@marinoscar/platform-api 0.1.0-next.19 → 0.1.0-next.20

package/dist/webhooks/handlers/webhook-deliver.handler.js

@@ -0,0 +1,332 @@
+"use strict";
+// =============================================================================
+// `webhooks.deliver`: one delivery attempt (issue #1046)
+// =============================================================================
+//
+// The ONLY place the slice makes an outbound HTTP request. One job is one
+// attempt of one delivery; a failed attempt that has retries left enqueues the
+// next attempt's job itself (scheduled for the backoff time), in the same
+// transaction as the delivery row's update, so the retry schedule is the
+// slice's (30s, 2m, 10m, 30m, 1h, 2h, 4h, 6h, 6h; jittered; `Retry-After`
+// honoured up to 24h) and not the queue's generic one. A job that throws (the
+// database) is retried by the queue as usual.
+//
+// PER ATTEMPT:
+//   1. load the delivery and its endpoint (`runInOrg` for an organization's
+//      rows, the bypass client with reason `webhooks` for a system endpoint);
+//      a gone delivery ends the job quietly, a disabled or gone endpoint
+//      settles the delivery `dead`;
+//   2. read the signing secret(s) from the credentials store;
+//   3. run the egress guard (resolve EVERY address, refuse any non-public one,
+//      pin the checked address for the connection): a refusal is `ssrf_blocked`
+//      and final;
+//   4. POST the stored body, signed (two signatures during a rotation overlap),
+//      10 s deadline, no redirects, 1 KiB of the answer kept;
+//   5. settle: 2xx succeeded; 410 switches the endpoint off at once; anything
+//      else is a failed attempt (retry while attempts remain, else `dead`) that
+//      counts toward the endpoint's circuit breaker; at the threshold the
+//      endpoint is switched off and its owner is notified (after the commit).
+//
+// SERVER-ONLY: the job needs the signing secret, so it declares neither
+// `nodeResultSchema` nor `persistNodeResult`, and no secret is ever brokered to a
+// node. Nothing secret or URL-shaped is logged: a log line carries the delivery
+// id, the host, the status and a code.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var WebhookDeliverHandler_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WEBHOOK_REQUEST_HEADER_NAMES = exports.WebhookDeliverHandler = void 0;
+exports.retryDelayMs = retryDelayMs;
+exports.parseRetryAfter = parseRetryAfter;
+const common_1 = require("@nestjs/common");
+const api_1 = require("@opentelemetry/api");
+const webhooks_1 = require("@marinoscar/platform-contract/webhooks");
+const index_1 = require("../../jobs/index");
+const index_2 = require("../../notifications/index");
+const index_3 = require("../../otel-core/index");
+const egress_guard_1 = require("../egress/egress-guard");
+const transport_1 = require("../egress/transport");
+const builtin_events_1 = require("../registry/builtin-events");
+const signing_1 = require("../signing");
+const webhook_envelope_1 = require("../webhook-envelope");
+const webhook_secrets_service_1 = require("../webhook-secrets.service");
+const webhooks_constants_1 = require("../webhooks.constants");
+const webhooks_metrics_1 = require("../webhooks.metrics");
+const webhooks_options_1 = require("../webhooks.options");
+const webhooks_repository_1 = require("../webhooks.repository");
+/**
+ * The delay before the retry that follows failed attempt number `attempt`.
+ *
+ * @param attempt - the attempt that just failed (1-based).
+ * @param retryAfterMs - the receiver's `Retry-After`, when it sent one.
+ * @param rand - a random source in [0, 1), for tests.
+ * @returns milliseconds: the schedule entry with half-range jitter, never less than `Retry-After` (capped at 24 h).
+ *
+ * @stability experimental
+ */
+function retryDelayMs(attempt, retryAfterMs = null, rand = Math.random) {
+    const index = Math.min(Math.max(1, Math.floor(attempt)), webhooks_constants_1.WEBHOOK_RETRY_SCHEDULE_MS.length) - 1;
+    const base = webhooks_constants_1.WEBHOOK_RETRY_SCHEDULE_MS[index];
+    const jittered = base / 2 + rand() * (base / 2);
+    const floor = retryAfterMs === null ? 0 : Math.min(retryAfterMs, webhooks_constants_1.WEBHOOK_RETRY_AFTER_CAP_MS);
+    return Math.round(Math.max(floor, jittered));
+}
+/**
+ * Parses a `Retry-After` header: delta-seconds or an HTTP date.
+ *
+ * @param value - the raw header.
+ * @param now - the current time in ms.
+ * @returns milliseconds to wait, or `null` when absent or malformed.
+ *
+ * @stability experimental
+ */
+function parseRetryAfter(value, now = Date.now()) {
+    if (value === null)
+        return null;
+    const trimmed = value.trim();
+    if (/^\d+$/.test(trimmed))
+        return Number(trimmed) * 1000;
+    const at = Date.parse(trimmed);
+    return Number.isNaN(at) ? null : Math.max(0, at - now);
+}
+/**
+ * The `webhooks.deliver` job. See the file header.
+ *
+ * @stability experimental
+ */
+let WebhookDeliverHandler = WebhookDeliverHandler_1 = class WebhookDeliverHandler {
+    registry;
+    repository;
+    secrets;
+    options;
+    transport;
+    resolver;
+    notifications;
+    metrics;
+    logger = new common_1.Logger(WebhookDeliverHandler_1.name);
+    /** PERMANENT once jobs of this type exist. */
+    type = webhooks_constants_1.WEBHOOK_DELIVER_JOB_TYPE;
+    /** Its name in the jobs console. */
+    label = 'Webhook delivery';
