@marinoscar/platform-api 0.1.0-next.18 → 0.1.0-next.20

package/dist/webhooks/index.js

@@ -0,0 +1,147 @@
+"use strict";
+// `@marinoscar/platform-api/webhooks`: outbound, signed webhooks (issue #1046,
+// epic #1044). Endpoints for a member, an organization or the deployment; the
+// event registry and catalog; the egress (SSRF) guard; signing with the
+// credentials store; the `webhooks.deliver`, `webhooks.fanout` and
+// `webhooks.deliveries_purge` jobs; the domain-event bridges; the `webhook`
+// notification channel; and `/api/webhooks`, `/api/org/webhooks` and
+// `/api/admin/webhooks`. Documented in ./README.md. Explicit named exports only.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookDeliverHandler = exports.signedHeaders = exports.generateWebhookSecret = exports.nodeWebhookTransport = exports.WebhookTransportError = exports.WEBHOOKS_TRANSPORT = exports.WEBHOOKS_RESOLVER = exports.systemHostResolver = exports.resolveWebhookTarget = exports.parseWebhookUrl = exports.hostForLog = exports.WebhookEgressError = exports.WebhookEndpointsService = exports.eventGroupOf = exports.buildEnvelope = exports.WebhooksService = exports.registerBuiltinWebhookEvents = exports.WEBHOOK_PING_EVENT_KEY = exports.NODE_OFFLINE_WEBHOOK_EVENT_KEY = exports.NODE_EVENT_WEBHOOK_EVENT_KEY = exports.JOB_FAILED_WEBHOOK_EVENT_KEY = exports.BUILTIN_WEBHOOK_EVENTS = exports.subscribableEvents = exports.resolveWebhookEvent = exports.catalogFor = exports.allWebhookEvents = exports.webhookEventsForScope = exports.webhookEventRegistry = exports.subscriptionMatches = exports.registerWebhookEvent = exports.patternHasEventsForScope = exports.isSubscribed = exports.findWebhookEvent = exports.registerWebhooksSystemAccessReason = exports.WEBHOOKS_SYSTEM_ACCESS_REASON = exports.WEBHOOK_SIGNING_PURPOSE = exports.WEBHOOK_RETRY_SCHEDULE_MS = exports.WEBHOOK_PURGE_JOB_TYPE = exports.WEBHOOK_NOTIFICATION_EVENT_PREFIX = exports.WEBHOOK_NOTIFICATION_CHANNEL_ID = exports.WEBHOOK_FANOUT_JOB_TYPE = exports.WEBHOOK_ENDPOINT_DISABLED_EVENT_KEY = exports.WEBHOOK_ENDPOINT_DISABLED_EMAIL_TEMPLATE = exports.WEBHOOK_DELIVERY_SUBJECT_TYPE = exports.WEBHOOK_DELIVER_JOB_TYPE = exports.WEBHOOK_AUDIT_TARGET = exports.userAgentToken = exports.resolveWebhooksModuleOptions = exports.WEBHOOKS_OPTIONS = exports.WebhooksModule = void 0;
+exports.WebhooksController = exports.OrgWebhooksController = exports.AdminWebhooksController = exports.WebhookTestResponseDto = exports.WebhookEventCatalogDto = exports.WebhookEndpointListDto = exports.WebhookEndpointDto = exports.WebhookEndpointCreatedDto = exports.WebhookDeliveryListQueryDto = exports.WebhookDeliveryListDto = exports.WebhookDeliveryDetailDto = exports.UpdateWebhookEndpointDto = exports.RotateWebhookSecretResponseDto = exports.CreateWebhookEndpointDto = exports.withWebhookChannel = exports.webhookEndpointDisabledEmail = exports.webhookEndpointDisabledBrowserTemplate = exports.registerWebhooksEmailTemplates = exports.WEBHOOK_NOTIFICATION_CHANNEL = exports.WEBHOOKS_NOTIFICATIONS = exports.WEBHOOK_EVENTS_METRIC = exports.WEBHOOK_EMIT_OUTCOMES = exports.WEBHOOK_DELIVERY_OUTCOMES = exports.WEBHOOK_DELIVERY_DURATION_METRIC = exports.WEBHOOK_DELIVERIES_METRIC = exports.WEBHOOKS_APP_METRICS = exports.registerWebhookErrorCodes = exports.WebhookRequestError = exports.WebhookNotFoundError = exports.WebhookDisabledError = exports.WebhookDeliveryNotFoundError = exports.WEBHOOKS_PERMISSIONS = exports.SYSTEM_WEBHOOKS_PERMISSIONS = exports.ORG_WEBHOOKS_PERMISSIONS = exports.ownerMayReceive = exports.ownerIdOf = exports.basePermissionFor = exports.WEBHOOK_SIGNING_USER_CREDENTIAL_PURPOSE_DEF = exports.WEBHOOK_SIGNING_CREDENTIAL_PURPOSE_DEF = exports.secretName = exports.WebhookSecrets = exports.CredentialsWebhookSecrets = exports.WebhooksRepository = exports.PrismaWebhooksRepository = exports.WEBHOOKS_SYSTEM_PRISMA = exports.WebhookPurgeHandler = exports.WebhookFanoutHandler = exports.retryDelayMs = exports.parseRetryAfter = void 0;
+// ---- the module and its options (rung 1) ---------------------------------------------------
+var webhooks_module_1 = require("./webhooks.module");
+Object.defineProperty(exports, "WebhooksModule", { enumerable: true, get: function () { return webhooks_module_1.WebhooksModule; } });
+var webhooks_options_1 = require("./webhooks.options");
+Object.defineProperty(exports, "WEBHOOKS_OPTIONS", { enumerable: true, get: function () { return webhooks_options_1.WEBHOOKS_OPTIONS; } });
+Object.defineProperty(exports, "resolveWebhooksModuleOptions", { enumerable: true, get: function () { return webhooks_options_1.resolveWebhooksModuleOptions; } });
+Object.defineProperty(exports, "userAgentToken", { enumerable: true, get: function () { return webhooks_options_1.userAgentToken; } });
+var webhooks_constants_1 = require("./webhooks.constants");
+Object.defineProperty(exports, "WEBHOOK_AUDIT_TARGET", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_AUDIT_TARGET; } });
+Object.defineProperty(exports, "WEBHOOK_DELIVER_JOB_TYPE", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_DELIVER_JOB_TYPE; } });
+Object.defineProperty(exports, "WEBHOOK_DELIVERY_SUBJECT_TYPE", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_DELIVERY_SUBJECT_TYPE; } });
+Object.defineProperty(exports, "WEBHOOK_ENDPOINT_DISABLED_EMAIL_TEMPLATE", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_ENDPOINT_DISABLED_EMAIL_TEMPLATE; } });
+Object.defineProperty(exports, "WEBHOOK_ENDPOINT_DISABLED_EVENT_KEY", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_ENDPOINT_DISABLED_EVENT_KEY; } });
+Object.defineProperty(exports, "WEBHOOK_FANOUT_JOB_TYPE", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_FANOUT_JOB_TYPE; } });
+Object.defineProperty(exports, "WEBHOOK_NOTIFICATION_CHANNEL_ID", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_NOTIFICATION_CHANNEL_ID; } });
+Object.defineProperty(exports, "WEBHOOK_NOTIFICATION_EVENT_PREFIX", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_NOTIFICATION_EVENT_PREFIX; } });
+Object.defineProperty(exports, "WEBHOOK_PURGE_JOB_TYPE", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_PURGE_JOB_TYPE; } });
+Object.defineProperty(exports, "WEBHOOK_RETRY_SCHEDULE_MS", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_RETRY_SCHEDULE_MS; } });
+Object.defineProperty(exports, "WEBHOOK_SIGNING_PURPOSE", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOK_SIGNING_PURPOSE; } });
+Object.defineProperty(exports, "WEBHOOKS_SYSTEM_ACCESS_REASON", { enumerable: true, get: function () { return webhooks_constants_1.WEBHOOKS_SYSTEM_ACCESS_REASON; } });
+Object.defineProperty(exports, "registerWebhooksSystemAccessReason", { enumerable: true, get: function () { return webhooks_constants_1.registerWebhooksSystemAccessReason; } });
+// ---- events (rung 2) ------------------------------------------------------------------------
+var webhook_event_registry_1 = require("./registry/webhook-event.registry");
+Object.defineProperty(exports, "findWebhookEvent", { enumerable: true, get: function () { return webhook_event_registry_1.findWebhookEvent; } });
+Object.defineProperty(exports, "isSubscribed", { enumerable: true, get: function () { return webhook_event_registry_1.isSubscribed; } });
