@nestarc/webhook 0.12.1 → 0.13.0

package/README.md

@@ -13,6 +13,7 @@ Outbound webhook delivery for NestJS — HMAC signing, exponential retry, circui
 ## Features
 
 - **Fan-out delivery** — one event to many endpoints
+- **Idempotent publish** — deduplicate producer retries with application keys
 - **HMAC-SHA256 signing** — Standard Webhooks compatible headers
 - **Secret rotation overlap** — sign with both old and new secrets during rotation windows
 - **Exponential backoff** — 30s, 5m, 30m, 2h, 24h (with jitter)
@@ -20,6 +21,8 @@ Outbound webhook delivery for NestJS — HMAC signing, exponential retry, circui
 - **Dead letter queue** — failed deliveries tracked for manual retry
 - **Delivery logs** — full audit trail (status code, latency, response body)
 - **Per-attempt audit log** — every attempt recorded with status, latency, response body, and errors
+- **Replay and bulk retry** — requeue failed deliveries or replay an event to active endpoints
+- **Retention and redaction controls** — purge stored payloads/response bodies and sanitize data before persistence
 - **Endpoint snapshotting** — queued deliveries keep their original URL and signing secret during retries
 - **Multi-instance safe** — `FOR UPDATE SKIP LOCKED` prevents duplicate delivery
 - **Graceful shutdown** — waits for in-flight deliveries on process exit
@@ -62,6 +65,14 @@ psql -d your_database -f node_modules/@nestarc/webhook/src/sql/migrations/v0.9.0
 
 See [CHANGELOG.md](./CHANGELOG.md) for release-specific migration notes.
 
+### Upgrading from versions before 0.13.0
+
+Existing databases need the v0.13.0 additive migration for idempotent publish keys, correlation IDs, and payload purge metadata:
+
+```bash
+psql -d your_database -f node_modules/@nestarc/webhook/src/sql/migrations/v0.13.0.sql
+```
+
 ## Quick Start
 
 ### 1. Register the module
@@ -143,6 +154,17 @@ export class OrderService {
 }
 ```
 
+Use an idempotency key when the producer may retry the same business operation:
+
+```typescript
+await this.webhooks.send(new OrderCreatedEvent(order.id, order.total), {
+  idempotencyKey: `order:${order.id}:created`,
+  correlationId: requestId,
+});
+```
+
+Duplicate sends with the same tenant, event type, and idempotency key return the existing event ID and do not enqueue duplicate deliveries.
+
 ### 4. Manage endpoints
 
 ```typescript
@@ -174,6 +196,8 @@ export class WebhookController {
 | `sendToTenant(tenantId, event)` | Publish to tenant-specific endpoints only |
 | `sendToEndpoints(endpointIds, event)` | Publish to specific endpoint IDs only |
 
+All publish methods accept optional `WebhookPublishOptions` with `idempotencyKey` and `correlationId`.
+
 ### WebhookEndpointAdminService
 
 | Method | Description |
@@ -193,6 +217,14 @@ export class WebhookController {
 | `getDeliveryLogs(endpointId, filters?)` | Query delivery history |
 | `getDeliveryAttempts(deliveryId)` | Query per-attempt audit records for a delivery |
 | `retryDelivery(deliveryId)` | Manually retry a failed delivery |
+| `retryFailedDeliveries(filters, options?)` | Requeue matching failed deliveries in bulk |
+| `replayEvent(eventId, options?)` | Create new delivery rows for an existing event and currently active endpoints |
+
+### WebhookRetentionAdminService
+
+| Method | Description |
+|--------|-------------|
+| `purgeExpiredData(now?)` | Apply configured retention policy and return purge counts |
 
 ### WebhookSigner
 
@@ -201,6 +233,7 @@ export class WebhookController {
 | `sign(eventId, timestamp, body, secret)` | Generate Standard Webhooks signature headers |
 | `signAll(eventId, timestamp, body, secrets[])` | Generate multi-signature headers for secret rotation overlap |
 | `verify(eventId, timestamp, body, secret, signature)` | Verify a webhook signature |
+| `verifyWithTolerance(eventId, timestamp, body, secret, signature, options)` | Verify a signature and reject timestamps outside `options.toleranceSeconds` |
 | `generateSecret()` | Generate a random base64 signing secret |
 
