@nestarc/webhook 0.9.0 → 0.10.0

package/README.md

@@ -6,14 +6,21 @@ Outbound webhook delivery for NestJS — HMAC signing, exponential retry, circui
 
 [![CI](https://github.com/nestarc/webhook/actions/workflows/ci.yml/badge.svg)](https://github.com/nestarc/webhook/actions/workflows/ci.yml)
 
+[Changelog](./CHANGELOG.md) · [Security policy](./SECURITY.md)
+
+> **Pre-1.0:** minor version bumps may include breaking changes. Pin exact versions in production until `1.0.0`.
+
 ## Features
 
 - **Fan-out delivery** — one event to many endpoints
 - **HMAC-SHA256 signing** — Standard Webhooks compatible headers
+- **Secret rotation overlap** — sign with both old and new secrets during rotation windows
 - **Exponential backoff** — 30s, 5m, 30m, 2h, 24h (with jitter)
 - **Circuit breaker** — auto-disable failing endpoints, auto-recover after cooldown
 - **Dead letter queue** — failed deliveries tracked for manual retry
 - **Delivery logs** — full audit trail (status code, latency, response body)
+- **Per-attempt audit log** — every attempt recorded with status, latency, response body, and errors
+- **Endpoint snapshotting** — queued deliveries keep their original URL and signing secret during retries
 - **Multi-instance safe** — `FOR UPDATE SKIP LOCKED` prevents duplicate delivery
 - **Graceful shutdown** — waits for in-flight deliveries on process exit
 - **SSRF defense** — DNS resolution validation at registration and dispatch time
@@ -41,10 +48,20 @@ Run the migration SQL against your PostgreSQL database:
 psql -d your_database -f node_modules/@nestarc/webhook/src/sql/create-webhook-tables.sql
 ```
 
-This creates three tables: `webhook_endpoints`, `webhook_events`, `webhook_deliveries`.
+This creates four tables: `webhook_endpoints`, `webhook_events`, `webhook_deliveries`, and `webhook_delivery_attempts`.
 
 The migration includes `CREATE EXTENSION IF NOT EXISTS pgcrypto` for PostgreSQL < 13 compatibility.
 
+### Upgrading from versions before 0.9.0
+
+Existing databases need the v0.9.0 additive migration for per-attempt audit logs, endpoint snapshots, and secret rotation overlap:
+
+```bash
+psql -d your_database -f node_modules/@nestarc/webhook/src/sql/migrations/v0.9.0.sql
+```
+
+See [CHANGELOG.md](./CHANGELOG.md) for release-specific migration notes.
+
 ## Quick Start
 
 ### 1. Register the module
@@ -55,11 +72,12 @@ import { WebhookModule } from '@nestarc/webhook';
 @Module({
   imports: [
     WebhookModule.forRoot({
+      // prismaService is your PrismaClient/PrismaService instance.
+      // See "Async configuration" below for NestJS DI wiring.
       prisma: prismaService,
       delivery: {
         timeout: 10_000,
         maxRetries: 5,
-        backoff: 'exponential',
         jitter: true,
       },
       circuitBreaker: {
@@ -126,7 +144,8 @@ export class WebhookController {
     return this.endpointAdmin.createEndpoint({
       url: 'https://customer.com/webhooks',
       events: ['order.created', 'order.paid'],
-      secret: 'auto',
+      tenantId: 'tenant_123', // optional; omit for global endpoints (returned as null)
+      secret: 'auto', // case-sensitive; omit or pass "auto" to generate a secret
     });
   }
 }
@@ -149,7 +168,8 @@ export class WebhookController {
 | `createEndpoint(dto)` | Register a new webhook endpoint (returns secret) |
 | `listEndpoints(tenantId?)` | List all endpoints (secret excluded) |
 | `getEndpoint(id)` | Get endpoint details (secret excluded) |
-| `updateEndpoint(id, dto)` | Update endpoint URL, events, etc. |
+| `updateEndpoint(id, dto)` | Update endpoint URL, events, description, metadata, or active status |
+| `rotateSecret(endpointId, dto)` | Rotate the endpoint signing secret and keep the previous secret valid until `previousSecretExpiresAt` |
 | `deleteEndpoint(id)` | Delete an endpoint |
 | `sendTestEvent(endpointId)` | Send a `webhook.test` ping event |
 
@@ -158,6 +178,7 @@ export class WebhookController {
 | Method | Description |
 |--------|-------------|
 | `getDeliveryLogs(endpointId, filters?)` | Query delivery history |
+| `getDeliveryAttempts(deliveryId)` | Query per-attempt audit records for a delivery |
 | `retryDelivery(deliveryId)` | Manually retry a failed delivery |
 
 ### WebhookSigner
@@ -165,10 +186,11 @@ export class WebhookController {
 | Method | Description |
 |--------|-------------|
 | `sign(eventId, timestamp, body, secret)` | Generate Standard Webhooks signature headers |
+| `signAll(eventId, timestamp, body, secrets[])` | Generate multi-signature headers for secret rotation overlap |
 | `verify(eventId, timestamp, body, secret, signature)` | Verify a webhook signature |
 | `generateSecret()` | Generate a random base64 signing secret |
 
-> **Deprecated:** `WebhookAdminService` is a facade that delegates to `WebhookEndpointAdminService` and `WebhookDeliveryAdminService`. It will be removed in a future release.
+> **Deprecated:** `WebhookAdminService` is a facade that delegates to `WebhookEndpointAdminService` and `WebhookDeliveryAdminService`. It has been deprecated since `v0.2.0` and will be removed in `v1.0.0`.
 
 ## Configuration
 
@@ -189,6 +211,8 @@ export class WebhookController {
 | `onDeliveryFailed` | — | Fire-and-forget callback when a delivery exhausts all retries. Receives `DeliveryFailedContext` (`tenantId` is `null` for global endpoints). See **Delivery failure classification** below. |
 | `onEndpointDisabled` | — | Fire-and-forget callback when the circuit breaker disables an endpoint. Fires once at exact threshold crossing. |
 
+The retry schedule is fixed exponential (`30s`, `5m`, `30m`, `2h`, `24h`). Use `delivery.jitter` to enable or disable random jitter.
+
 **Delivery failure classification.** `DeliveryFailedContext.failureKind` categorizes why a delivery was abandoned after all retries:
 
 | `failureKind` | When | Extra fields |
@@ -250,7 +274,7 @@ webhook-timestamp: <unix-seconds>
 webhook-signature: v1,<base64-hmac-sha256>
 ```
 