+    /** 30 s per run (the request has 10 s); a failed attempt schedules its own retry, so the queue's attempts only cover infrastructure failures. */
+    profile = { maxRuntimeMs: 30_000, maxAttempts: 10 };
+    /** Overridable clock, for tests. */
+    now = () => new Date();
+    /** Overridable random source, for tests. */
+    rand = Math.random;
+    constructor(registry, repository, secrets, options, transport, resolver, notifications, metrics) {
+        this.registry = registry;
+        this.repository = repository;
+        this.secrets = secrets;
+        this.options = options;
+        this.transport = transport;
+        this.resolver = resolver;
+        this.notifications = notifications;
+        this.metrics = metrics;
+    }
+    /** Registers the handler with the job registry. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Runs one attempt.
+     *
+     * @param job - the claimed job; `subjectId` is the delivery id and `orgId` its organization (`null`: a system endpoint).
+     */
+    async process(job) {
+        const deliveryId = job.subjectId;
+        if (!deliveryId)
+            throw new Error(`Job ${job.id} names no delivery`);
+        const orgId = job.orgId ?? null;
+        const loaded = await this.repository.loadDeliveryForJob(orgId, deliveryId);
+        if (!loaded) {
+            this.logger.debug(`Delivery ${deliveryId} no longer exists; nothing to do`);
+            return;
+        }
+        const { delivery, endpoint } = loaded;
+        if (delivery.status === 'succeeded')
+            return;
+        const isPing = delivery.eventKey === builtin_events_1.WEBHOOK_PING_EVENT_KEY;
+        if (!endpoint || (!endpoint.enabled && !isPing)) {
+            await this.repository.settleAttempt(orgId, deliveryId, delivery.endpointId, {
+                delivery: { status: 'dead', errorCode: endpoint ? 'endpoint_disabled' : 'endpoint_gone', nextAttemptAt: null },
+                endpoint: 'neutral',
+                threshold: this.options.circuitBreakerThreshold,
+            });
+            this.count('dead', delivery.eventKey, 0);
+            return;
+        }
+        const marked = await this.repository.markDelivering(orgId, deliveryId);
+        const attempt = marked.attempt;
+        const span = api_1.trace.getTracer('webhooks').startSpan('webhooks.deliver', {
+            attributes: { 'webhook.endpoint.id': endpoint.id, 'webhook.event.type': delivery.eventKey, 'webhook.attempt': attempt },
+        });
+        const started = Date.now();
+        try {
+            const outcome = await this.attempt(endpoint, delivery.eventId, delivery.payload, attempt, span);
+            const durationMs = Date.now() - started;
+            const settled = await this.repository.settleAttempt(orgId, deliveryId, endpoint.id, { ...outcome.settle, delivery: { ...outcome.settle.delivery, durationMs } });
+            this.count(outcome.metric, delivery.eventKey, durationMs);
+            this.logger.log(`Webhook delivery ${deliveryId} attempt ${attempt}: ${outcome.metric}` +
+                `${outcome.status ? ` (HTTP ${outcome.status})` : ''}${outcome.code ? ` [${outcome.code}]` : ''} -> ${(0, egress_guard_1.hostForLog)(endpoint.url)}`);
+            if (settled.disabled && settled.endpoint)
+                await this.tellOwner(settled.endpoint, outcome.settle.disableNow ?? webhooks_constants_1.WEBHOOK_DISABLED_REASONS.CIRCUIT_OPEN);
+        }
+        catch (error) {
+            span.setStatus({ code: api_1.SpanStatusCode.ERROR });
+            throw error;
+        }
+        finally {
+            span.end();
+        }
+    }
+    async attempt(endpoint, eventId, payload, attempt, span) {
+        const threshold = this.options.circuitBreakerThreshold;
+        const dead = (code, metric = 'dead', disableNow) => ({
+            settle: { delivery: { status: 'dead', attempt, errorCode: code, nextAttemptAt: null }, endpoint: 'failure', threshold, ...(disableNow ? { disableNow } : {}) },
+            metric,
+            code,
+        });
+        const secrets = await this.signingSecrets(endpoint);
+        if (secrets.length === 0)
+            return dead('secret_missing');
+        let target;
+        try {
+            target = await (0, egress_guard_1.resolveWebhookTarget)(endpoint.url, this.policy(), this.resolver);
+        }
+        catch (error) {
+            if (error instanceof egress_guard_1.WebhookEgressError && error.code !== 'unresolvable')
+                return dead('ssrf_blocked', 'blocked');
+            return this.failed(attempt, 'network', null, null, null, null);
+        }
+        const body = JSON.stringify(payload);
+        const timestamp = Math.floor(this.now().getTime() / 1000);
+        const headers = await (0, signing_1.signedHeaders)({
+            id: eventId,
+            timestamp,
+            body,
+            secrets,
+            userAgent: `${this.options.appName()}-Webhooks/1.0`,
+        });
+        let response;
+        try {
+            response = await this.transport.send({ target, headers, body, timeoutMs: this.options.requestTimeoutMs });
+        }
+        catch (error) {
+            const code = error instanceof transport_1.WebhookTransportError ? error.code : 'network';
+            return this.failed(attempt, code, null, null, null, null);
+        }
+        span.setAttribute('http.response.status_code', response.status);