 > **Deprecated:** `WebhookAdminService` is a facade that delegates to `WebhookEndpointAdminService` and `WebhookDeliveryAdminService`. It has been deprecated since `v0.2.0` and will be removed in `v1.0.0`.
@@ -224,6 +257,11 @@ export class WebhookController {
 | `polling.drainWhileBacklogged` | `false` | Keep claiming additional batches inside one poll while backlog and capacity remain |
 | `polling.maxDrainLoopsPerPoll` | `1`, or `10` when drain mode is enabled | Max claim loops inside one poll cycle |
 | `polling.drainLoopDelayMs` | `0` | Optional delay between drain loops |
+| `retention.eventPayloadRetentionDays` | — | Replace terminal event payloads with `{}` after this many days. Disabled unless set. |
+| `retention.deliveryResponseBodyRetentionDays` | — | Clear terminal delivery response bodies after this many days. Disabled unless set. |
+| `retention.attemptResponseBodyRetentionDays` | — | Clear attempt response bodies after this many days. Disabled unless set. |
+| `redaction.sanitizePayload` | — | Minimize payload before persistence and delivery. This changes delivered content. |
+| `redaction.sanitizeResponseBody` | — | Sanitize or suppress response bodies before storing delivery and attempt rows. |
 | `allowPrivateUrls` | `false` | Allow private/internal URLs (dev/test only) |
 | `secretVault` | `PlaintextSecretVault` | Custom vault for encrypting/decrypting endpoint secrets at rest |
 | `onDeliveryFailed` | — | Fire-and-forget callback when a delivery exhausts retries or receives a non-retryable response. Receives `DeliveryFailedContext` (`tenantId` is `null` for global endpoints). See **Delivery failure classification** below. |
@@ -274,6 +312,52 @@ const summary = await deliveryRepository.getBacklogSummary?.();
 
 The summary includes `pendingCount`, `sendingCount`, `runnablePendingCount`, `oldestPendingAgeMs`, and `oldestRunnableAgeMs`.
 
+### Manual Retry, Bulk Retry, And Replay
+
+```ts
+await deliveryAdmin.retryDelivery(deliveryId, {
+  reason: 'customer requested retry',
+});
+
+await deliveryAdmin.retryFailedDeliveries({
+  endpointId,
+  eventType: 'order.created',
+  limit: 100,
+});
+
+await deliveryAdmin.replayEvent(eventId, {
+  tenantId: 'tenant_123',
+  reason: 'customer support replay',
+});
+```
+
+Manual retries only requeue failed deliveries. Event replay reuses the original event ID and creates new delivery rows for currently active matching endpoints using their current URL and signing secret snapshots.
+
+### Retention And Redaction
+
+Retention is disabled unless configured. Applications can call `WebhookRetentionAdminService.purgeExpiredData()` from their own scheduler:
+
+```ts
+WebhookModule.forRoot({
+  prisma,
+  retention: {
+    eventPayloadRetentionDays: 30,
+    deliveryResponseBodyRetentionDays: 14,
+    attemptResponseBodyRetentionDays: 7,
+  },
+  redaction: {
+    sanitizePayload(payload) {
+      return { ...payload, email: undefined };
+    },
+    sanitizeResponseBody() {
+      return null;
+    },
+  },
+});
+```
+
+`sanitizePayload` runs before persistence and dispatch, so it changes the delivered webhook payload. Review retention and redaction policies with your security and legal teams before storing sensitive data.
+
 Webhook receiver responses are classified before scheduling another attempt:
 