-**Secret format:** Secrets must be valid base64 strings decoding to at least 16 bytes. Use `"auto"` for automatic generation.
+**Secret format:** Secrets must be valid base64 strings decoding to at least 16 bytes. Use `"auto"` (case-sensitive) or omit `secret` for automatic generation.
 
 ### SSRF defense
 
@@ -284,6 +308,38 @@ try {
 - Secrets are only returned on `createEndpoint` (initial provisioning)
 - Delivery enrichment uses an internal path that does not expose secrets through admin APIs
 - **At-rest encryption** — provide a custom `WebhookSecretVault` to encrypt secrets before storage and decrypt before HMAC signing. The default `PlaintextSecretVault` passes values through unchanged.
+- **Rotation overlap** — use `rotateSecret()` to move the current stored secret to `previous_secret`, set a new current secret, and sign queued deliveries with both secrets until `previousSecretExpiresAt`.
+
+```ts
+const rotated = await endpointAdmin.rotateSecret(endpointId, {
+  previousSecretExpiresAt: new Date(Date.now() + 24 * 60 * 60 * 1000),
+});
+
+// Provision this value to the receiver immediately. It is returned only once.
+console.log(rotated?.secret);
+```
+
+`WebhookSigner.verify()` accepts a request when any signature in the space-separated `webhook-signature` header matches the provided secret.
+
+```ts
+const signer = new WebhookSigner();
+const isValid = signer.verify(
+  headers['webhook-id'],
+  Number(headers['webhook-timestamp']),
+  rawBody,
+  signingSecret,
+  headers['webhook-signature'],
+);
+```
+
+### Delivery audit data
+
+Delivery logs expose the snapshotted destination URL through `DeliveryRecord.destinationUrl`. Per-attempt audit records are available through `WebhookDeliveryAdminService.getDeliveryAttempts(deliveryId)`:
+
+```ts
+const [delivery] = await deliveryAdmin.getDeliveryLogs(endpointId);
+const attempts = await deliveryAdmin.getDeliveryAttempts(delivery.id);
+```
 
