim().length > 0 ? value.tenantId : void 0,
+    workspaceId: typeof value.workspaceId === "string" && value.workspaceId.trim().length > 0 ? value.workspaceId : void 0,
+    topicId: typeof value.topicId === "string" && value.topicId.trim().length > 0 ? value.topicId : void 0,
+    url: String(value.url ?? ""),
+    events: Array.isArray(value.events) ? value.events.map((entry) => typeof entry === "string" ? entry.trim() : "").filter(Boolean) : [],
+    active: value.active !== false,
+    secretConfigured: true,
+    createdAt: Number(value.createdAt ?? Date.now()),
+    updatedAt: Number(value.updatedAt ?? value.createdAt ?? Date.now()),
+    createdBy: String(value.createdBy ?? ""),
+    updatedBy: String(value.updatedBy ?? value.createdBy ?? ""),
+    lastDeliveryAt: typeof value.lastDeliveryAt === "number" ? value.lastDeliveryAt : void 0,
+    lastSuccessfulDeliveryAt: typeof value.lastSuccessfulDeliveryAt === "number" ? value.lastSuccessfulDeliveryAt : void 0
+  };
+}
+function truncateWebhookResponseBody(responseBody, maxLength = 2e3) {
+  if (!responseBody) {
+    return void 0;
+  }
+  if (responseBody.length <= maxLength) {
+    return responseBody;
+  }
+  return `${responseBody.slice(0, maxLength - 3)}...`;
+}
+
+export { DOMAIN_EVENT_TYPES, DOMAIN_EVENT_VERSION, EVENT_RETENTION_DEFAULT_DAYS, WEBHOOK_MAX_ATTEMPTS, WEBHOOK_RETRY_DELAYS_MS, assertValidWebhookSecret, assertValidWebhookUrl, buildDomainEvent, compareEventCursor, computeWebhookSignature, createEventId, decodeEventCursor, emitDomainEvent, encodeEventCursor, eventPatternToRegExp, inferActorType, isAfterCursor, matchesAnyEventPattern, matchesEventPattern, nextDeliveryAttemptAt, normalizeRetentionDays, normalizeWebhookPatterns, resolveDeliveryFailureStatus, sanitizeWebhookRecord, sortEventsByCursor, truncateWebhookResponseBody };
+//# sourceMappingURL=events.js.map
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/events.ts"],"names":[],"mappings":";AAAO,IAAM,oBAAA,GAAuB;AAC7B,IAAM,4BAAA,GAA+B;AACrC,IAAM,oBAAA,GAAuB;AAC7B,IAAM,uBAAA,GAA0B,CAAC,GAAA,EAAO,GAAA,EAAO,KAAQ,GAAO;AAE9D,IAAM,kBAAA,GAAqB;AAAA,EAChC,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,gBAAA;AAAA,EACA,yBAAA;AAAA,EACA,2BAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA,0BAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,mBAAA;AAAA,EACA,cAAA;AAAA,EACA,uBAAA;AAAA,EACA,kBAAA;AAAA,EACA,oBAAA;AAAA,EACA,iBAAA;AAAA,EACA,0BAAA;AAAA,EACA,2BAAA;AAAA,EACA,eAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,kBAAA;AAAA,EACA,sBAAA;AAAA,EACA,sBAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF;AA2LA,SAAS,YAAY,KAAA,EAAuB;AAC1C,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AACpD;AAEO,SAAS,qBAAqB,OAAA,EAAyB;AAC5D,EAAA,MAAM,UAAA,GAAa,QAAQ,IAAA,EAAK;AAChC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,eAAe,GAAA,EAAK;AACtB,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAS,WAAA,CAAY,UAAU,CAAA,CAAE,OAAA,CAAQ,SAAS,IAAI,CAAA;AAC5D,EAAA,OAAO,IAAI,MAAA,CAAO,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,CAAG,CAAA;AACjC;AAEO,SAAS,mBAAA,CACd,WACA,OAAA,EACS;AACT,EAAA,OAAO,qBAAqB,OAAO,CAAA,CAAE,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAC5D;AAEO,SAAS,sBAAA,CACd,WACA,QAAA,EACS;AACT,EAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,SAAS,IAAA,CAAK,CAAC,YAAY,mBAAA,CAAoB,SAAA,EAAW,OAAO,CAAC,CAAA;AAC3E;AAEA,SAAS,SAAS,KAAA,EAAuB;AACvC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,OAAO,IAAA,CAAK,KAAA,EAAO,MAAM,CAAA,CAAE,SAAS,WAAW,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,KAAK,QAAA,CAAS,kBAAA,CAAmB,KAAK,CAAC,CAAC,CAAA,CAC5C,OAAA,CAAQ,KAAA,EAAO,GAAG,EAClB,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAClB,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACvB;AAEA,SAAS,WAAW,KAAA,EAAuB;AACzC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,OAAO,IAAA,CAAK,KAAA,EAAO,WAAW,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,EACxD;AACA,EAAA,MAAM,UAAA,GAAa,MAAM,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,GAAG,CAAA;AAC7D,EAAA,OAAO,kBAAA,CAAmB,MAAA,CAAO,IAAA,CAAK,UAAU,CAAC,CAAC,CAAA;AACpD;AAEO,SAAS,aAAA,GAAwB;AACtC,EAAA,MAAM,MAAA,GACJ,OAAO,UAAA,CAAW,MAAA,EAAQ,eAAe,UAAA,GACrC,UAAA,CAAW,MAAA,CAAO,UAAA,EAAW,CAAE,OAAA,CAAQ,IAAA,EAAM,EAAE,IAC/C,KAAA,CAAM,IAAA;AAAA,IACJ,OAAO,UAAA,CAAW,MAAA,EAAQ,eAAA,KAAoB,UAAA,GAC1C,UAAA,CAAW,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA,GACpD,MAAM,IAAA,CAAK,EAAE,MAAA,EAAQ,EAAA,EAAG,EAAG,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,EAAO,GAAI,GAAG,CAAC,CAAA;AAAA,IACpE,CAAC,UAAU,KAAA,CAAM,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG;AAAA,GAC/C,CAAE,KAAK,EAAE,CAAA;AACf,EAAA,OAAO,OAAO,MAAM,CAAA,CAAA;AACtB;AAEO,SAAS,uBAAuB,KAAA,EAAmC;AACxE,EAAA,IAAI,CAAC,OAAO,QAAA,CAAS,KAAK,KAAK,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,IAAS,CAAA,EAAG;AACtE,IAAA,OAAO,4BAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAA;AACtC;AAEO,SAAS,iBAAiB,KAAA,EAA4C;AAC3E,EAAA,MAAM,SAAA,GAAY,KAAA,CAAM,SAAA,IAAa,IAAA,CAAK,GAAA,EAAI;AAC9C,EAAA,MAAM,aAAA,GAAgB,sBAAA,CAAuB,KAAA,CAAM,aAAa,CAAA;AAChE,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA,CAAM,OAAA,EAAS,IAAA,MAAU,aAAA,EAAc;AAAA,IAChD,IAAA,EAAM,KAAA,CAAM,IAAA,CAAK,IAAA,EAAK;AAAA,IACtB,OAAA,EAAS,oBAAA;AAAA,IACT,SAAA;AAAA,IACA,QAAA,EAAU,KAAA,CAAM,QAAA,EAAU,IAAA,EAAK,IAAK,MAAA;AAAA,IACpC,WAAA,EAAa,KAAA,CAAM,WAAA,EAAa,IAAA,EAAK,IAAK,MAAA;AAAA,IAC1C,OAAA,EAAS,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAK;AAAA,IAC5B,UAAA,EAAY,KAAA,CAAM,UAAA,CAAW,IAAA,EAAK;AAAA,IAClC,YAAA,EAAc,KAAA,CAAM,YAAA,CAAa,IAAA,EAAK;AAAA,IACtC,OAAA,EAAS,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAK;AAAA,IAC5B,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,IAAA,EAAM,KAAA,CAAM,IAAA,IAAQ,EAAC;AAAA,IACrB,aAAA,EAAe,KAAA,CAAM,aAAA,EAAe,IAAA,EAAK,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,SAAA,GAAY,aAAA,GAAgB,EAAA,GAAK,KAAK,EAAA,GAAK;AAAA,GACxD;AACF;AAEO,SAAS,kBAAA,CAAmB,MAAmB,KAAA,EAA4B;AAChF,EAAA,IAAI,IAAA,CAAK,SAAA,KAAc,KAAA,CAAM,SAAA,EAAW;AACtC,IAAA,OAAO,IAAA,CAAK,YAAY,KAAA,CAAM,SAAA;AAAA,EAChC;AACA,EAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,aAAA,CAAc,KAAA,CAAM,OAAO,CAAA;AACjD;AAEO,SAAS,kBAAkB,MAAA,EAA6B;AAC7D,EAAA,OAAO,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AACxC;AAEO,SAAS,kBAAkB,MAAA,EAAgD;AAChF,EAAA,IAAI,CAAC,MAAA,IAAU,MAAA,CAAO,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AACzC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI;AACF,IAAA,MAAM,SAAS,IAAA,CAAK,KAAA,CAAM,WAAW,MAAA,CAAO,IAAA,EAAM,CAAC,CAAA;AACnD,IAAA,IACE,OAAO,MAAA,CAAO,SAAA,KAAc,YAC5B,CAAC,MAAA,CAAO,SAAS,MAAA,CAAO,SAAS,KACjC,OAAO,MAAA,CAAO,YAAY,QAAA,IAC1B,MAAA,CAAO,QAAQ,IAAA,EAAK,CAAE,WAAW,CAAA,EACjC;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,OAAO;AAAA,MACL,WAAW,MAAA,CAAO,SAAA;AAAA,MAClB,OAAA,EAAS,MAAA,CAAO,OAAA,CAAQ,IAAA;AAAK,KAC/B;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEO,SAAS,aAAA,CACd,OACA,MAAA,EACS;AACT,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,kBAAA,CAAmB,KAAA,EAAO,MAAM,CAAA,GAAI,CAAA;AAC7C;AAEO,SAAS,mBACd,MAAA,EACK;AACL,EAAA,OAAO,CAAC,GAAG,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,IAAA,EAAM,KAAA,KAAU,kBAAA,CAAmB,IAAA,EAAM,KAAK,CAAC,CAAA;AAC1E;AAEO,SAAS,eAAe,IAAA,EAIX;AAClB,EAAA,IAAI,IAAA,CAAK,gBAAgB,OAAA,EAAS;AAChC,IAAA,OAAO,OAAA;AAAA,EACT;AACA,EAAA,IACE,IAAA,CAAK,aAAa,mBAAA,IAClB,IAAA,CAAK,aAAa,gBAAA,IAClB,IAAA,CAAK,kBAAkB,SAAA,EACvB;AACA,IAAA,OAAO,SAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAA;AACT;AAEA,eAAsB,eAAA,CACpB,gBACA,KAAA,EACkB;AAClB,EAAA,OAAO,MAAM,cAAA,CAAe,oBAAA,EAA6B,KAAK,CAAA;AAChE;AAEA,IAAM,kCAAkB,IAAI,GAAA,CAAI,CAAC,WAAA,EAAa,WAAA,EAAa,KAAK,CAAC,CAAA;AAEjE,SAAS,aAAa,GAAA,EAAkB;AACtC,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,CAAA;AAAA,EAC3B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,EAC7D;AACF;AAEO,SAAS,sBAAsB,GAAA,EAAqB;AACzD,EAAA,MAAM,MAAA,GAAS,aAAa,GAAG,CAAA;AAC/B,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,WAAA,EAAY;AACpD,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GAAc,OAAA,CAAQ,KAAK,QAAA,GAAW,MAAA;AAC3D,EAAA,MAAM,cAAA,GACJ,OAAA,KAAY,MAAA,IAAU,eAAA,CAAgB,IAAI,QAAQ,CAAA;AAEpD,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,EAAE,cAAA,IAAkB,MAAA,CAAO,aAAa,OAAA,CAAA,EAAU;AACpF,IAAA,MAAM,IAAI,MAAM,6BAA6B,CAAA;AAAA,EAC/C;AAEA,EAAA,OAAO,OAAO,QAAA,EAAS;AACzB;AAEO,SAAS,yBAAyB,QAAA,EAAuC;AAC9E,EAAA,MAAM,aAAa,KAAA,CAAM,IAAA;AAAA,IACvB,IAAI,GAAA;AAAA,MACF,QAAA,CACG,GAAA,CAAI,CAAC,OAAA,KAAY,OAAA,CAAQ,IAAA,EAAM,CAAA,CAC/B,MAAA,CAAO,CAAC,OAAA,KAAY,OAAA,CAAQ,SAAS,CAAC;AAAA;AAC3C,GACF;AAEA,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,EACnE;AAEA,EAAA,OAAO,UAAA;AACT;AAEO,SAAS,yBAAyB,MAAA,EAAwB;AAC/D,EAAA,MAAM,UAAA,GAAa,OAAO,IAAA,EAAK;AAC/B,EAAA,IAAI,UAAA,CAAW,SAAS,CAAA,EAAG;AACzB,IAAA,MAAM,IAAI,MAAM,+CAA+C,CAAA;AAAA,EACjE;AACA,EAAA,OAAO,UAAA;AACT;AAEA,eAAsB,uBAAA,CACpB,SACA,MAAA,EACiB;AACjB,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,IAC9B,KAAA;AAAA,IACA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,IACrB,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,GAAA,EAAK,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAC,CAAA;AAC/E,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,UAAA,CAAW,SAAS,CAAC,CAAA,CACxC,IAAI,CAAC,IAAA,KAAS,KAAK,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAChD,KAAK,EAAE,CAAA;AACZ;AAEO,SAAS,qBAAA,CACd,mBAAA,EACA,GAAA,GAAM,IAAA,CAAK,KAAI,EACK;AACpB,EAAA,IAAI,uBAAuB,oBAAA,EAAsB;AAC/C,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,aAAa,mBAAA,GAAsB,CAAA;AACzC,EAAA,MAAM,KAAA,GAAQ,wBAAwB,UAAU,CAAA;AAChD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,GAAA,GAAM,KAAA,GAAQ,MAAA;AACnD;AAEO,SAAS,6BACd,YAAA,EACuB;AACvB,EAAA,OAAO,YAAA,IAAgB,uBAAuB,aAAA,GAAgB,QAAA;AAChE;AAEO,SAAS,sBACd,KAAA,EACe;AACf,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,OAAO,KAAA,CAAM,EAAA,IAAM,MAAM,SAAA,IAAa,KAAA,CAAM,OAAO,EAAE,CAAA;AAAA,IACzD,SAAA,EAAW,OAAO,KAAA,CAAM,SAAA,IAAa,MAAM,EAAA,IAAM,KAAA,CAAM,OAAO,EAAE,CAAA;AAAA,IAChE,QAAA,EACE,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,IAAY,KAAA,CAAM,QAAA,CAAS,IAAA,EAAK,CAAE,MAAA,GAAS,CAAA,GACjE,KAAA,CAAM,QAAA,GACN,MAAA;AAAA,IACN,WAAA,EACE,OAAO,KAAA,CAAM,WAAA,KAAgB,QAAA,IAAY,KAAA,CAAM,WAAA,CAAY,IAAA,EAAK,CAAE,MAAA,GAAS,CAAA,GACvE,KAAA,CAAM,WAAA,GACN,MAAA;AAAA,IACN,OAAA,EACE,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,IAAY,KAAA,CAAM,OAAA,CAAQ,IAAA,EAAK,CAAE,MAAA,GAAS,CAAA,GAC/D,KAAA,CAAM,OAAA,GACN,MAAA;AAAA,IACN,GAAA,EAAK,MAAA,CAAO,KAAA,CAAM,GAAA,IAAO,EAAE,CAAA;AAAA,IAC3B,MAAA,EAAQ,MAAM,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA,GAC9B,KAAA,CAAM,MAAA,CACH,GAAA,CAAI,CAAC,KAAA,KAAW,OAAO,KAAA,KAAU,QAAA,GAAW,MAAM,IAAA,EAAK,GAAI,EAAG,CAAA,CAC9D,MAAA,CAAO,OAAO,CAAA,GACjB,EAAC;AAAA,IACL,MAAA,EAAQ,MAAM,MAAA,KAAW,KAAA;AAAA,IACzB,gBAAA,EAAkB,IAAA;AAAA,IAClB,WAAW,MAAA,CAAO,KAAA,CAAM,SAAA,IAAa,IAAA,CAAK,KAAK,CAAA;AAAA,IAC/C,SAAA,EAAW,OAAO,KAAA,CAAM,SAAA,IAAa,MAAM,SAAA,IAAa,IAAA,CAAK,KAAK,CAAA;AAAA,IAClE,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,SAAA,IAAa,EAAE,CAAA;AAAA,IACvC,WAAW,MAAA,CAAO,KAAA,CAAM,SAAA,IAAa,KAAA,CAAM,aAAa,EAAE,CAAA;AAAA,IAC1D,gBACE,OAAO,KAAA,CAAM,cAAA,KAAmB,QAAA,GAAW,MAAM,cAAA,GAAiB,MAAA;AAAA,IACpE,0BACE,OAAO,KAAA,CAAM,wBAAA,KAA6B,QAAA,GACtC,MAAM,wBAAA,GACN;AAAA,GACR;AACF;AAEO,SAAS,2BAAA,CACd,YAAA,EACA,SAAA,GAAY,GAAA,EACQ;AACpB,EAAA,IAAI,CAAC,YAAA,EAAc;AACjB,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,YAAA,CAAa,UAAU,SAAA,EAAW;AACpC,IAAA,OAAO,YAAA;AAAA,EACT;AACA,EAAA,OAAO,GAAG,YAAA,CAAa,KAAA,CAAM,CAAA,EAAG,SAAA,GAAY,CAAC,CAAC,CAAA,GAAA,CAAA;AAChD","file":"events.js","sourcesContent":["export