 | Response | Behavior |
@@ -412,6 +496,19 @@ const isValid = signer.verify(
 );
 ```
 
+To reject replayed signatures, use an explicit timestamp tolerance:
+
+```ts
+const isValidFreshRequest = signer.verifyWithTolerance(
+  headers['webhook-id'],
+  Number(headers['webhook-timestamp']),
+  rawBody,
+  signingSecret,
+  headers['webhook-signature'],
+  { toleranceSeconds: 300 },
+);
+```
+
 ### Delivery audit data
 
 Delivery logs expose the snapshotted destination URL through `DeliveryRecord.destinationUrl`. Per-attempt audit records are available through `WebhookDeliveryAdminService.getDeliveryAttempts(deliveryId)`:

package/dist/adapters/fetch-http-client.d.ts

@@ -1,6 +1,6 @@
-import { WebhookHttpClient } from '../ports/webhook-http-client';
+import { WebhookHttpClient, WebhookHttpClientRequestOptions } from '../ports/webhook-http-client';
 import { DeliveryResult } from '../interfaces/webhook-delivery.interface';
 export declare class FetchHttpClient implements WebhookHttpClient {
-    post(url: string, headers: Record<string, string>, body: string, timeout: number): Promise<DeliveryResult>;
+    post(url: string, headers: Record<string, string>, body: string, timeout: number, options?: WebhookHttpClientRequestOptions): Promise<DeliveryResult>;
 }
 //# sourceMappingURL=fetch-http-client.d.ts.map

package/dist/adapters/fetch-http-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-http-client.d.ts","sourceRoot":"","sources":["../../src/adapters/fetch-http-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAM1E,qBACa,eAAgB,YAAW,iBAAiB;IACjD,IAAI,CACR,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC;CAuC3B"}
+{"version":3,"file":"fetch-http-client.d.ts","sourceRoot":"","sources":["../../src/adapters/fetch-http-client.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,iBAAiB,EACjB,+BAA+B,EAChC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAW1E,qBACa,eAAgB,YAAW,iBAAiB;IACjD,IAAI,CACR,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,+BAA+B,GACxC,OAAO,CAAC,cAAc,CAAC;CAgF3B"}

package/dist/adapters/fetch-http-client.js

@@ -1,56 +1,192 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
 var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
     var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
     if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FetchHttpClient = void 0;
 const common_1 = require("@nestjs/common");
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const net = __importStar(require("net"));
 const webhook_constants_1 = require("../webhook.constants");
 let FetchHttpClient = class FetchHttpClient {
-    async post(url, headers, body, timeout) {
-        const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), timeout);
+    async post(url, headers, body, timeout, options) {
         const start = Date.now();
-        try {
-            const response = await fetch(url, {
+        return new Promise((resolve) => {
+            let settled = false;
+            let timeoutId;
+            const parsed = new URL(url);
+            const isHttps = parsed.protocol === 'https:';
+            const transport = isHttps ? https : http;
+            const hostname = parsed.hostname.replace(/^\[|\]$/g, '');
+            const lookup = createPinnedLookup(options?.resolvedIpAddresses);
+            const finish = (result) => {
+                if (settled) {
+                    return;
+                }
+                settled = true;
+                if (timeoutId) {
+                    clearTimeout(timeoutId);
+                }
+                resolve(result);
+            };
+            const request = transport.request({
+                protocol: parsed.protocol,
+                hostname,
+                port: parsed.port,
+                path: `${parsed.pathname}${parsed.search}`,
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
                     'User-Agent': webhook_constants_1.DEFAULT_USER_AGENT,
                     ...headers,
                 },
-                body,
-                signal: controller.signal,
-                redirect: 'manual',
+                lookup,
+                servername: isHttps ? hostname : undefined,
+            }, (response) => {
+                const latencyMs = Date.now() - start;
+                readLimitedResponseBody(response)
+                    .then((responseBody) => {
+                    finish({
+                        success: response.statusCode !== undefined &&
+                            response.statusCode >= 200 &&
+                            response.statusCode < 300,
+                        statusCode: response.statusCode,
+                        body: responseBody,
+                        latencyMs,
+                    });
+                })
+                    .catch((error) => {
+                    finish({
+                        success: false,