 ## Webhook Payload Format
 
@@ -326,34 +382,29 @@ export class WorkerModule {}
 
 // main.ts
 const app = await NestFactory.createApplicationContext(WorkerModule);
+process.on('SIGTERM', () => void app.close());
+process.on('SIGINT', () => void app.close());
 ```
 
 Both processes share the same PostgreSQL database. Workers scale horizontally — `FOR UPDATE SKIP LOCKED` prevents duplicate delivery.
+During shutdown, the worker waits up to 30 seconds for the active poll cycle and in-flight deliveries. If the process exits earlier, the next worker recovers stuck `SENDING` rows after `polling.staleSendingMinutes`.
 
 ## Architecture
 
-```
-┌─────────────┐     ┌──────────────────┐     ┌───────────────────┐
-│ Your Service │────>│  WebhookService  │────>│  PostgreSQL (tx)  │
-└─────────────┘     └──────────────────┘     └───────────────────┘
-                            │
-                    ┌───────┴────────┐
-                    │ DeliveryWorker │  (polls every N seconds)
-                    └───────┬────────┘
-                            │
-              ┌─────────────┼─────────────┐
-              v             v             v
-        ┌──────────┐ ┌──────────┐ ┌──────────┐
-        │Dispatcher│ │RetryPolicy│ │CircuitBkr│
-        └────┬─────┘ └──────────┘ └──────────┘
-             │
-        ┌────┴─────┐
-        │HttpClient│──> customer endpoints
-        └──────────┘
+```mermaid
+flowchart LR
+  A[Your Service] -->|publish| B[WebhookService]
+  B -->|transactional insert| C[(PostgreSQL)]
+  D[DeliveryWorker] -->|poll and claim| C
+  D --> E[Dispatcher]
+  D --> F[RetryPolicy]
+  D --> G[CircuitBreaker]
+  E --> H[HttpClient]
+  H --> I[Customer endpoints]
 ```
 
 All components depend on **port interfaces**, not concrete implementations. Default adapters use Prisma and Node.js fetch.
 
 ## License
 
-MIT
+MIT — see [LICENSE](./LICENSE).

package/dist/adapters/fetch-http-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-http-client.d.ts","sourceRoot":"","sources":["../../src/adapters/fetch-http-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAG1E,qBACa,eAAgB,YAAW,iBAAiB;IACjD,IAAI,CACR,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC;CAuC3B"}
+{"version":3,"file":"fetch-http-client.d.ts","sourceRoot":"","sources":["../../src/adapters/fetch-http-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAM1E,qBACa,eAAgB,YAAW,iBAAiB;IACjD,IAAI,CACR,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC;CAuC3B"}

package/dist/adapters/fetch-http-client.js

@@ -19,7 +19,7 @@ let FetchHttpClient = class FetchHttpClient {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
-                    'User-Agent': '@nestarc/webhook',
+                    'User-Agent': webhook_constants_1.DEFAULT_USER_AGENT,
                     ...headers,
                 },
                 body,

package/dist/adapters/fetch-http-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-http-client.js","sourceRoot":"","sources":["../../src/adapters/fetch-http-client.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAG5C,4DAAgE;AAGzD,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,KAAK,CAAC,IAAI,CACR,GAAW,EACX,OAA+B,EAC/B,IAAY,EACZ,OAAe;QAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,kBAAkB;oBAChC,GAAG,OAAO;iBACX;gBACD,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACrC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,OAAO;gBACL,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBACxD,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,4CAAwB,CAAC;gBACrD,SAAS;aACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS;gBACT,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;CACF,CAAA;AA7CY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CA6C3B"}
+{"version":3,"file":"fetch-http-client.js","sourceRoot":"","sources":["../../src/adapters/fetch-http-client.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAG5C,4DAG8B;AAGvB,IAAM,eAAe,GAArB,MAAM,eAAe;IAC1B,KAAK,CAAC,IAAI,CACR,GAAW,EACX,OAA+B,EAC/B,IAAY,EACZ,OAAe;QAEf,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,sCAAkB;oBAChC,GAAG,OAAO;iBACX;gBACD,IAAI;gBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACrC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,OAAO;gBACL,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBACxD,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,4CAAwB,CAAC;gBACrD,SAAS;aACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACrC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS;gBACT,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;CACF,CAAA;AA7CY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CA6C3B"}

package/dist/adapters/plaintext-secret-vault.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plaintext-secret-vault.d.ts","sourceRoot":"","sources":["../../src/adapters/plaintext-secret-vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE;;;GAGG;AACH,qBAAa,oBAAqB,YAAW,kBAAkB;IACvD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAG/C"}
+{"version":3,"file":"plaintext-secret-vault.d.ts","sourceRoot":"","sources":["../../src/adapters/plaintext-secret-vault.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE;;;GAGG;AACH,qBACa,oBAAqB,YAAW,kBAAkB;IACvD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIxC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAG/C"}

package/dist/adapters/plaintext-secret-vault.js

@@ -1,17 +1,27 @@
 "use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PlaintextSecretVault = void 0;
+const common_1 = require("@nestjs/common");
 /**
  * Default no-op vault — secrets are stored and retrieved as-is.
  * Replace with a real implementation (e.g. AES-256-GCM) for production.
  */
-class PlaintextSecretVault {
+let PlaintextSecretVault = class PlaintextSecretVault {
     async encrypt(secret) {
         return secret;
     }
     async decrypt(secret) {
         return secret;
     }
-}
+};
 exports.PlaintextSecretVault = PlaintextSecretVault;
+exports.PlaintextSecretVault = PlaintextSecretVault = __decorate([
+    (0, common_1.Injectable)()
+], PlaintextSecretVault);
 //# sourceMappingURL=plaintext-secret-vault.js.map