+        if (response.status >= 200 && response.status < 300) {
+            return {
+                settle: {
+                    delivery: { status: 'succeeded', attempt, responseStatus: response.status, responseSnippet: response.snippet, errorCode: null, deliveredAt: this.now(), nextAttemptAt: null },
+                    endpoint: 'success',
+                    threshold,
+                },
+                metric: 'succeeded',
+                status: response.status,
+            };
+        }
+        if (response.status === 410) {
+            return {
+                settle: {
+                    delivery: { status: 'dead', attempt, responseStatus: response.status, responseSnippet: response.snippet, errorCode: 'http_410', nextAttemptAt: null },
+                    endpoint: 'failure',
+                    threshold,
+                    disableNow: webhooks_constants_1.WEBHOOK_DISABLED_REASONS.GONE,
+                },
+                metric: 'dead',
+                status: response.status,
+                code: 'http_410',
+            };
+        }
+        const code = response.status >= 500 ? 'http_5xx' : response.status >= 400 ? 'http_4xx' : 'http_3xx';
+        return this.failed(attempt, code, response.status, response.snippet, parseRetryAfter(response.retryAfter, this.now().getTime()), response.status);
+    }
+    failed(attempt, code, responseStatus, snippet, retryAfterMs, status) {
+        const exhausted = attempt >= this.options.maxDeliveryAttempts;
+        const delay = retryDelayMs(attempt, retryAfterMs, this.rand);
+        const retryAt = new Date(this.now().getTime() + delay);
+        return {
+            settle: {
+                delivery: {
+                    status: exhausted ? 'dead' : 'failed',
+                    attempt,
+                    responseStatus,
+                    responseSnippet: snippet,
+                    errorCode: code,
+                    nextAttemptAt: exhausted ? null : retryAt,
+                },
+                endpoint: 'failure',
+                threshold: this.options.circuitBreakerThreshold,
+                ...(exhausted ? {} : { retryAt }),
+            },
+            metric: exhausted ? 'dead' : 'failed',
+            ...(status !== null ? { status } : {}),
+            code,
+        };
+    }
+    /** The current secret first, then the previous one while the rotation overlap lasts. */
+    async signingSecrets(endpoint) {
+        const secrets = [];
+        const current = await this.secrets.get(endpoint, endpoint.secretVersion);
+        if (current)
+            secrets.push(current);
+        const overlap = endpoint.previousSecretUntil && endpoint.previousSecretUntil.getTime() > this.now().getTime();
+        if (overlap && endpoint.secretVersion > 1) {
+            const previous = await this.secrets.get(endpoint, endpoint.secretVersion - 1);
+            if (previous)
+                secrets.push(previous);
+        }
+        return secrets;
+    }
+    policy() {
+        return { allowInsecureHttp: this.options.allowInsecureHttp, allowPrivateTargets: this.options.allowPrivateTargets, allowedHosts: this.options.allowedHosts };
+    }
+    count(outcome, eventKey, durationMs) {
+        const attributes = { outcome, event_group: (0, webhook_envelope_1.eventGroupOf)(eventKey) };
+        this.metrics?.add(webhooks_metrics_1.WEBHOOK_DELIVERIES_METRIC, 1, attributes);
+        if (durationMs > 0)
+            this.metrics?.record(webhooks_metrics_1.WEBHOOK_DELIVERY_DURATION_METRIC, durationMs / 1000, attributes);
+    }
+    /** After the commit, outside any transaction. */
+    async tellOwner(endpoint, reason) {
+        const ownerId = endpoint.ownerUserId ?? endpoint.createdById;
+        if (!ownerId || !this.notifications)
+            return;
+        try {
+            await this.notifications.notifyNow(webhooks_constants_1.WEBHOOK_ENDPOINT_DISABLED_EVENT_KEY, ownerId, { endpointId: endpoint.id, endpointName: endpoint.name, scope: endpoint.scope, reason, host: (0, egress_guard_1.hostForLog)(endpoint.url) }, endpoint.orgId ? { orgId: endpoint.orgId } : undefined);
+        }
+        catch (error) {
+            this.logger.warn(`Could not notify the owner of webhook endpoint ${endpoint.id}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+};
+exports.WebhookDeliverHandler = WebhookDeliverHandler;
+exports.WebhookDeliverHandler = WebhookDeliverHandler = WebhookDeliverHandler_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_1.Inject)(webhooks_options_1.WEBHOOKS_OPTIONS)),
+    __param(4, (0, common_1.Inject)(transport_1.WEBHOOKS_TRANSPORT)),
+    __param(5, (0, common_1.Inject)(transport_1.WEBHOOKS_RESOLVER)),
+    __param(6, (0, common_1.Optional)()),
+    __param(7, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry,
+        webhooks_repository_1.WebhooksRepository,
+        webhook_secrets_service_1.WebhookSecrets, Object, Object, Object, index_2.NotificationsService,
+        index_3.MetricsHostService])
+], WebhookDeliverHandler);
+/** The `webhook-*` header names a delivery carries, for the docs and the testing entry. @stability experimental */
+exports.WEBHOOK_REQUEST_HEADER_NAMES = Object.freeze([webhooks_1.WEBHOOK_HEADERS.ID, webhooks_1.WEBHOOK_HEADERS.TIMESTAMP, webhooks_1.WEBHOOK_HEADERS.SIGNATURE, 'content-type', 'user-agent']);
+//# sourceMappingURL=webhook-deliver.handler.js.map