+                        latencyMs,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                });
             });
-            const latencyMs = Date.now() - start;
-            const responseBody = await response.text();
-            return {
-                success: response.status >= 200 && response.status < 300,
-                statusCode: response.status,
-                body: responseBody.slice(0, webhook_constants_1.RESPONSE_BODY_MAX_LENGTH),
-                latencyMs,
-            };
-        }
-        catch (error) {
-            const latencyMs = Date.now() - start;
-            const message = error instanceof Error ? error.message : String(error);
-            return {
-                success: false,
-                latencyMs,
-                error: message,
-            };
-        }
-        finally {
-            clearTimeout(timeoutId);
-        }
+            request.on('error', (error) => {
+                finish({
+                    success: false,
+                    latencyMs: Date.now() - start,
+                    error: error.message,
+                });
+            });
+            request.setTimeout(timeout, () => {
+                request.destroy(new Error('Request timed out'));
+            });
+            timeoutId = setTimeout(() => {
+                request.destroy(new Error('Request timed out'));
+            }, timeout);
+            request.write(body);
+            request.end();
+        });
     }
 };
 exports.FetchHttpClient = FetchHttpClient;
 exports.FetchHttpClient = FetchHttpClient = __decorate([
     (0, common_1.Injectable)()
 ], FetchHttpClient);
+function createPinnedLookup(addresses) {
+    const pinned = (addresses ?? [])
+        .map((address) => {
+        const family = net.isIP(address);
+        return family === 4 || family === 6 ? { address, family } : null;
+    })
+        .filter((address) => address !== null);
+    if (pinned.length === 0) {
+        return undefined;
+    }
+    return (_hostname, lookupOptions, callback) => {
+        const options = typeof lookupOptions === 'number'
+            ? { family: lookupOptions, all: false }
+            : lookupOptions;
+        const family = options?.family === 4 || options?.family === 6
+            ? options.family
+            : undefined;
+        const matches = family
+            ? pinned.filter((address) => address.family === family)
+            : pinned;
+        if (matches.length === 0) {
+            const error = new Error('No prevalidated address matches requested family');
+            error.code = 'ENOTFOUND';
+            callback(error, '', family ?? 0);
+            return;
+        }
+        if (typeof options === 'object' && options.all) {
+            callback(null, matches, 0);
+            return;
+        }
+        callback(null, matches[0].address, matches[0].family);
+    };
+}
+function readLimitedResponseBody(response) {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        let settled = false;
+        const finish = (result) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            resolve(result);
+        };
+        response.setEncoding('utf8');
+        response.on('data', (chunk) => {
+            if (settled) {
+                return;
+            }
+            const remaining = webhook_constants_1.RESPONSE_BODY_MAX_LENGTH - body.length;
+            if (remaining > 0) {
+                body += chunk.slice(0, remaining);
+            }
+            if (body.length >= webhook_constants_1.RESPONSE_BODY_MAX_LENGTH) {
+                finish(body);
+                response.destroy();
+            }
+        });
+        response.on('end', () => finish(body));
+        response.on('error', (error) => {
+            if (!settled) {
+                settled = true;
+                reject(error);
+            }
+        });
+    });
+}
 //# sourceMappingURL=fetch-http-client.js.map

package/dist/adapters/fetch-http-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-http-client.js","sourceRoot":"","sources":["../../src/adapters/fetch-http-client.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAG5C,4DAG8B;AAGvB,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,KAAK,CAAC,IAAI,CACR,GAAW,EACX,OAA+B,EAC/B,IAAY,EACZ,OAAe;QAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,sCAAkB;oBAChC,GAAG,OAAO;iBACX;gBACD,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACrC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,OAAO;gBACL,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBACxD,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,4CAAwB,CAAC;gBACrD,SAAS;aACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS;gBACT,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;CACF,CAAA;AA7CY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CA6C3B"}