package/dist/adapters/plaintext-secret-vault.js.map

@@ -1 +1 @@
-{"version":3,"file":"plaintext-secret-vault.js","sourceRoot":"","sources":["../../src/adapters/plaintext-secret-vault.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACH,MAAa,oBAAoB;IAC/B,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AARD,oDAQC"}
+{"version":3,"file":"plaintext-secret-vault.js","sourceRoot":"","sources":["../../src/adapters/plaintext-secret-vault.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAA4C;AAG5C;;;GAGG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AARY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;GACA,oBAAoB,CAQhC"}

package/dist/adapters/prisma-delivery.repository.d.ts

@@ -1,13 +1,16 @@
-import { PendingDelivery, WebhookDeliveryRepository } from '../ports/webhook-delivery.repository';
+import { ClaimedDelivery, PendingDelivery, WebhookDeliveryRepository, WebhookTransaction } from '../ports/webhook-delivery.repository';
 import { DeliveryAttemptRecord, DeliveryLogFilters, DeliveryRecord, DeliveryResult } from '../interfaces/webhook-delivery.interface';
 import { WebhookSecretVault } from '../ports/webhook-secret-vault';
+type AttemptLogClient = {
+    $executeRaw: <T = unknown>(strings: TemplateStringsArray, ...values: unknown[]) => Promise<T>;
+};
 export declare class PrismaDeliveryRepository implements WebhookDeliveryRepository {
     protected readonly prisma: any;
     protected readonly vault?: WebhookSecretVault | undefined;
     constructor(prisma: any, vault?: WebhookSecretVault | undefined);
     createDeliveriesInTransaction(tx: any, eventId: string, endpointIds: string[], maxAttempts: number): Promise<void>;
-    runInTransaction<T>(fn: (tx: unknown) => Promise<T>): Promise<T>;
-    claimPendingDeliveries(batchSize: number): Promise<PendingDelivery[]>;
+    runInTransaction<T>(fn: (tx: WebhookTransaction) => Promise<T>): Promise<T>;
+    claimPendingDeliveries(batchSize: number): Promise<ClaimedDelivery[]>;
     enrichDeliveries(deliveryIds: string[]): Promise<PendingDelivery[]>;
     markSent(deliveryId: string, attempts: number, result: DeliveryResult): Promise<void>;
     markFailed(deliveryId: string, attempts: number, result: DeliveryResult): Promise<void>;
@@ -17,6 +20,7 @@ export declare class PrismaDeliveryRepository implements WebhookDeliveryReposito
     getDeliveryAttempts(deliveryId: string): Promise<DeliveryAttemptRecord[]>;
     retryDelivery(deliveryId: string): Promise<boolean>;
     createTestDelivery(eventId: string, endpointId: string): Promise<void>;
-    protected appendAttemptLog(deliveryId: string, attempts: number, status: 'PENDING' | 'SENT' | 'FAILED', result: DeliveryResult): Promise<void>;
+    protected appendAttemptLog(client: AttemptLogClient, deliveryId: string, attempts: number, status: 'PENDING' | 'SENT' | 'FAILED', result: DeliveryResult): Promise<void>;
 }
+export {};
 //# sourceMappingURL=prisma-delivery.repository.d.ts.map

package/dist/adapters/prisma-delivery.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prisma-delivery.repository.d.ts","sourceRoot":"","sources":["../../src/adapters/prisma-delivery.repository.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,yBAAyB,EAC1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,cAAc,EACf,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAyBnE,qBACa,wBAAyB,YAAW,yBAAyB;IAEtE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG;IAC9B,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB;gBAD1B,MAAM,EAAE,GAAG,EACX,KAAK,CAAC,EAAE,kBAAkB,YAAA;IAGzC,6BAA6B,CACjC,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EAAE,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAqCV,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIhE,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAqBrE,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAgCnE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrF,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAavF,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;IAaV,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAY9D,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,cAAc,EAAE,CAAC;IAkDtB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAkBzE,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQnD,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cA+B5D,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,EACrC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;CAkCjB"}
+{"version":3,"file":"prisma-delivery.repository.d.ts","sourceRoot":"","sources":["../../src/adapters/prisma-delivery.repository.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,eAAe,EACf,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,cAAc,EACf,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGnE,KAAK,gBAAgB,GAAG;IACtB,WAAW,EAAE,CAAC,CAAC,GAAG,OAAO,EACvB,OAAO,EAAE,oBAAoB,EAC7B,GAAG,MAAM,EAAE,OAAO,EAAE,KACjB,OAAO,CAAC,CAAC,CAAC,CAAC;CACjB,CAAC;AA0BF,qBACa,wBAAyB,YAAW,yBAAyB;IAEtE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG;IAC9B,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB;gBAD1B,MAAM,EAAE,GAAG,EACX,KAAK,CAAC,EAAE,kBAAkB,YAAA;IAGzC,6BAA6B,CACjC,EAAE,EAAE,GAAG,EACP,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EAAE,EACrB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAqCV,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3E,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAqBrE,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA4CnE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrF,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAevF,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,IAAI,EACZ,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;IAeV,mBAAmB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA2D9D,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,cAAc,EAAE,CAAC;IAmDtB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAkBzE,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQnD,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cA+B5D,gBAAgB,CAC9B,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,EACrC,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,IAAI,CAAC;CA0BjB"}

