@mnemom/mnemom 0.10.0 → 0.12.0

package/dist/commands/webhooks.js

@@ -0,0 +1,328 @@
+/**
+ * `mnemom webhooks ...` commands — Track 2 W3.5.
+ *
+ *   mnemom webhooks list <org_id>                              — list endpoints
+ *   mnemom webhooks get <org_id> <endpoint_id>                 — show one
+ *   mnemom webhooks create <org_id> --url <u> [--events <list>]
+ *                                              [--description <d>]
+ *   mnemom webhooks update <org_id> <endpoint_id> [--url <u>]
+ *                                                  [--events <list>]
+ *                                                  [--active <bool>]
+ *   mnemom webhooks delete <org_id> <endpoint_id>              — remove endpoint
+ *   mnemom webhooks rotate-secret <org_id> <endpoint_id>       — mint new secret
+ *   mnemom webhooks list-deliveries <org_id> [--endpoint <id>] [--limit <n>]
+ *   mnemom webhooks redeliver <org_id> <delivery_id>           — retry one delivery
+ *   mnemom webhooks replay <org_id> <event_id> [--endpoint <id>...]
+ *   mnemom webhooks trigger <org_id> <endpoint_id>             — fire a test event
+ *
+ * Every mutation auto-generates a fresh `Idempotency-Key`. Re-running the
+ * same command does NOT replay the cache (you'd need to keep the key
+ * around for that — the curl/programmatic clients do); for the typical
+ * CLI ergonomic path, each invocation is its own logical mutation.
+ */
+import { listWebhookEndpoints, getWebhookEndpoint, createWebhookEndpoint, updateWebhookEndpoint, deleteWebhookEndpoint, rotateWebhookSecret, testWebhookEndpoint, listWebhookDeliveries, redeliverWebhookEvent, replayWebhookEvent, } from "../lib/webhooks-api.js";
+import { requireAuth } from "../lib/auth.js";
+import { fmt } from "../lib/format.js";
+function parseEventList(value) {
+    if (!value)
+        return undefined;
+    return value
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+function fail(msg) {
+    console.log(fmt.error(msg) + "\n");
+    process.exit(1);
+}
+function shortenSecret(secret) {
+    if (!secret)
+        return "—";
+    if (secret.length <= 16)
+        return secret;
+    return `${secret.slice(0, 8)}…${secret.slice(-4)}`;
+}
+function formatTime(ts) {
+    if (!ts)
+        return "—";
+    try {
+        return new Date(ts).toISOString().replace("T", " ").slice(0, 19) + "Z";
+    }
+    catch {
+        return ts;
+    }
+}
+// ─── list ────────────────────────────────────────────────────────────────
+export async function webhooksListCommand(orgId, opts = {}) {
+    await requireAuth();
+    let endpoints;
+    try {
+        endpoints = await listWebhookEndpoints(orgId);
+    }
+    catch (err) {
+        fail(`Failed to list endpoints: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(endpoints, null, 2));
+        return;
+    }
+    console.log(fmt.header(`Webhook endpoints — org ${orgId}`));
+    console.log();
+    if (endpoints.length === 0) {
+        console.log("  No endpoints configured. Create one with `mnemom webhooks create`.\n");
+        return;
+    }
+    const idW = 26;
+    const urlW = 44;
+    const eventsW = 8;
+    const activeW = 8;
+    console.log("Endpoint".padEnd(idW) +
+        "URL".padEnd(urlW) +
+        "Events".padEnd(eventsW) +
+        "Active".padEnd(activeW));
+    console.log("─".repeat(idW + urlW + eventsW + activeW));
+    for (const ep of endpoints) {
+        const url = ep.url.length > urlW - 1 ? ep.url.slice(0, urlW - 4) + "…" : ep.url;
+        console.log(ep.endpoint_id.padEnd(idW) +
+            url.padEnd(urlW) +
+            String(ep.event_types.length).padEnd(eventsW) +
+            (ep.is_active ? "yes" : "no").padEnd(activeW));
+    }
+    console.log();
+}
+// ─── get ─────────────────────────────────────────────────────────────────
+export async function webhooksGetCommand(orgId, endpointId, opts = {}) {
+    await requireAuth();
+    let ep;
+    try {
+        ep = await getWebhookEndpoint(orgId, endpointId);
+    }
+    catch (err) {
+        fail(`Failed to fetch endpoint: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(ep, null, 2));