+Object.defineProperty(exports, "patternHasEventsForScope", { enumerable: true, get: function () { return webhook_event_registry_1.patternHasEventsForScope; } });
+Object.defineProperty(exports, "registerWebhookEvent", { enumerable: true, get: function () { return webhook_event_registry_1.registerWebhookEvent; } });
+Object.defineProperty(exports, "subscriptionMatches", { enumerable: true, get: function () { return webhook_event_registry_1.subscriptionMatches; } });
+Object.defineProperty(exports, "webhookEventRegistry", { enumerable: true, get: function () { return webhook_event_registry_1.webhookEventRegistry; } });
+Object.defineProperty(exports, "webhookEventsForScope", { enumerable: true, get: function () { return webhook_event_registry_1.webhookEventsForScope; } });
+var webhook_catalog_1 = require("./registry/webhook-catalog");
+Object.defineProperty(exports, "allWebhookEvents", { enumerable: true, get: function () { return webhook_catalog_1.allWebhookEvents; } });
+Object.defineProperty(exports, "catalogFor", { enumerable: true, get: function () { return webhook_catalog_1.catalogFor; } });
+Object.defineProperty(exports, "resolveWebhookEvent", { enumerable: true, get: function () { return webhook_catalog_1.resolveWebhookEvent; } });
+Object.defineProperty(exports, "subscribableEvents", { enumerable: true, get: function () { return webhook_catalog_1.subscribableEvents; } });
+var builtin_events_1 = require("./registry/builtin-events");
+Object.defineProperty(exports, "BUILTIN_WEBHOOK_EVENTS", { enumerable: true, get: function () { return builtin_events_1.BUILTIN_WEBHOOK_EVENTS; } });
+Object.defineProperty(exports, "JOB_FAILED_WEBHOOK_EVENT_KEY", { enumerable: true, get: function () { return builtin_events_1.JOB_FAILED_WEBHOOK_EVENT_KEY; } });
+Object.defineProperty(exports, "NODE_EVENT_WEBHOOK_EVENT_KEY", { enumerable: true, get: function () { return builtin_events_1.NODE_EVENT_WEBHOOK_EVENT_KEY; } });
+Object.defineProperty(exports, "NODE_OFFLINE_WEBHOOK_EVENT_KEY", { enumerable: true, get: function () { return builtin_events_1.NODE_OFFLINE_WEBHOOK_EVENT_KEY; } });
+Object.defineProperty(exports, "WEBHOOK_PING_EVENT_KEY", { enumerable: true, get: function () { return builtin_events_1.WEBHOOK_PING_EVENT_KEY; } });
+Object.defineProperty(exports, "registerBuiltinWebhookEvents", { enumerable: true, get: function () { return builtin_events_1.registerBuiltinWebhookEvents; } });
+// ---- emitting ---------------------------------------------------------------------------------
+var webhooks_service_1 = require("./webhooks.service");
+Object.defineProperty(exports, "WebhooksService", { enumerable: true, get: function () { return webhooks_service_1.WebhooksService; } });
+var webhook_envelope_1 = require("./webhook-envelope");
+Object.defineProperty(exports, "buildEnvelope", { enumerable: true, get: function () { return webhook_envelope_1.buildEnvelope; } });
+Object.defineProperty(exports, "eventGroupOf", { enumerable: true, get: function () { return webhook_envelope_1.eventGroupOf; } });
+var webhook_endpoints_service_1 = require("./webhook-endpoints.service");
+Object.defineProperty(exports, "WebhookEndpointsService", { enumerable: true, get: function () { return webhook_endpoints_service_1.WebhookEndpointsService; } });
+// ---- egress, transport and signing ------------------------------------------------------------
+var egress_guard_1 = require("./egress/egress-guard");
+Object.defineProperty(exports, "WebhookEgressError", { enumerable: true, get: function () { return egress_guard_1.WebhookEgressError; } });
+Object.defineProperty(exports, "hostForLog", { enumerable: true, get: function () { return egress_guard_1.hostForLog; } });
+Object.defineProperty(exports, "parseWebhookUrl", { enumerable: true, get: function () { return egress_guard_1.parseWebhookUrl; } });
+Object.defineProperty(exports, "resolveWebhookTarget", { enumerable: true, get: function () { return egress_guard_1.resolveWebhookTarget; } });
+Object.defineProperty(exports, "systemHostResolver", { enumerable: true, get: function () { return egress_guard_1.systemHostResolver; } });
+var transport_1 = require("./egress/transport");
+Object.defineProperty(exports, "WEBHOOKS_RESOLVER", { enumerable: true, get: function () { return transport_1.WEBHOOKS_RESOLVER; } });
+Object.defineProperty(exports, "WEBHOOKS_TRANSPORT", { enumerable: true, get: function () { return transport_1.WEBHOOKS_TRANSPORT; } });
+Object.defineProperty(exports, "WebhookTransportError", { enumerable: true, get: function () { return transport_1.WebhookTransportError; } });
+Object.defineProperty(exports, "nodeWebhookTransport", { enumerable: true, get: function () { return transport_1.nodeWebhookTransport; } });
+var signing_1 = require("./signing");
+Object.defineProperty(exports, "generateWebhookSecret", { enumerable: true, get: function () { return signing_1.generateWebhookSecret; } });
+Object.defineProperty(exports, "signedHeaders", { enumerable: true, get: function () { return signing_1.signedHeaders; } });
+var webhook_deliver_handler_1 = require("./handlers/webhook-deliver.handler");
+Object.defineProperty(exports, "WebhookDeliverHandler", { enumerable: true, get: function () { return webhook_deliver_handler_1.WebhookDeliverHandler; } });
+Object.defineProperty(exports, "parseRetryAfter", { enumerable: true, get: function () { return webhook_deliver_handler_1.parseRetryAfter; } });
+Object.defineProperty(exports, "retryDelayMs", { enumerable: true, get: function () { return webhook_deliver_handler_1.retryDelayMs; } });
+var webhook_fanout_handler_1 = require("./handlers/webhook-fanout.handler");
+Object.defineProperty(exports, "WebhookFanoutHandler", { enumerable: true, get: function () { return webhook_fanout_handler_1.WebhookFanoutHandler; } });
+var webhook_purge_handler_1 = require("./handlers/webhook-purge.handler");
+Object.defineProperty(exports, "WebhookPurgeHandler", { enumerable: true, get: function () { return webhook_purge_handler_1.WebhookPurgeHandler; } });
+// ---- data and secrets ports ------------------------------------------------------------------
+var ports_1 = require("./ports");
+Object.defineProperty(exports, "WEBHOOKS_SYSTEM_PRISMA", { enumerable: true, get: function () { return ports_1.WEBHOOKS_SYSTEM_PRISMA; } });
+var webhooks_repository_1 = require("./webhooks.repository");
+Object.defineProperty(exports, "PrismaWebhooksRepository", { enumerable: true, get: function () { return webhooks_repository_1.PrismaWebhooksRepository; } });
+Object.defineProperty(exports, "WebhooksRepository", { enumerable: true, get: function () { return webhooks_repository_1.WebhooksRepository; } });
+var webhook_secrets_service_1 = require("./webhook-secrets.service");
+Object.defineProperty(exports, "CredentialsWebhookSecrets", { enumerable: true, get: function () { return webhook_secrets_service_1.CredentialsWebhookSecrets; } });
+Object.defineProperty(exports, "WebhookSecrets", { enumerable: true, get: function () { return webhook_secrets_service_1.WebhookSecrets; } });
+Object.defineProperty(exports, "secretName", { enumerable: true, get: function () { return webhook_secrets_service_1.secretName; } });