package/dist/adapters/prisma-delivery.repository.js

@@ -11,7 +11,8 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PrismaDeliveryRepository = void 0;
 const common_1 = require("@nestjs/common");
-const MAX_ATTEMPT_RESPONSE_BODY_LENGTH = 4096;
+const webhook_constants_1 = require("../webhook.constants");
+const STALE_SENDING_RECOVERY_ERROR = 'Recovered stale SENDING delivery after worker lease expired';
 function truncateAttemptResponseBody(body) {
     if (body == null) {
         return {
@@ -19,14 +20,14 @@ function truncateAttemptResponseBody(body) {
             responseBodyTruncated: false,
         };
     }
-    if (body.length <= MAX_ATTEMPT_RESPONSE_BODY_LENGTH) {
+    if (body.length <= webhook_constants_1.ATTEMPT_RESPONSE_BODY_MAX_LENGTH) {
         return {
             responseBody: body,
             responseBodyTruncated: false,
         };
     }
     return {
-        responseBody: body.slice(0, MAX_ATTEMPT_RESPONSE_BODY_LENGTH),
+        responseBody: body.slice(0, webhook_constants_1.ATTEMPT_RESPONSE_BODY_MAX_LENGTH),
         responseBodyTruncated: true,
     };
 }
@@ -86,16 +87,20 @@ let PrismaDeliveryRepository = class PrismaDeliveryRepository {
       )
       RETURNING
         webhook_deliveries.id,
-        webhook_deliveries.event_id,
-        webhook_deliveries.endpoint_id,
+        webhook_deliveries.event_id AS "eventId",
+        webhook_deliveries.endpoint_id AS "endpointId",
         webhook_deliveries.attempts,
-        webhook_deliveries.max_attempts`;
+        webhook_deliveries.max_attempts AS "maxAttempts"`;
     }
     async enrichDeliveries(deliveryIds) {
         const rows = await this.prisma.$queryRaw `
       SELECT
-        d.id, d.event_id, d.endpoint_id, d.attempts, d.max_attempts,
-        e.tenant_id::text AS tenant_id,
+        d.id,
+        d.event_id AS "eventId",
+        d.endpoint_id AS "endpointId",
+        d.attempts,
+        d.max_attempts AS "maxAttempts",
+        e.tenant_id::text AS "tenantId",
         COALESCE(d.endpoint_url_snapshot, e.url) AS url,
         COALESCE(d.signing_secret_snapshot, e.secret) AS secret,
         CASE
@@ -103,63 +108,121 @@ let PrismaDeliveryRepository = class PrismaDeliveryRepository {
           THEN ARRAY[]::text[]
           ELSE ARRAY[d.secondary_signing_secret_snapshot]
         END AS "additionalSecrets",
-        ev.event_type, ev.payload
+        ev.event_type AS "eventType",
+        ev.payload
       FROM webhook_deliveries d
       JOIN webhook_endpoints e ON e.id = d.endpoint_id
       JOIN webhook_events ev ON ev.id = d.event_id
       WHERE d.id = ANY(${deliveryIds}::uuid[])`;
         if (this.vault) {
-            for (const row of rows) {
-                row.secret = await this.vault.decrypt(row.secret);
-                row.additionalSecrets = await Promise.all((row.additionalSecrets ?? []).map((secret) => this.vault.decrypt(secret)));
-            }
+            await Promise.all(rows.map(async (row) => {
+                const [secret, additionalSecrets] = await Promise.all([
+                    this.vault.decrypt(row.secret),
+                    Promise.all(row.additionalSecrets.map((secret) => this.vault.decrypt(secret))),
+                ]);
+                row.secret = secret;
+                row.additionalSecrets = additionalSecrets;
+            }));
         }
         return rows;
     }
     async markSent(deliveryId, attempts, result) {
-        await this.prisma.$executeRaw `
-      UPDATE webhook_deliveries
-      SET status = 'SENT', attempts = ${attempts},
-          last_attempt_at = NOW(), completed_at = NOW(),
-          response_status = ${result.statusCode ?? null},
-          response_body = ${result.body ?? null},
-          latency_ms = ${result.latencyMs}