const DOMAIN_EVENT_VERSION = \"1.0\" as const;\nexport const EVENT_RETENTION_DEFAULT_DAYS = 30;\nexport const WEBHOOK_MAX_ATTEMPTS = 5;\nexport const WEBHOOK_RETRY_DELAYS_MS = [1_000, 5_000, 30_000, 300_000] as const;\n\nexport const DOMAIN_EVENT_TYPES = [\n  \"belief.created\",\n  \"belief.forked\",\n  \"belief.confidence_updated\",\n  \"belief.archived\",\n  \"belief.refined\",\n  \"belief.contract_created\",\n  \"belief.contract_evaluated\",\n  \"belief.lineage_queried\",\n  \"evidence.created\",\n  \"evidence.linked\",\n  \"evidence.search_executed\",\n  \"question.created\",\n  \"question.answered\",\n  \"question.refined\",\n  \"question.status_updated\",\n  \"question.archived\",\n  \"edge.created\",\n  \"contradiction.flagged\",\n  \"worktree.created\",\n  \"worktree.activated\",\n  \"worktree.merged\",\n  \"worktree.targets_updated\",\n  \"worktree.metadata_updated\",\n  \"topic.created\",\n  \"topic.updated\",\n  \"topic.archived\",\n  \"task.created\",\n  \"task.completed\",\n  \"task.updated\",\n  \"ontology.bound\",\n  \"context.compiled\",\n  \"identity.key_created\",\n  \"identity.key_rotated\",\n  \"identity.key_revoked\",\n  \"webhook.test\",\n] as const;\n\nexport type DomainEventType = (typeof DOMAIN_EVENT_TYPES)[number];\n\nexport type DomainResourceType =\n  | \"belief\"\n  | \"evidence\"\n  | \"question\"\n  | \"edge\"\n  | \"contradiction\"\n  | \"worktree\"\n  | \"topic\"\n  | \"task\"\n  | \"ontology\"\n  | \"context\"\n  | \"identity\"\n  | \"webhook\";\n\nexport type DomainActorType = \"human\" | \"agent\" | \"service\";\nexport type DomainEventData = Record<string, unknown>;\n\nexport type DomainEvent = {\n  eventId: string;\n  type: DomainEventType | string;\n  version: typeof DOMAIN_EVENT_VERSION;\n  timestamp: number;\n  tenantId?: string;\n  workspaceId?: string;\n  topicId: string;\n  resourceId: string;\n  resourceType: DomainResourceType | string;\n  actorId: string;\n  actorType: DomainActorType;\n  data: DomainEventData;\n  correlationId?: string;\n  expiresAt: number;\n};\n\nexport type CreateDomainEventInput = {\n  eventId?: string;\n  timestamp?: number;\n  tenantId?: string;\n  workspaceId?: string;\n  topicId: string;\n  type: DomainEventType | string;\n  resourceId: string;\n  resourceType: DomainResourceType | string;\n  actorId: string;\n  actorType: DomainActorType;\n  data?: DomainEventData;\n  correlationId?: string;\n  retentionDays?: number;\n};\n\nexport type EventCursor = {\n  timestamp: number;\n  eventId: string;\n};\n\nexport type EventListQuery = {\n  topicId?: string;\n  after?: string;\n  types?: string[];\n  startTime?: number;\n  endTime?: number;\n  limit?: number;\n};\n\nexport type EventListResult = {\n  events: DomainEvent[];\n  nextCursor: string | null;\n};\n\nexport type WebhookSecretMode = \"configured\";\n\nexport type WebhookRecord = {\n  id: string;\n  webhookId: string;\n  tenantId?: string;\n  workspaceId?: string;\n  topicId?: string;\n  url: string;\n  events: string[];\n  active: boolean;\n  secretConfigured: boolean;\n  createdAt: number;\n  updatedAt: number;\n  