+var webhooks_credentials_1 = require("./webhooks.credentials");
+Object.defineProperty(exports, "WEBHOOK_SIGNING_CREDENTIAL_PURPOSE_DEF", { enumerable: true, get: function () { return webhooks_credentials_1.WEBHOOK_SIGNING_CREDENTIAL_PURPOSE_DEF; } });
+Object.defineProperty(exports, "WEBHOOK_SIGNING_USER_CREDENTIAL_PURPOSE_DEF", { enumerable: true, get: function () { return webhooks_credentials_1.WEBHOOK_SIGNING_USER_CREDENTIAL_PURPOSE_DEF; } });
+var webhooks_access_1 = require("./webhooks.access");
+Object.defineProperty(exports, "basePermissionFor", { enumerable: true, get: function () { return webhooks_access_1.basePermissionFor; } });
+Object.defineProperty(exports, "ownerIdOf", { enumerable: true, get: function () { return webhooks_access_1.ownerIdOf; } });
+Object.defineProperty(exports, "ownerMayReceive", { enumerable: true, get: function () { return webhooks_access_1.ownerMayReceive; } });
+// ---- permissions, errors, metrics -------------------------------------------------------------
+var webhooks_permissions_1 = require("./webhooks.permissions");
+Object.defineProperty(exports, "ORG_WEBHOOKS_PERMISSIONS", { enumerable: true, get: function () { return webhooks_permissions_1.ORG_WEBHOOKS_PERMISSIONS; } });
+Object.defineProperty(exports, "SYSTEM_WEBHOOKS_PERMISSIONS", { enumerable: true, get: function () { return webhooks_permissions_1.SYSTEM_WEBHOOKS_PERMISSIONS; } });
+Object.defineProperty(exports, "WEBHOOKS_PERMISSIONS", { enumerable: true, get: function () { return webhooks_permissions_1.WEBHOOKS_PERMISSIONS; } });
+var webhooks_errors_1 = require("./webhooks.errors");
+Object.defineProperty(exports, "WebhookDeliveryNotFoundError", { enumerable: true, get: function () { return webhooks_errors_1.WebhookDeliveryNotFoundError; } });
+Object.defineProperty(exports, "WebhookDisabledError", { enumerable: true, get: function () { return webhooks_errors_1.WebhookDisabledError; } });
+Object.defineProperty(exports, "WebhookNotFoundError", { enumerable: true, get: function () { return webhooks_errors_1.WebhookNotFoundError; } });
+Object.defineProperty(exports, "WebhookRequestError", { enumerable: true, get: function () { return webhooks_errors_1.WebhookRequestError; } });
+Object.defineProperty(exports, "registerWebhookErrorCodes", { enumerable: true, get: function () { return webhooks_errors_1.registerWebhookErrorCodes; } });
+var webhooks_metrics_1 = require("./webhooks.metrics");
+Object.defineProperty(exports, "WEBHOOKS_APP_METRICS", { enumerable: true, get: function () { return webhooks_metrics_1.WEBHOOKS_APP_METRICS; } });
+Object.defineProperty(exports, "WEBHOOK_DELIVERIES_METRIC", { enumerable: true, get: function () { return webhooks_metrics_1.WEBHOOK_DELIVERIES_METRIC; } });
+Object.defineProperty(exports, "WEBHOOK_DELIVERY_DURATION_METRIC", { enumerable: true, get: function () { return webhooks_metrics_1.WEBHOOK_DELIVERY_DURATION_METRIC; } });
+Object.defineProperty(exports, "WEBHOOK_DELIVERY_OUTCOMES", { enumerable: true, get: function () { return webhooks_metrics_1.WEBHOOK_DELIVERY_OUTCOMES; } });
+Object.defineProperty(exports, "WEBHOOK_EMIT_OUTCOMES", { enumerable: true, get: function () { return webhooks_metrics_1.WEBHOOK_EMIT_OUTCOMES; } });
+Object.defineProperty(exports, "WEBHOOK_EVENTS_METRIC", { enumerable: true, get: function () { return webhooks_metrics_1.WEBHOOK_EVENTS_METRIC; } });
+// ---- notifications -----------------------------------------------------------------------------
+var webhook_notifications_1 = require("./notifications/webhook-notifications");
+Object.defineProperty(exports, "WEBHOOKS_NOTIFICATIONS", { enumerable: true, get: function () { return webhook_notifications_1.WEBHOOKS_NOTIFICATIONS; } });
+Object.defineProperty(exports, "WEBHOOK_NOTIFICATION_CHANNEL", { enumerable: true, get: function () { return webhook_notifications_1.WEBHOOK_NOTIFICATION_CHANNEL; } });
+Object.defineProperty(exports, "registerWebhooksEmailTemplates", { enumerable: true, get: function () { return webhook_notifications_1.registerWebhooksEmailTemplates; } });
+Object.defineProperty(exports, "webhookEndpointDisabledBrowserTemplate", { enumerable: true, get: function () { return webhook_notifications_1.webhookEndpointDisabledBrowserTemplate; } });
+Object.defineProperty(exports, "webhookEndpointDisabledEmail", { enumerable: true, get: function () { return webhook_notifications_1.webhookEndpointDisabledEmail; } });
+Object.defineProperty(exports, "withWebhookChannel", { enumerable: true, get: function () { return webhook_notifications_1.withWebhookChannel; } });
+// ---- routes (for the app's route discovery and tests) ---------------------------------------
+var webhook_dto_1 = require("./http/webhook.dto");
+Object.defineProperty(exports, "CreateWebhookEndpointDto", { enumerable: true, get: function () { return webhook_dto_1.CreateWebhookEndpointDto; } });
+Object.defineProperty(exports, "RotateWebhookSecretResponseDto", { enumerable: true, get: function () { return webhook_dto_1.RotateWebhookSecretResponseDto; } });
+Object.defineProperty(exports, "UpdateWebhookEndpointDto", { enumerable: true, get: function () { return webhook_dto_1.UpdateWebhookEndpointDto; } });
+Object.defineProperty(exports, "WebhookDeliveryDetailDto", { enumerable: true, get: function () { return webhook_dto_1.WebhookDeliveryDetailDto; } });
+Object.defineProperty(exports, "WebhookDeliveryListDto", { enumerable: true, get: function () { return webhook_dto_1.WebhookDeliveryListDto; } });
+Object.defineProperty(exports, "WebhookDeliveryListQueryDto", { enumerable: true, get: function () { return webhook_dto_1.WebhookDeliveryListQueryDto; } });
+Object.defineProperty(exports, "WebhookEndpointCreatedDto", { enumerable: true, get: function () { return webhook_dto_1.WebhookEndpointCreatedDto; } });
+Object.defineProperty(exports, "WebhookEndpointDto", { enumerable: true, get: function () { return webhook_dto_1.WebhookEndpointDto; } });
+Object.defineProperty(exports, "WebhookEndpointListDto", { enumerable: true, get: function () { return webhook_dto_1.WebhookEndpointListDto; } });
+Object.defineProperty(exports, "WebhookEventCatalogDto", { enumerable: true, get: function () { return webhook_dto_1.WebhookEventCatalogDto; } });
+Object.defineProperty(exports, "WebhookTestResponseDto", { enumerable: true, get: function () { return webhook_dto_1.WebhookTestResponseDto; } });
+var admin_webhooks_controller_1 = require("./http/admin-webhooks.controller");
+Object.defineProperty(exports, "AdminWebhooksController", { enumerable: true, get: function () { return admin_webhooks_controller_1.AdminWebhooksController; } });
+var org_webhooks_controller_1 = require("./http/org-webhooks.controller");
+Object.defineProperty(exports, "OrgWebhooksController", { enumerable: true, get: function () { return org_webhooks_controller_1.OrgWebhooksController; } });
+var webhooks_controller_1 = require("./http/webhooks.controller");
+Object.defineProperty(exports, "WebhooksController", { enumerable: true, get: function () { return webhooks_controller_1.WebhooksController; } });
+//# sourceMappingURL=index.js.map