-      WHERE id = ${deliveryId}::uuid`;
-        await this.appendAttemptLog(deliveryId, attempts, 'SENT', result);
+        await this.prisma.$transaction(async (tx) => {
+            await tx.$executeRaw `
+        UPDATE webhook_deliveries
+        SET status = 'SENT', attempts = ${attempts},
+            last_attempt_at = NOW(), completed_at = NOW(),
+            response_status = ${result.statusCode ?? null},
+            response_body = ${result.body ?? null},
+            latency_ms = ${result.latencyMs}
+        WHERE id = ${deliveryId}::uuid`;
+            await this.appendAttemptLog(tx, deliveryId, attempts, 'SENT', result);
+        });
     }
     async markFailed(deliveryId, attempts, result) {
-        await this.prisma.$executeRaw `
-      UPDATE webhook_deliveries
-      SET status = 'FAILED', attempts = ${attempts},
-          last_attempt_at = NOW(), completed_at = NOW(),
-          response_status = ${result.statusCode ?? null},
-          response_body = ${result.body ?? null},
-          latency_ms = ${result.latencyMs},
-          last_error = ${result.error ?? null}
-      WHERE id = ${deliveryId}::uuid`;
-        await this.appendAttemptLog(deliveryId, attempts, 'FAILED', result);
+        await this.prisma.$transaction(async (tx) => {
+            await tx.$executeRaw `
+        UPDATE webhook_deliveries
+        SET status = 'FAILED', attempts = ${attempts},
+            last_attempt_at = NOW(), completed_at = NOW(),
+            response_status = ${result.statusCode ?? null},
+            response_body = ${result.body ?? null},
+            latency_ms = ${result.latencyMs},
+            last_error = ${result.error ?? null}
+        WHERE id = ${deliveryId}::uuid`;
+            await this.appendAttemptLog(tx, deliveryId, attempts, 'FAILED', result);
+        });
     }
     async markRetry(deliveryId, attempts, nextAt, result) {
-        await this.prisma.$executeRaw `
-      UPDATE webhook_deliveries
-      SET status = 'PENDING', attempts = ${attempts},
-          last_attempt_at = NOW(), next_attempt_at = ${nextAt},
-          response_status = ${result.statusCode ?? null},
-          response_body = ${result.body ?? null},
-          latency_ms = ${result.latencyMs},
-          last_error = ${result.error ?? null}
-      WHERE id = ${deliveryId}::uuid`;
-        await this.appendAttemptLog(deliveryId, attempts, 'PENDING', result);
+        await this.prisma.$transaction(async (tx) => {
+            await tx.$executeRaw `
+        UPDATE webhook_deliveries
+        SET status = 'PENDING', attempts = ${attempts},
+            last_attempt_at = NOW(), next_attempt_at = ${nextAt},
+            response_status = ${result.statusCode ?? null},
+            response_body = ${result.body ?? null},
+            latency_ms = ${result.latencyMs},
+            last_error = ${result.error ?? null}
+        WHERE id = ${deliveryId}::uuid`;
+            await this.appendAttemptLog(tx, deliveryId, attempts, 'PENDING', result);
+        });
     }
     async recoverStaleSending(stalenessMinutes) {
         const interval = `${stalenessMinutes} minutes`;
         const recovered = await this.prisma.$queryRaw `
-      UPDATE webhook_deliveries
-      SET status = 'PENDING', claimed_at = NULL
-      WHERE status = 'SENDING'
-        AND claimed_at IS NOT NULL
-        AND claimed_at + ${interval}::interval < NOW()
-      RETURNING id`;
+      WITH recovered AS (
+        UPDATE webhook_deliveries
+        SET attempts = attempts + 1,
+            status = CASE
+              WHEN attempts + 1 >= max_attempts THEN 'FAILED'
+              ELSE 'PENDING'
+            END,
+            claimed_at = NULL,
+            last_attempt_at = NOW(),
+            next_attempt_at = CASE