package/dist/webhooks/handlers/webhook-deliver.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-deliver.handler.js","sourceRoot":"","sources":["../../../src/webhooks/handlers/webhook-deliver.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,yDAAyD;AACzD,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,0EAA0E;AAC1E,yEAAyE;AACzE,0EAA0E;AAC1E,8EAA8E;AAC9E,8CAA8C;AAC9C,EAAE;AACF,eAAe;AACf,4EAA4E;AAC5E,8EAA8E;AAC9E,yEAAyE;AACzE,oCAAoC;AACpC,8DAA8D;AAC9D,+EAA+E;AAC/E,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAChF,8DAA8D;AAC9D,8EAA8E;AAC9E,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,kFAAkF;AAClF,gFAAgF;AAChF,uCAAuC;AACvC,gFAAgF;;;;;;;;;;;;;;;;AAqChF,oCAMC;AAWD,0CAMC;AA1DD,2CAAyF;AACzF,4CAA2D;AAC3D,qEAAyE;AAEzE,4CAA2G;AAC3G,qDAAiE;AACjE,iDAA2D;AAE3D,yDAA2I;AAC3I,mDAA0H;AAC1H,+DAAoE;AACpE,wCAA2C;AAC3C,0DAAmD;AACnD,wEAA4D;AAC5D,8DAM+B;AAC/B,0DAAkG;AAClG,0DAA2F;AAC3F,gEAAiF;AAEjF;;;;;;;;;GASG;AACH,SAAgB,YAAY,CAAC,OAAe,EAAE,eAA8B,IAAI,EAAE,OAAqB,IAAI,CAAC,MAAM;IAChH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,8CAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,8CAAyB,CAAC,KAAK,CAAW,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,+CAA0B,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAAC,KAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC5E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAmBb;IACA;IACA;IAC0B;IACE;IACD;IACf;IACA;IAzBd,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEjE,8CAA8C;IACrC,IAAI,GAAG,6CAAwB,CAAC;IAEzC,oCAAoC;IAC3B,KAAK,GAAG,kBAAkB,CAAC;IAEpC,iJAAiJ;IACxI,OAAO,GAAwB,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAElF,oCAAoC;IACpC,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAEnC,4CAA4C;IAC5C,IAAI,GAAiB,IAAI,CAAC,MAAM,CAAC;IAEjC,YACmB,QAA4B,EAC5B,UAA8B,EAC9B,OAAuB,EACG,OAAsC,EACpC,SAA2B,EAC5B,QAAsB,EACrC,aAAoC,EACpC,OAA4B;QAPxC,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,eAAU,GAAV,UAAU,CAAoB;QAC9B,YAAO,GAAP,OAAO,CAAgB;QACG,YAAO,GAAP,OAAO,CAA+B;QACpC,cAAS,GAAT,SAAS,CAAkB;QAC5B,aAAQ,GAAR,QAAQ,CAAc;QACrC,kBAAa,GAAb,aAAa,CAAuB;QACpC,YAAO,GAAP,OAAO,CAAqB;IACxD,CAAC;IAEJ,mDAAmD;IACnD,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC;QAEhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,UAAU,kCAAkC,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QAE5C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,KAAK,uCAAsB,CAAC;QAC5D,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE;gBAC1E,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe,EAAE,aAAa,EAAE,IAAI,EAAE;gBAC9G,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,IAAI,GAAG,WAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,kBAAkB,EAAE;YACrE,UAAU,EAAE,EAAE,qBAAqB,EAAE,QAAQ,CAAC,EAAE,EAAE,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE;SACxH,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAChG,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YACjK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,oBAAoB,UAAU,YAAY,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE;gBACpE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,IAAA,yBAAU,EAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CACnI,CAAC;YACF,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,6CAAwB,CAAC,YAAY,CAAC,CAAC;QACvJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,QAA4B,EAC5B,OAAe,EACf,OAAgB,EAChB,OAAe,EACf,IAAiE;QAEjE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,SAA6B,MAAM,EAAE,UAAmB,EAAE,EAAE,CAAC,CAAC;YACxF,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAe,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAkB,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAChL,MAAM;YACN,IAAI;SACL,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAExD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,mCAAoB,EAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iCAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,OAAO,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;YACjH,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAa,EAAC;YAClC,EAAE,EAAE,OAAO;YACX,SAAS;YACT,IAAI;YACJ,OAAO;YACP,SAAS,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe;SACpD,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,YAAY,iCAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEhE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,OAAO;gBACL,MAAM,EAAE;oBACN,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;oBAC7K,QAAQ,EAAE,SAAS;oBACnB,SAAS;iBACV;gBACD,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE;oBACN,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE;oBACrJ,QAAQ,EAAE,SAAS;oBACnB,SAAS;oBACT,UAAU,EAAE,6CAAwB,CAAC,IAAI;iBAC1C;gBACD,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,UAAU;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACpG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpJ,CAAC;IAEO,MAAM,CACZ,OAAe,EACf,IAAY,EACZ,cAA6B,EAC7B,OAAsB,EACtB,YAA2B,EAC3B,MAAqB;QAErB,MAAM,SAAS,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;QACvD,OAAO;YACL,MAAM,EAAE;gBACN,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBACrC,OAAO;oBACP,cAAc;oBACd,eAAe,EAAE,OAAO;oBACxB,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;iBAC1C;gBACD,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB;gBAC/C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;aAClC;YACD,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACrC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,IAAI;SACL,CAAC;IACJ,CAAC;IAED,wFAAwF;IAChF,KAAK,CAAC,cAAc,CAAC,QAA4B;QACvD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACzE,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,mBAAmB,IAAI,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC9G,IAAI,OAAO,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;YAC9E,IAAI,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,MAAM;QACZ,OAAO,EAAE,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IAC/J,CAAC;IAEO,KAAK,CAAC,OAAoD,EAAE,QAAgB,EAAE,UAAkB;QACtG,MAAM,UAAU,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,IAAA,+BAAY,EAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,4CAAyB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,UAAU,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,mDAAgC,EAAE,UAAU,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5G,CAAC;IAED,iDAAiD;IACzC,KAAK,CAAC,SAAS,CAAC,QAA4B,EAAE,MAAc;QAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC;QAC7D,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAChC,wDAAmC,EACnC,OAAO,EACP,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAA,yBAAU,EAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EACvH,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CACvD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kDAAkD,QAAQ,CAAC,EAAE,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/I,CAAC;IACH,CAAC;CACF,CAAA;AApOY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAuBR,WAAA,IAAA,eAAM,EAAC,mCAAgB,CAAC,CAAA;IACxB,WAAA,IAAA,eAAM,EAAC,8BAAkB,CAAC,CAAA;IAC1B,WAAA,IAAA,eAAM,EAAC,6BAAiB,CAAC,CAAA;IACzB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCAPgB,0BAAkB;QAChB,wCAAkB;QACrB,wCAAc,0BAIK,4BAAoB;QAC1B,0BAAkB;GA1BhD,qBAAqB,CAoOjC;AAED,mHAAmH;AACtG,QAAA,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,0BAAe,CAAC,EAAE,EAAE,0BAAe,CAAC,SAAS,EAAE,0BAAe,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC"}