createdBy: string;\n  updatedBy: string;\n  lastDeliveryAt?: number;\n  lastSuccessfulDeliveryAt?: number;\n};\n\nexport type WebhookCreateInput = {\n  url: string;\n  events: string[];\n  secret: string;\n  topicId?: string;\n  active?: boolean;\n};\n\nexport type WebhookUpdateInput = {\n  url?: string;\n  events?: string[];\n  secret?: string;\n  topicId?: string | null;\n  active?: boolean;\n};\n\nexport type WebhookDeliveryStatus =\n  | \"pending\"\n  | \"delivering\"\n  | \"succeeded\"\n  | \"failed\"\n  | \"dead_letter\";\n\nexport type WebhookDeliveryRecord = {\n  id: string;\n  deliveryId: string;\n  webhookId: string;\n  eventId: string;\n  eventType: string;\n  topicId: string;\n  status: WebhookDeliveryStatus;\n  attemptCount: number;\n  maxAttempts: number;\n  nextAttemptAt?: number;\n  lastAttemptAt?: number;\n  lastStatusCode?: number;\n  lastError?: string;\n  deliveredAt?: number;\n  createdAt: number;\n  updatedAt: number;\n};\n\nexport type WebhookDeliveryAttemptRecord = {\n  id: string;\n  attemptId: string;\n  deliveryId: string;\n  webhookId: string;\n  eventId: string;\n  eventType: string;\n  attemptNumber: number;\n  status: \"succeeded\" | \"failed\";\n  statusCode?: number;\n  error?: string;\n  responseBody?: string;\n  durationMs?: number;\n  createdAt: number;\n};\n\nexport type WebhookDeliveriesResult = {\n  deliveries: Array<\n    WebhookDeliveryRecord & {\n      attempts?: WebhookDeliveryAttemptRecord[];\n    }\n  >;\n};\n\nexport type WebhookHealthResult = {\n  webhookId: string;\n  totalAttempts: number;\n  successfulAttempts: number;\n  failedAttempts: number;\n  successRate: number;\n  pendingDeliveries: number;\n  deadLetterDeliveries: number;\n  lastDeliveryAt?: number;\n  lastSuccessfulDeliveryAt?: number;\n};\n\nexport type WebhookTestResult = {\n  webhookId: string;\n  deliveryId: string;\n  status: WebhookDeliveryStatus;\n  attempts: number;\n};\n\nexport type ReplayEventsInput = EventListQuery & {\n  webhookId?: string;\n};\n\nexport type ReplayEventsResult = EventListResult & {\n  replayedDeliveries?: number;\n  replayedWebhookId?: string;\n};\n\nfunction escapeRegex(value: string): string {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\nexport function eventPatternToRegExp(pattern: string): RegExp {\n  const normalized = pattern.trim();\n  if (!normalized) {\n    return /^$/;\n  }\n  if (normalized === \"*\") {\n    return /^.*$/;\n  }\n  const source = escapeRegex(normalized).replace(/\\\\\\*/g, \".*\");\n  return new RegExp(`^${source}$`);\n}\n\nexport function matchesEventPattern(\n  eventType: string,\n  pattern: string\n): boolean {\n  return eventPatternToRegExp(pattern).test(eventType.trim());\n}\n\nexport function matchesAnyEventPattern(\n  eventType: string,\n  patterns: readonly string[]\n): boolean {\n  if (patterns.length === 0) {\n    return true;\n  }\n  return patterns.some((pattern) => matchesEventPattern(eventType, pattern));\n}\n\nfunction toBase64(value: string): string {\n  if (typeof Buffer !== \"undefined\") {\n    return Buffer.from(value, \"utf8\").toString(\"base64url\");\n  }\n  return btoa(unescape(encodeURIComponent(value)))\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/g, \"\");\n}\n\nfunction fromBase64(value: string): string {\n  if (typeof Buffer !