package/dist/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,wEAAwE;AACxE,mEAAmE;AACnE,4EAA4E;AAC5E,qEAAqE;AACrE,iFAAiF;;;;AAEjF,+FAA+F;AAC/F,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,uDAAoG;AAA3F,oHAAA,gBAAgB,OAAA;AAAE,gIAAA,4BAA4B,OAAA;AAAE,kHAAA,cAAc,OAAA;AAEvE,2DAc8B;AAb5B,0HAAA,oBAAoB,OAAA;AACpB,8HAAA,wBAAwB,OAAA;AACxB,mIAAA,6BAA6B,OAAA;AAC7B,8IAAA,wCAAwC,OAAA;AACxC,yIAAA,mCAAmC,OAAA;AACnC,6HAAA,uBAAuB,OAAA;AACvB,qIAAA,+BAA+B,OAAA;AAC/B,uIAAA,iCAAiC,OAAA;AACjC,4HAAA,sBAAsB,OAAA;AACtB,+HAAA,yBAAyB,OAAA;AACzB,6HAAA,uBAAuB,OAAA;AACvB,mIAAA,6BAA6B,OAAA;AAC7B,wIAAA,kCAAkC,OAAA;AAGpC,gGAAgG;AAChG,4EAQ2C;AAPzC,0HAAA,gBAAgB,OAAA;AAChB,sHAAA,YAAY,OAAA;AACZ,kIAAA,wBAAwB,OAAA;AACxB,8HAAA,oBAAoB,OAAA;AACpB,6HAAA,mBAAmB,OAAA;AACnB,8HAAA,oBAAoB,OAAA;AACpB,+HAAA,qBAAqB,OAAA;AAGvB,8DAAmH;AAA1G,mHAAA,gBAAgB,OAAA;AAAE,6GAAA,UAAU,OAAA;AAAE,sHAAA,mBAAmB,OAAA;AAAE,qHAAA,kBAAkB,OAAA;AAC9E,4DAOmC;AANjC,wHAAA,sBAAsB,OAAA;AACtB,8HAAA,4BAA4B,OAAA;AAC5B,8HAAA,4BAA4B,OAAA;AAC5B,gIAAA,8BAA8B,OAAA;AAC9B,wHAAA,sBAAsB,OAAA;AACtB,8HAAA,4BAA4B,OAAA;AAG9B,kGAAkG;AAClG,uDAAqD;AAA5C,mHAAA,eAAe,OAAA;AAExB,uDAAiE;AAAxD,iHAAA,aAAa,OAAA;AAAE,gHAAA,YAAY,OAAA;AAEpC,yEAAsE;AAA7D,oIAAA,uBAAuB,OAAA;AAGhC,kGAAkG;AAClG,sDAAkI;AAAzH,kHAAA,kBAAkB,OAAA;AAAE,0GAAA,UAAU,OAAA;AAAE,+GAAA,eAAe,OAAA;AAAE,oHAAA,oBAAoB,OAAA;AAAE,kHAAA,kBAAkB,OAAA;AAElG,gDAAwH;AAA/G,8GAAA,iBAAiB,OAAA;AAAE,+GAAA,kBAAkB,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAAE,iHAAA,oBAAoB,OAAA;AAE3F,qCAAiE;AAAxD,gHAAA,qBAAqB,OAAA;AAAE,wGAAA,aAAa,OAAA;AAE7C,8EAA0G;AAAjG,gIAAA,qBAAqB,OAAA;AAAE,0HAAA,eAAe,OAAA;AAAE,uHAAA,YAAY,OAAA;AAC7D,4EAAyE;AAAhE,8HAAA,oBAAoB,OAAA;AAC7B,0EAAuE;AAA9D,4HAAA,mBAAmB,OAAA;AAE5B,iGAAiG;AACjG,iCAAiD;AAAxC,+GAAA,sBAAsB,OAAA;AAE/B,6DAAqF;AAA5E,+HAAA,wBAAwB,OAAA;AAAE,yHAAA,kBAAkB,OAAA;AAErD,qEAAkG;AAAzF,oIAAA,yBAAyB,OAAA;AAAE,yHAAA,cAAc,OAAA;AAAE,qHAAA,UAAU,OAAA;AAkB9D,+DAA6H;AAApH,8IAAA,sCAAsC,OAAA;AAAE,mJAAA,2CAA2C,OAAA;AAC5F,qDAAkF;AAAzE,oHAAA,iBAAiB,OAAA;AAAE,4GAAA,SAAS,OAAA;AAAE,kHAAA,eAAe,OAAA;AAEtD,kGAAkG;AAClG,+DAAqH;AAA5G,gIAAA,wBAAwB,OAAA;AAAE,mIAAA,2BAA2B,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAEpF,qDAA6J;AAApJ,+HAAA,4BAA4B,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAAE,sHAAA,mBAAmB,OAAA;AAAE,4HAAA,yBAAyB,OAAA;AACjI,uDAO4B;AAN1B,wHAAA,oBAAoB,OAAA;AACpB,6HAAA,yBAAyB,OAAA;AACzB,oIAAA,gCAAgC,OAAA;AAChC,6HAAA,yBAAyB,OAAA;AACzB,yHAAA,qBAAqB,OAAA;AACrB,yHAAA,qBAAqB,OAAA;AAGvB,mGAAmG;AACnG,+EAO+C;AAN7C,+HAAA,sBAAsB,OAAA;AACtB,qIAAA,4BAA4B,OAAA;AAC5B,uIAAA,8BAA8B,OAAA;AAC9B,+IAAA,sCAAsC,OAAA;AACtC,qIAAA,4BAA4B,OAAA;AAC5B,2HAAA,kBAAkB,OAAA;AAIpB,gGAAgG;AAChG,kDAY4B;AAX1B,uHAAA,wBAAwB,OAAA;AACxB,6HAAA,8BAA8B,OAAA;AAC9B,uHAAA,wBAAwB,OAAA;AACxB,uHAAA,wBAAwB,OAAA;AACxB,qHAAA,sBAAsB,OAAA;AACtB,0HAAA,2BAA2B,OAAA;AAC3B,wHAAA,yBAAyB,OAAA;AACzB,iHAAA,kBAAkB,OAAA;AAClB,qHAAA,sBAAsB,OAAA;AACtB,qHAAA,sBAAsB,OAAA;AACtB,qHAAA,sBAAsB,OAAA;AAExB,8EAA2E;AAAlE,oIAAA,uBAAuB,OAAA;AAChC,0EAAuE;AAA9D,gIAAA,qBAAqB,OAAA;AAC9B,kEAAgE;AAAvD,yHAAA,kBAAkB,OAAA"}