package/dist/webhooks/handlers/webhook-fanout.handler.d.ts

@@ -0,0 +1,28 @@
+import { OnModuleInit } from '@nestjs/common';
+import { JobHandlerRegistry, type Job, type JobExecutionProfile, type JobHandler } from '../../jobs/index';
+import { WebhooksService } from '../webhooks.service';
+/**
+ * The `webhooks.fanout` job. See the file header.
+ *
+ * @stability experimental
+ */
+export declare class WebhookFanoutHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    private readonly webhooks;
+    /** PERMANENT once jobs of this type exist. */
+    readonly type = "webhooks.fanout";
+    /** Its name in the jobs console. */
+    readonly label = "Webhook fan-out";
+    /** Reads a few rows and inserts a few; a minute and three attempts. */
+    readonly profile: JobExecutionProfile;
+    constructor(registry: JobHandlerRegistry, webhooks: WebhooksService);
+    /** Registers the handler with the job registry. */
+    onModuleInit(): void;
+    /**
+     * Emits the event the job carries.
+     *
+     * @param job - the claimed job; its payload is a {@link WebhookFanoutPayload}.
+     */
+    process(job: Job): Promise<void>;
+}
+//# sourceMappingURL=webhook-fanout.handler.d.ts.map

package/dist/webhooks/handlers/webhook-fanout.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-fanout.handler.d.ts","sourceRoot":"","sources":["../../../src/webhooks/handlers/webhook-fanout.handler.ts"],"names":[],"mappings":"AAYA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,KAAK,GAAG,EAAE,KAAK,mBAAmB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE3G,OAAO,EAAE,eAAe,EAA6B,MAAM,qBAAqB,CAAC;AAEjF;;;;GAIG;AACH,qBACa,oBAAqB,YAAW,UAAU,EAAE,YAAY;IAWjE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAX3B,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,qBAA2B;IAExC,oCAAoC;IACpC,QAAQ,CAAC,KAAK,qBAAqB;IAEnC,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAA4C;gBAG9D,QAAQ,EAAE,kBAAkB,EAC5B,QAAQ,EAAE,eAAe;IAG5C,mDAAmD;IACnD,YAAY,IAAI,IAAI;IAIpB;;;;OAIG;IACG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;CAUvC"}