== \"undefined\") {\n    return Buffer.from(value, \"base64url\").toString(\"utf8\");\n  }\n  const normalized = value.replace(/-/g, \"+\").replace(/_/g, \"/\");\n  return decodeURIComponent(escape(atob(normalized)));\n}\n\nexport function createEventId(): string {\n  const random =\n    typeof globalThis.crypto?.randomUUID === \"function\"\n      ? globalThis.crypto.randomUUID().replace(/-/g, \"\")\n      : Array.from(\n          typeof globalThis.crypto?.getRandomValues === \"function\"\n            ? globalThis.crypto.getRandomValues(new Uint8Array(16))\n            : Array.from({ length: 16 }, () => Math.floor(Math.random() * 256)),\n          (value) => value.toString(16).padStart(2, \"0\")\n        ).join(\"\");\n  return `evt_${random}`;\n}\n\nexport function normalizeRetentionDays(value: number | undefined): number {\n  if (!Number.isFinite(value) || typeof value !== \"number\" || value <= 0) {\n    return EVENT_RETENTION_DEFAULT_DAYS;\n  }\n  return Math.max(1, Math.trunc(value));\n}\n\nexport function buildDomainEvent(input: CreateDomainEventInput): DomainEvent {\n  const timestamp = input.timestamp ?? Date.now();\n  const retentionDays = normalizeRetentionDays(input.retentionDays);\n  return {\n    eventId: input.eventId?.trim() || createEventId(),\n    type: input.type.trim(),\n    version: DOMAIN_EVENT_VERSION,\n    timestamp,\n    tenantId: input.tenantId?.trim() || undefined,\n    workspaceId: input.workspaceId?.trim() || undefined,\n    topicId: input.topicId.trim(),\n    resourceId: input.resourceId.trim(),\n    resourceType: input.resourceType.trim(),\n    actorId: input.actorId.trim(),\n    actorType: input.actorType,\n    data: input.data ?? {},\n    correlationId: input.correlationId?.trim() || undefined,\n    expiresAt: timestamp + retentionDays * 24 * 60 * 60 * 1000,\n  };\n}\n\nexport function compareEventCursor(left: EventCursor, right: EventCursor): number {\n  if (left.timestamp !== right.timestamp) {\n    return left.timestamp - right.timestamp;\n  }\n  return left.eventId.localeCompare(right.eventId);\n}\n\nexport function encodeEventCursor(cursor: EventCursor): string {\n  return toBase64(JSON.stringify(cursor));\n}\n\nexport function decodeEventCursor(cursor: string | undefined): EventCursor | null {\n  if (!cursor || cursor.trim().length === 0) {\n    return null;\n  }\n  try {\n    const parsed = JSON.parse(fromBase64(cursor.trim())) as Partial<EventCursor>;\n    if (\n      typeof parsed.timestamp !== \"number\" ||\n      !Number.isFinite(parsed.timestamp) ||\n      typeof parsed.eventId !== \"string\" ||\n      parsed.eventId.trim().length === 0\n    ) {\n      return null;\n    }\n    return {\n      timestamp: parsed.timestamp,\n      eventId: parsed.eventId.trim(),\n    };\n  } catch {\n    return null;\n  }\n}\n\nexport function isAfterCursor(\n  event: Pick<DomainEvent, \"timestamp\" | \"eventId\">,\n  cursor: EventCursor | null\n): boolean {\n  if (!cursor) {\n    return true;\n  }\n  return compareEventCursor(event, cursor) > 0;\n}\n\nexport function sortEventsByCursor<T extends Pick<DomainEvent, \"timestamp\" | \"eventId\">>(\n  events: readonly T[]\n): T[] {\n  return [...events].sort((left, right) => compareEventCursor(left, right));\n}\n\nexport function inferActorType(args: {\n  sessionType?: \"agent\" | \"user\";\n  authMode?: string;\n  principalType?: string;\n}): DomainActorType {\n  if (args.sessionType === \"agent\") {\n    return \"agent\";\n  }\n  if (\n    args.authMode === \"service_principal\" ||\n    args.authMode === \"tenant_api_key\" ||\n    args.principalType === \"service\"\n  ) {\n    return \"service\";\n  }\n  return \"human\";\n}\n\nexport async function emitDomainEvent(\n  invokeMutation: (reference: any, args: CreateDomainEventInput) => Promise<unknown>,\n  input: CreateDomainEventInput\n): Promise<unknown> {\n  return await invokeMutation(\"events:recordEvent\" as any, input);\n}\n\nconst LOCALHOST_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"::1\"]);\n\nfunction normalizeUrl(url: string): URL {\n  try {\n    return new URL(url.trim());\n  } catch {\n    throw new Error(\"Webhook URL must be a valid absolute URL.