+{"version":3,"file":"fetch-http-client.js","sourceRoot":"","sources":["../../src/adapters/fetch-http-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA6B;AAC7B,6CAA+B;AAC/B,yCAA2B;AAM3B,4DAG8B;AAQvB,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,KAAK,CAAC,IAAI,CACR,GAAW,EACX,OAA+B,EAC/B,IAAY,EACZ,OAAe,EACf,OAAyC;QAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,OAAO,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;YAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,SAAqC,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAEhE,MAAM,MAAM,GAAG,CAAC,MAAsB,EAAQ,EAAE;gBAC9C,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAC/B;gBACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,sCAAkB;oBAChC,GAAG,OAAO;iBACX;gBACD,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aAC3C,EACD,CAAC,QAAQ,EAAE,EAAE;gBACX,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACrC,uBAAuB,CAAC,QAAQ,CAAC;qBAC9B,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE;oBACrB,MAAM,CAAC;wBACL,OAAO,EAAE,QAAQ,CAAC,UAAU,KAAK,SAAS;4BACxC,QAAQ,CAAC,UAAU,IAAI,GAAG;4BAC1B,QAAQ,CAAC,UAAU,GAAG,GAAG;wBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;wBAC/B,IAAI,EAAE,YAAY;wBAClB,SAAS;qBACV,CAAC,CAAC;gBACL,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACxB,MAAM,CAAC;wBACL,OAAO,EAAE,KAAK;wBACd,SAAS;wBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CACF,CAAC;YAEF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,MAAM,CAAC;oBACL,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC7B,KAAK,EAAE,KAAK,CAAC,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC/B,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YACH,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAClD,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAvFY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CAuF3B;AAED,SAAS,kBAAkB,CACzB,SAAoB;IAEpB,MAAM,MAAM,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;SAC7B,GAAG,CAAC,CAAC,OAAO,EAAwB,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,OAAO,EAA4B,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAEnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,OAAO,aAAa,KAAK,QAAQ;YAC/C,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE;YACvC,CAAC,CAAC,aAAa,CAAC;QAClB,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,KAAK,CAAC,IAAI,OAAO,EAAE,MAAM,KAAK,CAAC;YAC3D,CAAC,CAAC,OAAO,CAAC,MAAM;YAChB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,MAAM;YACpB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;YACvD,CAAC,CAAC,MAAM,CAAC;QAEX,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,kDAAkD,CACnD,CAAC;YACxB,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC;YACzB,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,EAAE,OAAgB,EAAE,CAAC,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,QAA8B;IAC7D,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,MAAc,EAAQ,EAAE;YACtC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC7B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACpC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,4CAAwB,GAAG,IAAI,CAAC,MAAM,CAAC;YACzD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,IAAI,4CAAwB,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,CAAC;gBACb,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/prisma-delivery.repository.d.ts

@@ -1,5 +1,6 @@
 import { ClaimedDelivery, DeliveryBacklogSummary, PendingDelivery, WebhookDeliveryRepository, WebhookTransaction } from '../ports/webhook-delivery.repository';
-import { DeliveryAttemptRecord, DeliveryLogFilters, DeliveryRecord, DeliveryResult } from '../interfaces/webhook-delivery.interface';
+import { DeliveryAttemptRecord, DeliveryLogFilters, DeliveryRecord, DeliveryResult, ReplayEventOptions, ReplayEventResult, RetryDeliveryOptions, RetryFailedDeliveriesFilters, RetryFailedDeliveriesResult, WebhookRetentionPurgeResult } from '../interfaces/webhook-delivery.interface';
+import { WebhookRedactionOptions, WebhookRetentionOptions } from '../interfaces/webhook-options.interface';
 import { WebhookSecretVault } from '../ports/webhook-secret-vault';
 type AttemptLogClient = {
     $executeRaw: <T = unknown>(strings: TemplateStringsArray, ...values: unknown[]) => Promise<T>;
@@ -7,7 +8,8 @@ type AttemptLogClient = {
 export declare class PrismaDeliveryRepository implements WebhookDeliveryRepository {
     protected readonly prisma: any;
     protected readonly vault?: WebhookSecretVault | undefined;
-    constructor(prisma: any, vault?: WebhookSecretVault | undefined);
+    protected readonly redaction?: WebhookRedactionOptions | undefined;
+    constructor(prisma: any, vault?: WebhookSecretVault | undefined, redaction?: WebhookRedactionOptions | undefined);
     createDeliveriesInTransaction(tx: any, eventId: string, endpointIds: string[], maxAttempts: number): Promise<void>;
     runInTransaction<T>(fn: (tx: WebhookTransaction) => Promise<T>): Promise<T>;