+              WHEN attempts + 1 >= max_attempts THEN NULL
+              ELSE NOW()
+            END,
+            completed_at = CASE
+              WHEN attempts + 1 >= max_attempts THEN NOW()
+              ELSE completed_at
+            END,
+            response_status = NULL,
+            response_body = NULL,
+            latency_ms = NULL,
+            last_error = ${STALE_SENDING_RECOVERY_ERROR}
+        WHERE status = 'SENDING'
+          AND claimed_at IS NOT NULL
+          AND claimed_at + ${interval}::interval < NOW()
+        RETURNING id, attempts, status
+      ),
+      attempt_log AS (
+        INSERT INTO webhook_delivery_attempts (
+          delivery_id,
+          attempt_number,
+          status,
+          response_status,
+          response_body,
+          response_body_truncated,
+          latency_ms,
+          last_error
+        )
+        SELECT
+          id,
+          attempts,
+          status,
+          NULL,
+          NULL,
+          FALSE,
+          NULL,
+          ${STALE_SENDING_RECOVERY_ERROR}
+        FROM recovered
+        ON CONFLICT (delivery_id, attempt_number) DO NOTHING
+        RETURNING delivery_id
+      )
+      SELECT recovered.id
+      FROM recovered
+      LEFT JOIN attempt_log ON attempt_log.delivery_id = recovered.id`;
         return recovered.length;
     }
     async getDeliveryLogs(endpointId, filters) {
@@ -189,6 +252,7 @@ let PrismaDeliveryRepository = class PrismaDeliveryRepository {
              d.event_id AS "eventId",
              d.endpoint_id AS "endpointId",
              COALESCE(d.endpoint_url_snapshot, ep.url) AS "destinationUrl",
+             ep.tenant_id::text AS "tenantId",
              d.max_attempts AS "maxAttempts",
              d.next_attempt_at AS "nextAttemptAt",
              d.last_attempt_at AS "lastAttemptAt",
@@ -262,36 +326,29 @@ let PrismaDeliveryRepository = class PrismaDeliveryRepository {
       FROM webhook_endpoints e
       WHERE e.id = ${endpointId}::uuid`;
     }
-    async appendAttemptLog(deliveryId, attempts, status, result) {
+    async appendAttemptLog(client, deliveryId, attempts, status, result) {
         const { responseBody, responseBodyTruncated } = truncateAttemptResponseBody(result.body ?? null);
-        try {
-            await this.prisma.$executeRaw `
-        INSERT INTO webhook_delivery_attempts (
-          delivery_id,
-          attempt_number,
-          status,
-          response_status,
-          response_body,
-          response_body_truncated,
-          latency_ms,
-          last_error
-        )
-        VALUES (
-          ${deliveryId}::uuid,
-          ${attempts},
-          ${status},
-          ${result.statusCode ?? null},
-          ${responseBody},
-          ${responseBodyTruncated},
-          ${result.latencyMs},
-          ${result.error ?? null}
-        )`;
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            // Best-effort logging only. Delivery state has already been committed above.
-            console.error(`[PrismaDeliveryRepository] Failed to append attempt log for ${deliveryId}#${attempts}: ${message}`);
-        }
+        await client.$executeRaw `
+      INSERT INTO webhook_delivery_attempts (
+        delivery_id,
+        attempt_number,
+        status,
+        response_status,
+        response_body,
+        response_body_truncated,
+        latency_ms,
+        last_error
+      )
+      VALUES (
+        ${deliveryId}::uuid,
+        ${attempts},
+        ${status},
+        ${result.statusCode ?? null},
+        ${responseBody},
+        ${responseBodyTruncated},
+        ${result.latencyMs},
+        ${result.error ?? null}
+      )`;
     }
 };
 exports.PrismaDeliveryRepository = PrismaDeliveryRepository;