package/dist/webhooks/handlers/webhook-fanout.handler.js

@@ -0,0 +1,73 @@
+"use strict";
+// =============================================================================
+// `webhooks.fanout`: the fan-out of one emitted event (issue #1046)
+// =============================================================================
+//
+// The domain-event listeners (node offline, node event, permanent job failure)
+// only ENQUEUE this job, so no listener body does fan-out work inline
+// (`on-event-no-io`). The handler replays the event through
+// `WebhooksService.emit` under the event id the listener chose, so a retried
+// job inserts no second delivery (`(endpointId, eventId)` is unique).
+// Server-only: it reads other people's endpoints and their owners' roles.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookFanoutHandler = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../jobs/index");
+const webhooks_constants_1 = require("../webhooks.constants");
+const webhooks_service_1 = require("../webhooks.service");
+/**
+ * The `webhooks.fanout` job. See the file header.
+ *
+ * @stability experimental
+ */
+let WebhookFanoutHandler = class WebhookFanoutHandler {
+    registry;
+    webhooks;
+    /** PERMANENT once jobs of this type exist. */
+    type = webhooks_constants_1.WEBHOOK_FANOUT_JOB_TYPE;
+    /** Its name in the jobs console. */
+    label = 'Webhook fan-out';
+    /** Reads a few rows and inserts a few; a minute and three attempts. */
+    profile = { maxRuntimeMs: 60_000, maxAttempts: 3 };
+    constructor(registry, webhooks) {
+        this.registry = registry;
+        this.webhooks = webhooks;
+    }
+    /** Registers the handler with the job registry. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Emits the event the job carries.
+     *
+     * @param job - the claimed job; its payload is a {@link WebhookFanoutPayload}.
+     */
+    async process(job) {
+        const payload = job.payload;
+        if (!payload || typeof payload.eventKey !== 'string')
+            throw new Error(`Job ${job.id} carries no webhook event`);
+        await this.webhooks.emit(payload.eventKey, payload.data, {
+            orgId: payload.orgId ?? job.orgId ?? null,
+            ...(payload.userId ? { userId: payload.userId } : {}),
+            eventId: payload.eventId,
+            occurredAt: new Date(payload.occurredAt),
+        });
+    }
+};
+exports.WebhookFanoutHandler = WebhookFanoutHandler;
+exports.WebhookFanoutHandler = WebhookFanoutHandler = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry,
+        webhooks_service_1.WebhooksService])
+], WebhookFanoutHandler);
+//# sourceMappingURL=webhook-fanout.handler.js.map

package/dist/webhooks/handlers/webhook-fanout.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-fanout.handler.js","sourceRoot":"","sources":["../../../src/webhooks/handlers/webhook-fanout.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oEAAoE;AACpE,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,sEAAsE;AACtE,4DAA4D;AAC5D,6EAA6E;AAC7E,sEAAsE;AACtE,0EAA0E;AAC1E,gFAAgF;;;;;;;;;;;;AAEhF,2CAA0D;AAE1D,4CAA2G;AAC3G,8DAAgE;AAChE,0DAAiF;AAEjF;;;;GAIG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAWZ;IACA;IAXnB,8CAA8C;IACrC,IAAI,GAAG,4CAAuB,CAAC;IAExC,oCAAoC;IAC3B,KAAK,GAAG,iBAAiB,CAAC;IAEnC,uEAAuE;IAC9D,OAAO,GAAwB,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAEjF,YACmB,QAA4B,EAC5B,QAAyB;QADzB,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,aAAQ,GAAR,QAAQ,CAAiB;IACzC,CAAC;IAEJ,mDAAmD;IACnD,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAiD,CAAC;QACtE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC;QAChH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE;YACvD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI;YACzC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAnCY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAYkB,0BAAkB;QAClB,kCAAe;GAZjC,oBAAoB,CAmChC"}

package/dist/webhooks/handlers/webhook-purge.handler.d.ts

@@ -0,0 +1,33 @@
+import { OnModuleInit } from '@nestjs/common';
+import { JobHandlerRegistry, type Job, type JobExecutionProfile, type JobHandler } from '../../jobs/index';
+import { type ResolvedWebhooksModuleOptions } from '../webhooks.options';
+import { WebhooksRepository } from '../webhooks.repository';
+/**
+ * The `webhooks.deliveries_purge` job. See the file header.
+ *
+ * @stability experimental
+ */
+export declare class WebhookPurgeHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    private readonly repository;
+    private readonly options;
+    private readonly logger;
+    /** PERMANENT once jobs of this type exist. */
+    readonly type = "webhooks.deliveries_purge";
+    /** Its name in the jobs console. */
+    readonly label = "Webhook delivery purge";
+    /** Deletes only; thirty minutes, three attempts. */
+    readonly profile: JobExecutionProfile;
+    /** Overridable clock, for tests. */
+    now: () => Date;
+    constructor(registry: JobHandlerRegistry, repository: WebhooksRepository, options: ResolvedWebhooksModuleOptions);
+    /** Registers the handler with the job registry. */
+    onModuleInit(): void;
+    /**
+     * Runs the purge.
+     *
+     * @param job - the claimed job.
+     */
+    process(job: Job): Promise<void>;
+}
+//# sourceMappingURL=webhook-purge.handler.d.ts.map