package/dist/webhooks/listeners/webhook-event.listeners.d.ts

@@ -0,0 +1,23 @@
+import { type JobSettledEvent } from '../../jobs/index';
+import { type NodeEventReportedEvent, type NodeOfflineEvent } from '../../nodes/index';
+import { WebhooksService } from '../webhooks.service';
+/**
+ * The bridges. See the file header.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export declare class WebhookEventListeners {
+    private readonly webhooks;
+    private readonly logger;
+    constructor(webhooks: WebhooksService);
+    /** `nodes.node.offline` to the `nodes.node.offline` webhook event. */
+    onNodeOffline(event: NodeOfflineEvent): void;
+    /** `nodes.node.event` to the `nodes.node.event` webhook event. */
+    onNodeEvent(event: NodeEventReportedEvent): void;
+    /** `job.settled` (failed for good) to the `jobs.job.failed` webhook event. */
+    onJobSettled(event: JobSettledEvent): void;
+    private queue;
+}
+//# sourceMappingURL=webhook-event.listeners.d.ts.map

package/dist/webhooks/listeners/webhook-event.listeners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-event.listeners.d.ts","sourceRoot":"","sources":["../../../src/webhooks/listeners/webhook-event.listeners.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAA2C,KAAK,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAMhI,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAItD;;;;;;GAMG;AACH,qBACa,qBAAqB;IAGpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAFrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;gBAEpC,QAAQ,EAAE,eAAe;IAEtD,sEAAsE;IAEtE,aAAa,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAU5C,kEAAkE;IAElE,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI;IAWhD,8EAA8E;IAE9E,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;YAc5B,KAAK;CAOpB"}