\");\n  }\n}\n\nexport function assertValidWebhookUrl(url: string): string {\n  const parsed = normalizeUrl(url);\n  const hostname = parsed.hostname.trim().toLowerCase();\n  const nodeEnv =\n    typeof process !== \"undefined\" ? process.env?.NODE_ENV : undefined;\n  const allowLocalHttp =\n    nodeEnv === \"test\" || LOCALHOST_HOSTS.has(hostname);\n\n  if (parsed.protocol !== \"https:\" && !(allowLocalHttp && parsed.protocol === \"http:\")) {\n    throw new Error(\"Webhook URL must use HTTPS.\");\n  }\n\n  return parsed.toString();\n}\n\nexport function normalizeWebhookPatterns(patterns: readonly string[]): string[] {\n  const normalized = Array.from(\n    new Set(\n      patterns\n        .map((pattern) => pattern.trim())\n        .filter((pattern) => pattern.length > 0)\n    )\n  );\n\n  if (normalized.length === 0) {\n    throw new Error(\"At least one webhook event pattern is required.\");\n  }\n\n  return normalized;\n}\n\nexport function assertValidWebhookSecret(secret: string): string {\n  const normalized = secret.trim();\n  if (normalized.length < 8) {\n    throw new Error(\"Webhook secret must be at least 8 characters.\");\n  }\n  return normalized;\n}\n\nexport async function computeWebhookSignature(\n  payload: string,\n  secret: string\n): Promise<string> {\n  const encoder = new TextEncoder();\n  const key = await crypto.subtle.importKey(\n    \"raw\",\n    encoder.encode(secret),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"]\n  );\n  const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(payload));\n  return Array.from(new Uint8Array(signature))\n    .map((byte) => byte.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n}\n\nexport function nextDeliveryAttemptAt(\n  currentAttemptCount: number,\n  now = Date.now()\n): number | undefined {\n  if (currentAttemptCount >= WEBHOOK_MAX_ATTEMPTS) {\n    return undefined;\n  }\n  const retryIndex = currentAttemptCount - 1;\n  const delay = WEBHOOK_RETRY_DELAYS_MS[retryIndex];\n  return typeof delay === \"number\" ? now + delay : undefined;\n}\n\nexport function resolveDeliveryFailureStatus(\n  attemptCount: number\n): WebhookDeliveryStatus {\n  return attemptCount >= WEBHOOK_MAX_ATTEMPTS ? \"dead_letter\" : \"failed\";\n}\n\nexport function sanitizeWebhookRecord(\n  value: Record<string, unknown>\n): WebhookRecord {\n  return {\n    id: String(value.id ?? value.webhookId ?? value._id ?? \"\"),\n    webhookId: String(value.webhookId ?? value.id ?? value._id ?? \"\"),\n    tenantId:\n      typeof value.tenantId === \"string\" && value.tenantId.trim().length > 0\n        ? value.tenantId\n        : undefined,\n    workspaceId:\n      typeof value.workspaceId === \"string\" && value.workspaceId.trim().length > 0\n        ? value.workspaceId\n        : undefined,\n    topicId:\n      typeof value.topicId === \"string\" && value.topicId.trim().length > 0\n        ? value.topicId\n        : undefined,\n    url: String(value.url ?? \"\"),\n    events: Array.isArray(value.events)\n      ? value.events\n          .map((entry) => (typeof entry === \"string\" ? entry.trim() : \"\"))\n          .filter(Boolean)\n      : [],\n    active: value.active !