+        return;
+    }
+    console.log(fmt.header(`Webhook endpoint ${ep.endpoint_id}`));
+    console.log();
+    console.log(`  URL          ${ep.url}`);
+    console.log(`  Description  ${ep.description || "(none)"}`);
+    console.log(`  Events       ${ep.event_types.length === 0 ? "(none)" : ep.event_types.join(", ")}`);
+    console.log(`  Active       ${ep.is_active ? "yes" : "no"}`);
+    console.log(`  Failures     ${ep.consecutive_failures}`);
+    if (ep.disabled_at) {
+        console.log(`  Disabled at  ${formatTime(ep.disabled_at)} — ${ep.disabled_reason ?? "(no reason)"}`);
+    }
+    console.log(`  Created      ${formatTime(ep.created_at)}`);
+    console.log(`  Updated      ${formatTime(ep.updated_at)}`);
+    if (ep.signing_secret) {
+        console.log(`  Secret       ${shortenSecret(ep.signing_secret)} (shown only on create / rotate)`);
+    }
+    console.log();
+}
+// ─── create ──────────────────────────────────────────────────────────────
+export async function webhooksCreateCommand(orgId, opts = {}) {
+    await requireAuth();
+    if (!opts.url)
+        fail("--url is required (HTTPS only; private/internal IPs blocked)");
+    let created;
+    try {
+        created = await createWebhookEndpoint(orgId, {
+            url: opts.url,
+            description: opts.description,
+            event_types: parseEventList(opts.events),
+        });
+    }
+    catch (err) {
+        fail(`Failed to create endpoint: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(created, null, 2));
+        return;
+    }
+    console.log(fmt.success("Webhook endpoint created"));
+    console.log();
+    console.log(`  Endpoint ID    ${created.endpoint_id}`);
+    console.log(`  URL            ${created.url}`);
+    console.log(`  Events         ${created.event_types.length === 0 ? "(none — explicit per-event opt-in required)" : created.event_types.join(", ")}`);
+    if (created.signing_secret) {
+        console.log();
+        console.log(fmt.warn("Signing secret (shown ONCE — store it now):"));
+        console.log(`  ${created.signing_secret}`);
+    }
+    console.log();
+}
+// ─── update ──────────────────────────────────────────────────────────────
+export async function webhooksUpdateCommand(orgId, endpointId, opts = {}) {
+    await requireAuth();
+    const body = {};
+    if (opts.url !== undefined)
+        body.url = opts.url;
+    if (opts.description !== undefined)
+        body.description = opts.description;
+    const events = parseEventList(opts.events);
+    if (events !== undefined)
+        body.event_types = events;
+    if (opts.active !== undefined) {
+        if (opts.active === "true")
+            body.is_active = true;
+        else if (opts.active === "false")
+            body.is_active = false;
+        else
+            fail("--active must be 'true' or 'false'");
+    }
+    if (Object.keys(body).length === 0)
+        fail("Nothing to update — pass --url / --events / --description / --active.");
+    let updated;
+    try {
+        updated = await updateWebhookEndpoint(orgId, endpointId, body);
+    }
+    catch (err) {
+        fail(`Failed to update endpoint: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(updated, null, 2));
+        return;
+    }
+    console.log(fmt.success(`Updated endpoint ${updated.endpoint_id}`));
+    console.log();
+}
+// ─── delete ──────────────────────────────────────────────────────────────
+export async function webhooksDeleteCommand(orgId, endpointId) {
+    await requireAuth();
+    try {
+        await deleteWebhookEndpoint(orgId, endpointId);
+    }
+    catch (err) {
+        fail(`Failed to delete endpoint: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    console.log(fmt.success(`Deleted endpoint ${endpointId}`));
+    console.log();
+}
+// ─── rotate-secret ───────────────────────────────────────────────────────
+export async function webhooksRotateSecretCommand(orgId, endpointId, opts = {}) {
+    await requireAuth();
+    let result;
+    try {