package/dist/webhooks/listeners/webhook-event.listeners.js

@@ -0,0 +1,120 @@
+"use strict";
+// =============================================================================
+// Domain-event bridges (issue #1046)
+// =============================================================================
+//
+// The platform raises plain in-process events (`nodes.node.offline`,
+// `nodes.node.event`, `job.settled`); these listeners turn them into webhook
+// events. A listener body does NO fan-out and NO I/O of its own: it validates
+// nothing, loads nothing and sends nothing; it hands the event to
+// `WebhooksService.enqueueFanout`, one bounded insert into the queue, and the
+// `webhooks.fanout` job does the rest (the `on-event-no-io` rule).
+//
+// A failure of the enqueue is logged and swallowed: an event bridge must never
+// break the code that raised the event.
+//
+// `job.settled` is bridged only for a job that FAILED FOR GOOD, and never for
+// the slice's own `webhooks.*` jobs (a webhook about a failed webhook would
+// loop).
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var WebhookEventListeners_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookEventListeners = void 0;
+const common_1 = require("@nestjs/common");
+const event_emitter_1 = require("@nestjs/event-emitter");
+const index_1 = require("../../jobs/index");
+const index_2 = require("../../nodes/index");
+const builtin_events_1 = require("../registry/builtin-events");
+const webhooks_service_1 = require("../webhooks.service");
+const LAST_ERROR_MAX = 500;
+/**
+ * The bridges. See the file header.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+let WebhookEventListeners = WebhookEventListeners_1 = class WebhookEventListeners {
+    webhooks;
+    logger = new common_1.Logger(WebhookEventListeners_1.name);
+    constructor(webhooks) {
+        this.webhooks = webhooks;
+    }
+    /** `nodes.node.offline` to the `nodes.node.offline` webhook event. */
+    onNodeOffline(event) {
+        void this.queue(builtin_events_1.NODE_OFFLINE_WEBHOOK_EVENT_KEY, {
+            nodeId: event.nodeId,
+            nodeName: event.nodeName,
+            lastHeartbeatAt: event.lastHeartbeatAt ? event.lastHeartbeatAt.toISOString() : null,
+            markedOfflineAt: event.markedOfflineAt.toISOString(),
+            staleAfterMinutes: event.staleAfterMinutes,
+        });
+    }
+    /** `nodes.node.event` to the `nodes.node.event` webhook event. */
+    onNodeEvent(event) {
+        void this.queue(builtin_events_1.NODE_EVENT_WEBHOOK_EVENT_KEY, {
+            nodeId: event.nodeId,
+            nodeName: event.nodeName,
+            type: event.type,
+            severity: event.severity,
+            attrs: { ...event.attrs },
+            occurredAt: event.occurredAt.toISOString(),
+        });
+    }
+    /** `job.settled` (failed for good) to the `jobs.job.failed` webhook event. */
+    onJobSettled(event) {
+        if (event.succeeded || event.type.startsWith('webhooks.'))
+            return;
+        void this.queue(builtin_events_1.JOB_FAILED_WEBHOOK_EVENT_KEY, {
+            jobId: event.jobId,
+            type: event.type,
+            subjectType: event.subjectType,
+            subjectId: event.subjectId,
+            orgId: event.job.orgId ?? null,
+            attempts: event.job.attempts,
+            lastError: event.lastError ? event.lastError.slice(0, LAST_ERROR_MAX) : null,
+            finishedAt: event.job.finishedAt ? event.job.finishedAt.toISOString() : null,
+        });
+    }
+    async queue(eventKey, data) {
+        try {
+            await this.webhooks.enqueueFanout(eventKey, data, { orgId: null });
+        }
+        catch (error) {
+            this.logger.warn(`Could not queue the "${eventKey}" webhook fan-out: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+};
+exports.WebhookEventListeners = WebhookEventListeners;
+__decorate([
+    (0, event_emitter_1.OnEvent)(index_2.NODE_OFFLINE_EVENT),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function]),
+    __metadata("design:returntype", void 0)
+], WebhookEventListeners.prototype, "onNodeOffline", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)(index_2.NODE_EVENT_REPORTED),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function]),
+    __metadata("design:returntype", void 0)
+], WebhookEventListeners.prototype, "onNodeEvent", null);
+__decorate([
+    (0, event_emitter_1.OnEvent)(index_1.JOB_SETTLED_EVENT),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Function]),
+    __metadata("design:returntype", void 0)
+], WebhookEventListeners.prototype, "onJobSettled", null);
+exports.WebhookEventListeners = WebhookEventListeners = WebhookEventListeners_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [webhooks_service_1.WebhooksService])
+], WebhookEventListeners);
+//# sourceMappingURL=webhook-event.listeners.js.map

package/dist/webhooks/listeners/webhook-event.listeners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-event.listeners.js","sourceRoot":"","sources":["../../../src/webhooks/listeners/webhook-event.listeners.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,qCAAqC;AACrC,gFAAgF;AAChF,EAAE;AACF,qEAAqE;AACrE,6EAA6E;AAC7E,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAC9E,mEAAmE;AACnE,EAAE;AACF,+EAA+E;AAC/E,wCAAwC;AACxC,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,SAAS;AACT,gFAAgF;;;;;;;;;;;;;AAEhF,2CAAoD;AACpD,yDAAgD;AAEhD,4CAA2E;AAC3E,6CAAgI;AAChI,+DAIoC;AACpC,0DAAsD;AAEtD,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;;;;;;GAMG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAGH;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjE,YAA6B,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;IAAG,CAAC;IAE1D,sEAAsE;IAEtE,aAAa,CAAC,KAAuB;QACnC,KAAK,IAAI,CAAC,KAAK,CAAC,+CAA8B,EAAE;YAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;YACnF,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,WAAW,EAAE;YACpD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAElE,WAAW,CAAC,KAA6B;QACvC,KAAK,IAAI,CAAC,KAAK,CAAC,6CAA4B,EAAE;YAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE;YACzB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAE9E,YAAY,CAAC,KAAsB;QACjC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO;QAClE,KAAK,IAAI,CAAC,KAAK,CAAC,6CAA4B,EAAE;YAC5C,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI;YAC9B,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5E,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SAC7E,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,IAAa;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,QAAQ,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;CACF,CAAA;AArDY,sDAAqB;AAOhC;IADC,IAAA,uBAAO,EAAC,0BAAkB,CAAC;;;;0DAS3B;AAID;IADC,IAAA,uBAAO,EAAC,2BAAmB,CAAC;;;;wDAU5B;AAID;IADC,IAAA,uBAAO,EAAC,yBAAiB,CAAC;;;;yDAa1B;gCA5CU,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAI4B,kCAAe;GAH3C,qBAAqB,CAqDjC"}

package/dist/webhooks/notifications/webhook-notification.channel.d.ts

@@ -0,0 +1,31 @@
+import { type OnModuleInit } from '@nestjs/common';
+import { NotificationChannelSenderRegistry, type ChannelDeliveryResult, type NotificationChannelSender, type NotificationDispatchContext, type NotificationRecipient, type ResolvedRecipient } from '../../notifications/index';
+import type { WebhooksPrisma } from '../ports';
+import { WebhooksRepository } from '../webhooks.repository';
+import { WebhooksService } from '../webhooks.service';
+/**
+ * The transport. See the file header.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+export declare class WebhookNotificationChannel implements NotificationChannelSender, OnModuleInit {
+    private readonly senders;
+    private readonly webhooks;
+    private readonly repository;
+    private readonly prisma;
+    readonly channel = "webhook";
+    private readonly logger;
+    constructor(senders: NotificationChannelSenderRegistry, webhooks: WebhooksService, repository: WebhooksRepository, prisma: WebhooksPrisma);
+    /** Registers this sender for `webhook`; the channel id must be registered first. */
+    onModuleInit(): void;
+    resolveRecipient(recipient: NotificationRecipient, context: {
+        readonly event: {
+            readonly key: string;
+        };
+    }): Promise<ResolvedRecipient | null>;
+    deliver(context: NotificationDispatchContext, to: string): Promise<ChannelDeliveryResult>;
+    private renderLikeTheBell;
+}
+//# sourceMappingURL=webhook-notification.channel.d.ts.map