== false,\n    secretConfigured: true,\n    createdAt: Number(value.createdAt ?? Date.now()),\n    updatedAt: Number(value.updatedAt ?? value.createdAt ?? Date.now()),\n    createdBy: String(value.createdBy ?? \"\"),\n    updatedBy: String(value.updatedBy ?? value.createdBy ?? \"\"),\n    lastDeliveryAt:\n      typeof value.lastDeliveryAt === \"number\" ? value.lastDeliveryAt : undefined,\n    lastSuccessfulDeliveryAt:\n      typeof value.lastSuccessfulDeliveryAt === \"number\"\n        ? value.lastSuccessfulDeliveryAt\n        : undefined,\n  };\n}\n\nexport function truncateWebhookResponseBody(\n  responseBody: string | undefined,\n  maxLength = 2_000\n): string | undefined {\n  if (!responseBody) {\n    return undefined;\n  }\n  if (responseBody.length <= maxLength) {\n    return responseBody;\n  }\n  return `${responseBody.slice(0, maxLength - 3)}...`;\n}\n"]}

package/dist/eventsCore.d.ts

@@ -0,0 +1,49 @@
+import { GatewayClientConfig, PlatformGatewaySuccess } from './coreClient.js';
+import { EventListResult, ReplayEventsResult, WebhookRecord, WebhookTestResult, WebhookDeliveriesResult, WebhookHealthResult, EventListQuery, ReplayEventsInput, WebhookCreateInput, WebhookUpdateInput } from './events.js';
+import './types.js';
+import './contracts/workflow-runtime.contract.js';
+import './contracts/lens-workflow.contract.js';
+import './contracts/lens-filter.contract.js';
+
+type EventsClientCoreConfig = GatewayClientConfig;
+type EventsListResponse = PlatformGatewaySuccess<EventListResult>;
+type EventsReplayResponse = PlatformGatewaySuccess<ReplayEventsResult>;
+type WebhooksClientCoreConfig = GatewayClientConfig;
+type WebhookListQuery = {
+    topicId?: string;
+};
+type WebhookDeliveriesQuery = {
+    limit?: number;
+};
+type WebhookDeleteResult = {
+    webhookId: string;
+    deleted: boolean;
+};
+type WebhooksCreateResponse = PlatformGatewaySuccess<WebhookRecord>;
+type WebhooksListResponse = PlatformGatewaySuccess<{
+    webhooks: WebhookRecord[];
+}>;
+type WebhooksGetResponse = PlatformGatewaySuccess<WebhookRecord>;
+type WebhooksUpdateResponse = PlatformGatewaySuccess<WebhookRecord>;
+type WebhooksDeleteResponse = PlatformGatewaySuccess<WebhookDeleteResult>;
+type WebhooksTestResponse = PlatformGatewaySuccess<WebhookTestResult>;
+type WebhooksDeliveriesResponse = PlatformGatewaySuccess<WebhookDeliveriesResult>;
+type WebhooksHealthResponse = PlatformGatewaySuccess<WebhookHealthResult>;
+declare function createEventsClientCore(config?: EventsClientCoreConfig): {
+    list(query?: EventListQuery): Promise<EventsListResponse>;
+    replay(input: ReplayEventsInput, idempotencyKey?: string): Promise<EventsReplayResponse>;
+};
+declare function createWebhooksClientCore(config?: WebhooksClientCoreConfig): {
+    create(input: WebhookCreateInput, idempotencyKey?: string): Promise<WebhooksCreateResponse>;
+    list(query?: WebhookListQuery): Promise<WebhooksListResponse>;
+    get(id: string): Promise<WebhooksGetResponse>;
+    update(id: string, input: WebhookUpdateInput, idempotencyKey?: string): Promise<WebhooksUpdateResponse>;
+    delete(id: string, idempotencyKey?: string): Promise<WebhooksDeleteResponse>;
+    test(id: string, input?: {
+        topicId?: string;
+    }, idempotencyKey?: string): Promise<WebhooksTestResponse>;
+    deliveries(id: string, query?: WebhookDeliveriesQuery): Promise<WebhooksDeliveriesResponse>;
+    health(id: string): Promise<WebhooksHealthResponse>;
+};
+
+export { type EventsClientCoreConfig, type EventsListResponse, type EventsReplayResponse, type WebhookDeleteResult, type WebhookDeliveriesQuery, type WebhookListQuery, type WebhooksClientCoreConfig, type WebhooksCreateResponse, type WebhooksDeleteResponse, type WebhooksDeliveriesResponse, type WebhooksGetResponse, type WebhooksHealthResponse, type WebhooksListResponse, type WebhooksTestResponse, type WebhooksUpdateResponse, createEventsClientCore, createWebhooksClientCore };