+        result = await rotateWebhookSecret(orgId, endpointId);
+    }
+    catch (err) {
+        fail(`Failed to rotate secret: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    console.log(fmt.success(`Rotated signing secret for ${result.endpoint_id}`));
+    console.log();
+    console.log(fmt.warn("New signing secret (shown ONCE — store it now):"));
+    console.log(`  ${result.signing_secret}`);
+    console.log();
+}
+// ─── trigger (test) ──────────────────────────────────────────────────────
+export async function webhooksTriggerCommand(orgId, endpointId, opts = {}) {
+    await requireAuth();
+    let result;
+    try {
+        result = await testWebhookEndpoint(orgId, endpointId);
+    }
+    catch (err) {
+        fail(`Failed to trigger test: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    if (result.success) {
+        console.log(fmt.success(`Test delivery succeeded — receiver returned ${result.status} in ${result.latency_ms}ms`));
+    }
+    else {
+        console.log(fmt.error(`Test delivery failed — status ${result.status ?? "(no response)"}`));
+        if (result.error)
+            console.log(`  ${result.error}`);
+    }
+    console.log();
+}
+// ─── list-deliveries ─────────────────────────────────────────────────────
+export async function webhooksListDeliveriesCommand(orgId, opts = {}) {
+    await requireAuth();
+    const limit = opts.limit ? parseInt(opts.limit, 10) : undefined;
+    const offset = opts.offset ? parseInt(opts.offset, 10) : undefined;
+    let deliveries;
+    try {
+        deliveries = await listWebhookDeliveries(orgId, {
+            endpointId: opts.endpoint,
+            limit: limit && !Number.isNaN(limit) ? limit : undefined,
+            offset: offset && !Number.isNaN(offset) ? offset : undefined,
+        });
+    }
+    catch (err) {
+        fail(`Failed to list deliveries: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(deliveries, null, 2));
+        return;
+    }
+    console.log(fmt.header(`Webhook deliveries — org ${orgId}`));
+    console.log();
+    if (deliveries.length === 0) {
+        console.log("  No deliveries on record.\n");
+        return;
+    }
+    for (const d of deliveries) {
+        const ts = formatTime(d.last_attempt_at ?? d.created_at);
+        console.log(`  ${d.delivery_id}  ${d.status.padEnd(10)} → endpoint ${d.endpoint_id} (${ts})`);
+    }
+    console.log();
+}
+// ─── redeliver ───────────────────────────────────────────────────────────
+export async function webhooksRedeliverCommand(orgId, deliveryId, opts = {}) {
+    await requireAuth();
+    let result;
+    try {
+        result = await redeliverWebhookEvent(orgId, deliveryId);
+    }
+    catch (err) {
+        fail(`Failed to redeliver: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    console.log(fmt.success(`Redelivery queued — new delivery_id ${result.delivery_id} (status ${result.status})`));
+    console.log();
+}
+// ─── replay ──────────────────────────────────────────────────────────────
+export async function webhooksReplayCommand(orgId, eventId, opts = {}) {
+    await requireAuth();
+    let result;
+    try {
+        result = await replayWebhookEvent(orgId, eventId, { endpointIds: opts.endpoint });
+    }
+    catch (err) {
+        fail(`Failed to replay event: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    console.log(fmt.header(`Replay — event ${eventId} (${result.event_type})`));
+    console.log();
+    if (result.deliveries.length === 0) {
+        console.log("  " + (result.message ?? "No subscribed endpoints to replay to."));
+        console.log();
+        return;
+    }
+    for (const d of result.deliveries) {
+        console.log(`  ✓ ${d.delivery_id} → endpoint ${d.endpoint_id}`);
+    }
+    if (result.failed_endpoints && result.failed_endpoints.length > 0) {
+        console.log();
+        console.log(fmt.warn("Failed endpoints:"));
+        for (const f of result.failed_endpoints) {
+            console.log(`  ✗ ${f.endpoint_id}: ${f.error}`);
+        }
+    }
+    console.log();
+}