     claimPendingDeliveries(batchSize: number): Promise<ClaimedDelivery[]>;
@@ -19,9 +21,13 @@ export declare class PrismaDeliveryRepository implements WebhookDeliveryReposito
     getBacklogSummary(): Promise<DeliveryBacklogSummary>;
     getDeliveryLogs(endpointId: string, filters?: DeliveryLogFilters): Promise<DeliveryRecord[]>;
     getDeliveryAttempts(deliveryId: string): Promise<DeliveryAttemptRecord[]>;
-    retryDelivery(deliveryId: string): Promise<boolean>;
+    retryDelivery(deliveryId: string, _options?: RetryDeliveryOptions): Promise<boolean>;
+    retryFailedDeliveries(filters: RetryFailedDeliveriesFilters, _options?: RetryDeliveryOptions): Promise<RetryFailedDeliveriesResult>;
+    replayEvent(eventId: string, options?: ReplayEventOptions): Promise<ReplayEventResult>;
+    purgeExpiredData(options: WebhookRetentionOptions, now?: Date): Promise<WebhookRetentionPurgeResult>;
     createTestDelivery(eventId: string, endpointId: string): Promise<void>;
     protected appendAttemptLog(client: AttemptLogClient, deliveryId: string, attempts: number, status: 'PENDING' | 'SENT' | 'FAILED', result: DeliveryResult): Promise<void>;
+    private sanitizeDeliveryResult;
 }
 export {};
 //# sourceMappingURL=prisma-delivery.repository.d.ts.map

package/dist/adapters/prisma-delivery.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prisma-delivery.repository.d.ts","sourceRoot":"","sources":["../../src/adapters/prisma-delivery.repository.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,cAAc,EACf,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGnE,KAAK,gBAAgB,GAAG;IACtB,WAAW,EAAE,CAAC,CAAC,GAAG,OAAO,EACvB,OAAO,EAAE,oBAAoB,EAC7B,GAAG,MAAM,EAAE,OAAO,EAAE,KACjB,OAAO,CAAC,CAAC,CAAC,CAAC;CACjB,CAAC;AA4CF,qBACa,wBAAyB,YAAW,yBAAyB;IAEtE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG;IAC9B,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB;gBAD1B,MAAM,EAAE,GAAG,EACX,KAAK,CAAC,EAAE,kBAAkB,YAAA;IAGzC,6BAA6B,CACjC,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EAAE,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAqCV,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3E,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAqBrE,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA4CnE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrF,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBvF,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;IAeV,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA2D9D,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAwEpD,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,cAAc,EAAE,CAAC;IAmDtB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAkBzE,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQnD,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cA+B5D,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,EACrC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;CA0BjB"}
+{"version":3,"file":"prisma-delivery.repository.d.ts","sourceRoot":"","sources":["../../src/adapters/prisma-delivery.repository.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC5B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAMnE,KAAK,gBAAgB,GAAG;IACtB,WAAW,EAAE,CAAC,CAAC,GAAG,OAAO,EACvB,OAAO,EAAE,oBAAoB,EAC7B,GAAG,MAAM,EAAE,OAAO,EAAE,KACjB,OAAO,CAAC,CAAC,CAAC,CAAC;CACjB,CAAC;AA+DF,qBACa,wBAAyB,YAAW,yBAAyB;IAEtE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG;IAC9B,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB;IAC7C,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB;gBAFnC,MAAM,EAAE,GAAG,EACX,KAAK,CAAC,EAAE,kBAAkB,YAAA,EAC1B,SAAS,CAAC,EAAE,uBAAuB,YAAA;IAGlD,6BAA6B,CACjC,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EAAE,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAyCV,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3E,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAqBrE,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA4CnE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAerF,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBvF,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;IAgBV,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA2D9D,iBAAiB,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAwEpD,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,cAAc,EAAE,CAAC;IAmDtB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAkBzE,aAAa,CACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,oBAAoB,GAC9B,OAAO,CAAC,OAAO,CAAC;IAUb,qBAAqB,CACzB,OAAO,EAAE,4BAA4B,EACrC,QAAQ,CAAC,EAAE,oBAAoB,GAC9B,OAAO,CAAC,2BAA2B,CAAC;IAoEjC,WAAW,CACf,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,iBAAiB,CAAC;IA8EvB,gBAAgB,CACpB,OAAO,EAAE,uBAAuB,EAChC,GAAG,OAAa,GACf,OAAO,CAAC,2BAA2B,CAAC;IAmEjC,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cA+B5D,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,EACrC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;IA2BhB,OAAO,CAAC,sBAAsB;CAoB/B"}