package/dist/webhooks/notifications/webhook-notification.channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-notification.channel.d.ts","sourceRoot":"","sources":["../../../src/webhooks/notifications/webhook-notification.channel.ts"],"names":[],"mappings":"AAsBA,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAI/E,OAAO,EACL,iCAAiC,EAGjC,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD;;;;;;GAMG;AACH,qBACa,0BAA2B,YAAW,yBAAyB,EAAE,YAAY;IAMtF,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IACF,OAAO,CAAC,QAAQ,CAAC,MAAM;IARlD,QAAQ,CAAC,OAAO,aAAmC;IAEnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+C;gBAGnD,OAAO,EAAE,iCAAiC,EAC1C,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,kBAAkB,EACL,MAAM,EAAE,cAAc;IAGlE,oFAAoF;IACpF,YAAY,IAAI,IAAI;IAId,gBAAgB,CAAC,SAAS,EAAE,qBAAqB,EAAE,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE;YAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAc5I,OAAO,CAAC,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAqB/F,OAAO,CAAC,iBAAiB;CAU1B"}

package/dist/webhooks/notifications/webhook-notification.channel.js

@@ -0,0 +1,127 @@
+"use strict";
+// =============================================================================
+// The `webhook` notification channel's transport (issue #1046)
+// =============================================================================
+//
+// A user's notification, forwarded to the user's own webhook endpoints. It is a
+// `NotificationChannelSender` like the platform's: the dispatcher has already
+// applied the user's preferences (they opt in per event in the matrix) and the
+// administrator's channel switch before `deliver` runs.
+//
+//   - `resolveRecipient` answers `null` (the channel is skipped, no row, no
+//     attempt) unless the user has at least one ENABLED user-scope endpoint
+//     subscribed to `notification.<eventKey>` (or `notification.*`, `*`);
+//   - `deliver` renders the notification the way the bell does (the event's
+//     channel template, else its browser template, else its label) and
+//     `WebhooksService.emitForUser`s it. The raw template data is NOT sent: only
+//     the rendered title, body and link, the event identity and any `fields`
+//     the channel template adds.
+//
+// It never throws and puts no secret or message text in an error. The send
+// itself is the `webhooks.deliver` job's: this does one fan-out transaction.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var WebhookNotificationChannel_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookNotificationChannel = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../core/index");
+const index_2 = require("../../identity/index");
+const index_3 = require("../../notifications/index");
+const webhook_event_registry_1 = require("../registry/webhook-event.registry");
+const webhooks_constants_1 = require("../webhooks.constants");
+const webhooks_repository_1 = require("../webhooks.repository");
+const webhooks_service_1 = require("../webhooks.service");
+/**
+ * The transport. See the file header.
+ *
+ * @internal
+ *
+ * @stability experimental
+ */
+let WebhookNotificationChannel = WebhookNotificationChannel_1 = class WebhookNotificationChannel {
+    senders;
+    webhooks;
+    repository;
+    prisma;
+    channel = webhooks_constants_1.WEBHOOK_NOTIFICATION_CHANNEL_ID;
+    logger = new common_1.Logger(WebhookNotificationChannel_1.name);
+    constructor(senders, webhooks, repository, prisma) {
+        this.senders = senders;
+        this.webhooks = webhooks;
+        this.repository = repository;
+        this.prisma = prisma;
+    }
+    /** Registers this sender for `webhook`; the channel id must be registered first. */
+    onModuleInit() {
+        this.senders.register(this);
+    }
+    async resolveRecipient(recipient, context) {
+        if (!recipient.userId)
+            return null;
+        try {
+            const orgId = await (0, index_2.resolveOrgId)(this.prisma, recipient.orgId ?? null, 'Webhook notification');
+            const endpoints = await this.repository.enabledEndpoints(orgId, { scope: 'user', ownerUserId: recipient.userId });
+            const key = `${webhooks_constants_1.WEBHOOK_NOTIFICATION_EVENT_PREFIX}${context.event.key}`;
+            if (!endpoints.some((endpoint) => (0, webhook_event_registry_1.isSubscribed)(endpoint.eventKeys, key)))
+                return null;
+            return { to: recipient.userId, display: 'your webhook endpoints' };
+        }
+        catch (error) {
+            this.logger.debug(`No webhook recipient for "${context.event.key}": ${error instanceof Error ? error.message : String(error)}`);
+            return null;
+        }
+    }
+    async deliver(context, to) {
+        try {
+            const { event } = context;
+            const rendered = (0, index_3.renderChannelPayload)(this.channel, context) ??
+                this.renderLikeTheBell(context) ?? { title: event.label, body: event.description };
+            const data = {
+                event: { key: event.key, label: event.label, description: event.description },
+                title: rendered.title,
+                body: rendered.body,
+                link: rendered.link ?? null,
+                fields: ('fields' in rendered && rendered.fields ? rendered.fields : null),
+            };
+            await this.webhooks.emitForUser(to, `${webhooks_constants_1.WEBHOOK_NOTIFICATION_EVENT_PREFIX}${event.key}`, data, { orgId: context.recipient.orgId ?? null });
+            return { success: true };
+        }
+        catch (error) {
+            this.logger.warn(`The webhook channel failed for "${context.event.key}": ${error instanceof Error ? error.constructor.name : 'error'}`);
+            return { success: false, error: 'The webhook fan-out failed' };
+        }
+    }
+    renderLikeTheBell(context) {
+        const binding = index_3.eventBrowserTemplateRegistry.get(context.event.key);
+        if (!binding)
+            return null;
+        try {
+            const content = binding.render(context.data, { timeZone: context.recipient.timeZone ?? null });
+            return { title: content.title, body: content.body, ...(content.link ? { link: content.link } : {}) };
+        }
+        catch {
+            return null;
+        }
+    }
+};
+exports.WebhookNotificationChannel = WebhookNotificationChannel;
+exports.WebhookNotificationChannel = WebhookNotificationChannel = WebhookNotificationChannel_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [index_3.NotificationChannelSenderRegistry,
+        webhooks_service_1.WebhooksService,
+        webhooks_repository_1.WebhooksRepository, Object])
+], WebhookNotificationChannel);
+//# sourceMappingURL=webhook-notification.channel.js.map