package/dist/webhooks/handlers/webhook-purge.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-purge.handler.d.ts","sourceRoot":"","sources":["../../../src/webhooks/handlers/webhook-purge.handler.ts"],"names":[],"mappings":"AAWA,OAAO,EAA8B,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,KAAK,GAAG,EAAE,KAAK,mBAAmB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE3G,OAAO,EAAoB,KAAK,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D;;;;GAIG;AACH,qBACa,mBAAoB,YAAW,UAAU,EAAE,YAAY;IAgBhE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IACD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAjBpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAE/D,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,+BAA0B;IAEvC,oCAAoC;IACpC,QAAQ,CAAC,KAAK,4BAA4B;IAE1C,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAiD;IAEtF,oCAAoC;IACpC,GAAG,EAAE,MAAM,IAAI,CAAoB;gBAGhB,QAAQ,EAAE,kBAAkB,EAC5B,UAAU,EAAE,kBAAkB,EACJ,OAAO,EAAE,6BAA6B;IAGnF,mDAAmD;IACnD,YAAY,IAAI,IAAI;IAIpB;;;;OAIG;IACG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;CAKvC"}

package/dist/webhooks/handlers/webhook-purge.handler.js

@@ -0,0 +1,77 @@
+"use strict";
+// =============================================================================
+// `webhooks.deliveries_purge`: the delivery retention (issue #1046)
+// =============================================================================
+//
+// Deletes delivery rows older than `deliveryRetentionDays`, oldest first, in
+// batches, across every organization (the bypass client, reason `retention`).
+// Queued once a day by `WebhookPurgeTask`, which only enqueues. Idempotent: a
+// run that stops early leaves the rest to the next. Server-only: it deletes
+// across tenants.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var WebhookPurgeHandler_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookPurgeHandler = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../jobs/index");
+const webhooks_constants_1 = require("../webhooks.constants");
+const webhooks_options_1 = require("../webhooks.options");
+const webhooks_repository_1 = require("../webhooks.repository");
+/**
+ * The `webhooks.deliveries_purge` job. See the file header.
+ *
+ * @stability experimental
+ */
+let WebhookPurgeHandler = WebhookPurgeHandler_1 = class WebhookPurgeHandler {
+    registry;
+    repository;
+    options;
+    logger = new common_1.Logger(WebhookPurgeHandler_1.name);
+    /** PERMANENT once jobs of this type exist. */
+    type = webhooks_constants_1.WEBHOOK_PURGE_JOB_TYPE;
+    /** Its name in the jobs console. */
+    label = 'Webhook delivery purge';
+    /** Deletes only; thirty minutes, three attempts. */
+    profile = { maxRuntimeMs: 30 * 60_000, maxAttempts: 3 };
+    /** Overridable clock, for tests. */
+    now = () => new Date();
+    constructor(registry, repository, options) {
+        this.registry = registry;
+        this.repository = repository;
+        this.options = options;
+    }
+    /** Registers the handler with the job registry. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Runs the purge.
+     *
+     * @param job - the claimed job.
+     */
+    async process(job) {
+        const cutoff = new Date(this.now().getTime() - this.options.deliveryRetentionDays * 24 * 3_600_000);
+        const deleted = await this.repository.purgeDeliveriesBefore(cutoff);
+        this.logger.log(`Webhook delivery purge removed ${deleted} row(s) created before ${cutoff.toISOString()} (job ${job.id})`);
+    }
+};
+exports.WebhookPurgeHandler = WebhookPurgeHandler;
+exports.WebhookPurgeHandler = WebhookPurgeHandler = WebhookPurgeHandler_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(2, (0, common_1.Inject)(webhooks_options_1.WEBHOOKS_OPTIONS)),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry,
+        webhooks_repository_1.WebhooksRepository, Object])
+], WebhookPurgeHandler);
+//# sourceMappingURL=webhook-purge.handler.js.map