package/dist/webhooks/notifications/webhook-notification.channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-notification.channel.js","sourceRoot":"","sources":["../../../src/webhooks/notifications/webhook-notification.channel.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,+DAA+D;AAC/D,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,iFAAiF;AACjF,6EAA6E;AAC7E,iCAAiC;AACjC,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,gFAAgF;;;;;;;;;;;;;;;;AAEhF,2CAA+E;AAE/E,4CAAmD;AACnD,gDAAoD;AACpD,qDASmC;AACnC,+EAAkE;AAElE,8DAA2G;AAC3G,gEAA4D;AAC5D,0DAAsD;AAEtD;;;;;;GAMG;AAEI,IAAM,0BAA0B,kCAAhC,MAAM,0BAA0B;IAMlB;IACA;IACA;IACyB;IARnC,OAAO,GAAG,oDAA+B,CAAC;IAElC,MAAM,GAAG,IAAI,eAAM,CAAC,4BAA0B,CAAC,IAAI,CAAC,CAAC;IAEtE,YACmB,OAA0C,EAC1C,QAAyB,EACzB,UAA8B,EACL,MAAsB;QAH/C,YAAO,GAAP,OAAO,CAAmC;QAC1C,aAAQ,GAAR,QAAQ,CAAiB;QACzB,eAAU,GAAV,UAAU,CAAoB;QACL,WAAM,GAAN,MAAM,CAAgB;IAC/D,CAAC;IAEJ,oFAAoF;IACpF,YAAY;QACV,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAgC,EAAE,OAAqD;QAC5G,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,oBAAY,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,IAAI,EAAE,sBAAsB,CAAC,CAAC;YAC/F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YAClH,MAAM,GAAG,GAAG,GAAG,sDAAiC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACvE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtF,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChI,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAoC,EAAE,EAAU;QAC5D,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;YAC1B,MAAM,QAAQ,GACZ,IAAA,4BAAoB,EAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC3C,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;YACrF,MAAM,IAAI,GAAG;gBACX,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBAC7E,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI;gBAC3B,MAAM,EAAE,CAAC,QAAQ,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAkC;aAC5G,CAAC;YACF,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,sDAAiC,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;YAC1I,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACxI,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,OAAoC;QAC5D,MAAM,OAAO,GAAG,oCAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAa,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;YACxG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AA9DY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;IAUR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;qCAHE,yCAAiC;QAChC,kCAAe;QACb,wCAAkB;GARtC,0BAA0B,CA8DtC"}

package/dist/webhooks/notifications/webhook-notifications.d.ts

@@ -0,0 +1,98 @@
+import type { EmailRenderContext, RenderedEmail } from '../../email/index';
+import type { NotificationChannelDef, NotificationRegistration } from '../../notifications/index';
+/**
+ * The `webhook` channel's registry entry. Its id is persisted in preferences
+ * and delivery rows: never rename it.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare const WEBHOOK_NOTIFICATION_CHANNEL: NotificationChannelDef;
+/**
+ * The data of `webhooks.endpoint_disabled`.
+ *
+ * @stability experimental
+ */
+export interface WebhookEndpointDisabledData {
+    /** The endpoint id. */
+    endpointId: string;
+    /** Its name. */
+    endpointName: string;
+    /** `user`, `org` or `system`. */
+    scope: string;
+    /** `circuit_open` (too many failures) or `gone` (the receiver answered 410). */
+    reason: string;
+    /** The receiver's host (never the path or query). */
+    host: string;
+}
+/** The bell and push text of a webhook notification. @stability experimental */
+export interface WebhookBrowserContent {
+    /** The headline. */
+    title: string;
+    /** The sentence under it. */
+    body: string;
+    /** A root-relative link to the settings page. */
+    link: string;
+}
+/**
+ * The bell and push text of `webhooks.endpoint_disabled`.
+ *
+ * @param data - the event data.
+ * @returns title, body and a root-relative link to the settings page.
+ *
+ * @stability experimental
+ */
+export declare function webhookEndpointDisabledBrowserTemplate(data: WebhookEndpointDisabledData): WebhookBrowserContent;
+/**
+ * The email of `webhooks.endpoint_disabled`.
+ *
+ * @param data - the event data; the endpoint name is user-typed and escaped on the way in.
+ * @param ctx - the render context.
+ * @returns the rendered message.
+ *
+ * @stability experimental
+ */
+export declare function webhookEndpointDisabledEmail(data: WebhookEndpointDisabledData, ctx?: EmailRenderContext): RenderedEmail;
+/**
+ * Registers the slice's one email template with the email slice's registry.
+ * Idempotent. Call it from the notification manifest, after the email render
+ * context is configured and before `registerNotifications(WEBHOOKS_NOTIFICATIONS)`.
+ *
+ * @throws RegistryError `DUPLICATE_ID` when the app registered the name with another renderer; `FROZEN` after bootstrap.
+ *
+ * @example
+ * ```ts
+ * registerWebhooksEmailTemplates();
+ * registerNotifications(WEBHOOKS_NOTIFICATIONS);
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare function registerWebhooksEmailTemplates(): void;
+/**
+ * The `webhooks.endpoint_disabled` registration: event, email template name and
+ * browser renderer.
+ *
+ * @stability experimental
+ */
+export declare const WEBHOOKS_NOTIFICATIONS: readonly NotificationRegistration[];
+/**
+ * Puts the `webhook` channel on notification registrations, so a member can
+ * forward the event to their endpoints from the preferences matrix. The
+ * slice's own `webhooks.endpoint_disabled` is left alone (a webhook about a
+ * broken webhook helps no one). The input is not modified.
+ *
+ * @param registrations - what the manifest would register.
+ * @returns the same registrations with `webhook` appended to each event's channels.
+ *
+ * @example
+ * ```ts
+ * registerNotifications(withWebhookChannel(AUTH_NOTIFICATIONS));
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export declare function withWebhookChannel(registrations: readonly NotificationRegistration[]): NotificationRegistration[];
+//# sourceMappingURL=webhook-notifications.d.ts.map

package/dist/webhooks/notifications/webhook-notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-notifications.d.ts","sourceRoot":"","sources":["../../../src/webhooks/notifications/webhook-notifications.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,kBAAkB,EAAsB,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,KAAK,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAOlG;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,EAAE,sBAQzC,CAAC;AAEH;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,wBAAgB,sCAAsC,CAAC,IAAI,EAAE,2BAA2B,GAAG,qBAAqB,CAO/G;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,2BAA2B,EAAE,GAAG,CAAC,EAAE,kBAAkB,GAAG,aAAa,CAmBvH;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,8BAA8B,IAAI,IAAI,CAIrD;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,wBAAwB,EAYpE,CAAC;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,SAAS,wBAAwB,EAAE,GAAG,wBAAwB,EAAE,CAOjH"}