package/dist/webhooks/handlers/webhook-purge.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-purge.handler.js","sourceRoot":"","sources":["../../../src/webhooks/handlers/webhook-purge.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oEAAoE;AACpE,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,kBAAkB;AAClB,gFAAgF;;;;;;;;;;;;;;;;AAEhF,2CAA0E;AAE1E,4CAA2G;AAC3G,8DAA+D;AAC/D,0DAA2F;AAC3F,gEAA4D;AAE5D;;;;GAIG;AAEI,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAgBX;IACA;IAC0B;IAjB5B,MAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;IAE/D,8CAA8C;IACrC,IAAI,GAAG,2CAAsB,CAAC;IAEvC,oCAAoC;IAC3B,KAAK,GAAG,wBAAwB,CAAC;IAE1C,oDAAoD;IAC3C,OAAO,GAAwB,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAEtF,oCAAoC;IACpC,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAEnC,YACmB,QAA4B,EAC5B,UAA8B,EACJ,OAAsC;QAFhE,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,eAAU,GAAV,UAAU,CAAoB;QACJ,YAAO,GAAP,OAAO,CAA+B;IAChF,CAAC;IAEJ,mDAAmD;IACnD,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kCAAkC,OAAO,0BAA0B,MAAM,CAAC,WAAW,EAAE,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7H,CAAC;CACF,CAAA;AApCY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAmBR,WAAA,IAAA,eAAM,EAAC,mCAAgB,CAAC,CAAA;qCAFE,0BAAkB;QAChB,wCAAkB;GAjBtC,mBAAmB,CAoC/B"}

package/dist/webhooks/http/admin-webhooks.controller.d.ts

@@ -0,0 +1,36 @@
+import { type RotateWebhookSecretResponse, type WebhookDeliveryDetail, type WebhookDeliveryList, type WebhookEndpoint, type WebhookEndpointCreated, type WebhookEndpointList, type WebhookEventCatalog, type WebhookTestResponse } from '@marinoscar/platform-contract/webhooks';
+import type { Principal } from '../../core/index';
+import { WebhookEndpointsService } from '../webhook-endpoints.service';
+import { CreateWebhookEndpointDto, UpdateWebhookEndpointDto, WebhookDeliveryListQueryDto } from './webhook.dto';
+/**
+ * The deployment-scope webhook routes. See the file header.
+ *
+ * @stability experimental
+ */
+export declare class AdminWebhooksController {
+    private readonly endpoints;
+    constructor(endpoints: WebhookEndpointsService);
+    /** The events the caller may subscribe to. */
+    events(principal: Principal | undefined): WebhookEventCatalog;
+    /** One delivery, with its payload. */
+    getDelivery(principal: Principal | undefined, deliveryId: string): Promise<WebhookDeliveryDetail>;
+    /** Sends a delivery again. */
+    redeliver(principal: Principal | undefined, deliveryId: string): Promise<WebhookDeliveryDetail>;
+    /** The caller's endpoints. */
+    list(principal: Principal | undefined): Promise<WebhookEndpointList>;
+    /** Creates an endpoint. */
+    create(principal: Principal | undefined, body: CreateWebhookEndpointDto): Promise<WebhookEndpointCreated>;
+    /** One endpoint. */
+    get(principal: Principal | undefined, id: string): Promise<WebhookEndpoint>;
+    /** Changes an endpoint. */
+    update(principal: Principal | undefined, id: string, body: UpdateWebhookEndpointDto): Promise<WebhookEndpoint>;
+    /** Deletes an endpoint. */
+    remove(principal: Principal | undefined, id: string): Promise<void>;
+    /** Rotates the signing secret. */
+    rotate(principal: Principal | undefined, id: string): Promise<RotateWebhookSecretResponse>;
+    /** Queues a test ping. */
+    test(principal: Principal | undefined, id: string): Promise<WebhookTestResponse>;
+    /** An endpoint's deliveries. */
+    deliveries(principal: Principal | undefined, id: string, query: WebhookDeliveryListQueryDto): Promise<WebhookDeliveryList>;
+}
+//# sourceMappingURL=admin-webhooks.controller.d.ts.map

package/dist/webhooks/http/admin-webhooks.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-webhooks.controller.d.ts","sourceRoot":"","sources":["../../../src/webhooks/http/admin-webhooks.controller.ts"],"names":[],"mappings":"AAoBA,OAAO,EAGL,KAAK,2BAA2B,EAEhC,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EAExB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,wCAAwC,CAAC;AAGhD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EACL,wBAAwB,EAExB,wBAAwB,EAGxB,2BAA2B,EAM5B,MAAM,eAAe,CAAC;AAKvB;;;;GAIG;AACH,qBAEa,uBAAuB;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,uBAAuB;IAE/D,8CAA8C;IAK9C,MAAM,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,mBAAmB;IAIjF,sCAAsC;IAOtC,WAAW,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAAsC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIzJ,8BAA8B;IAS9B,SAAS,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAAsC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIvJ,8BAA8B;IAKxB,IAAI,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI9F,2BAA2B;IAO3B,MAAM,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAAU,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAIrI,oBAAoB;IAOpB,GAAG,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAA8B,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3H,2BAA2B;IAS3B,MAAM,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAA8B,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC;IAItK,2BAA2B;IAQ3B,MAAM,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAA8B,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInH,kCAAkC;IAQlC,MAAM,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAA8B,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAI1I,0BAA0B;IAQ1B,IAAI,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAA8B,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIhI,gCAAgC;IAOhC,UAAU,CAAqB,SAAS,EAAE,SAAS,GAAG,SAAS,EAA8B,EAAE,EAAE,MAAM,EAAW,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAGpL"}