package/dist/adapters/prisma-delivery.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"prisma-delivery.repository.js","sourceRoot":"","sources":["../../src/adapters/prisma-delivery.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAa5C,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAE9C,SAAS,2BAA2B,CAAC,IAA+B;IAClE,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,IAAI,gCAAgC,EAAE,CAAC;QACpD,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gCAAgC,CAAC;QAC7D,qBAAqB,EAAE,IAAI;KAC5B,CAAC;AACJ,CAAC;AAGM,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAEd;IACA;IAFrB,YACqB,MAAW,EACX,KAA0B;QAD1B,WAAM,GAAN,MAAM,CAAK;QACX,UAAK,GAAL,KAAK,CAAqB;IAC5C,CAAC;IAEJ,KAAK,CAAC,6BAA6B,CACjC,EAAO,EACP,OAAe,EACf,WAAqB,EACrB,WAAmB;QAEnB,MAAM,EAAE,CAAC,iBAAiB,CACxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCA4B8B,EAC9B,OAAO,EACP,WAAW,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAI,EAA+B;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAmB;;;;;;;;;gBASnC,SAAS;;;;;;;;wCAQe,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAqB;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAmB;;;;;;;;;;;;;;;yBAetC,WAAW,WAAW,CAAC;QAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,GAAG,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClD,GAAG,CAAC,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CACvC,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CACnD,IAAI,CAAC,KAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAC5B,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAkB,EAAE,QAAgB,EAAE,MAAsB;QACzE,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;;wCAEO,QAAQ;;8BAElB,MAAM,CAAC,UAAU,IAAI,IAAI;4BAC3B,MAAM,CAAC,IAAI,IAAI,IAAI;yBACtB,MAAM,CAAC,SAAS;mBACtB,UAAU,QAAQ,CAAC;QAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,QAAgB,EAAE,MAAsB;QAC3E,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;;0CAES,QAAQ;;8BAEpB,MAAM,CAAC,UAAU,IAAI,IAAI;4BAC3B,MAAM,CAAC,IAAI,IAAI,IAAI;yBACtB,MAAM,CAAC,SAAS;yBAChB,MAAM,CAAC,KAAK,IAAI,IAAI;mBAC1B,UAAU,QAAQ,CAAC;QAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,QAAgB,EAChB,MAAY,EACZ,MAAsB;QAEtB,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;;2CAEU,QAAQ;uDACI,MAAM;8BAC/B,MAAM,CAAC,UAAU,IAAI,IAAI;4BAC3B,MAAM,CAAC,IAAI,IAAI,IAAI;yBACtB,MAAM,CAAC,SAAS;yBAChB,MAAM,CAAC,KAAK,IAAI,IAAI;mBAC1B,UAAU,QAAQ,CAAC;QAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,gBAAwB;QAChD,MAAM,QAAQ,GAAG,GAAG,gBAAgB,UAAU,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAkB;;;;;2BAKxC,QAAQ;mBAChB,CAAC;QAChB,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,UAAkB,EAClB,OAA4B;QAE5B,MAAM,UAAU,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAChD,MAAM,MAAM,GAAc,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,oBAAoB,UAAU,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,yBAAyB,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,yBAAyB,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;cAgBJ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;eAEvB,UAAU,EAAE;gBACX,UAAU,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE3B,MAAM,OAAO,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC;QACtF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAyB;;;;;;;;;;;;;4BAa7B,UAAU;kCACJ,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;;;mBAG7B,UAAU,8BAA8B,CAAC;QACxD,OAAO,MAAM,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,UAAkB;QAC1D,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;;;;;;;;;;;;UAYvB,OAAO;;;;;;;;;;;;;;;qBAeI,UAAU,QAAQ,CAAC;IACtC,CAAC;IAES,KAAK,CAAC,gBAAgB,CAC9B,UAAkB,EAClB,QAAgB,EAChB,MAAqC,EACrC,MAAsB;QAEtB,MAAM,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAC3C,2BAA2B,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;;;;;;;;;;;;YAYvB,UAAU;YACV,QAAQ;YACR,MAAM;YACN,MAAM,CAAC,UAAU,IAAI,IAAI;YACzB,YAAY;YACZ,qBAAqB;YACrB,MAAM,CAAC,SAAS;YAChB,MAAM,CAAC,KAAK,IAAI,IAAI;UACtB,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,6EAA6E;YAC7E,OAAO,CAAC,KAAK,CACX,+DAA+D,UAAU,IAAI,QAAQ,KAAK,OAAO,EAAE,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AArTY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;;GACA,wBAAwB,CAqTpC"}
+{"version":3,"file":"prisma-delivery.repository.js","sourceRoot":"","sources":["../../src/adapters/prisma-delivery.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAc5C,4DAAwE;AASxE,MAAM,4BAA4B,GAChC,6DAA6D,CAAC;AAEhE,SAAS,2BAA2B,CAAC,IAA+B;IAClE,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,IAAI,oDAAgC,EAAE,CAAC;QACpD,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oDAAgC,CAAC;QAC7D,qBAAqB,EAAE,IAAI;KAC5B,CAAC;AACJ,CAAC;AAGM,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAEd;IACA;IAFrB,YACqB,MAAW,EACX,KAA0B;QAD1B,WAAM,GAAN,MAAM,CAAK;QACX,UAAK,GAAL,KAAK,CAAqB;IAC5C,CAAC;IAEJ,KAAK,CAAC,6BAA6B,CACjC,EAAO,EACP,OAAe,EACf,WAAqB,EACrB,WAAmB;QAEnB,MAAM,EAAE,CAAC,iBAAiB,CACxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCA4B8B,EAC9B,OAAO,EACP,WAAW,EACX,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAI,EAA0C;QAClE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAmB;;;;;;;;;gBASnC,SAAS;;;;;;;;yDAQgC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAqB;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAmB;;;;;;;;;;;;;;;;;;;;yBAoBtC,WAAW,WAAW,CAAC;QAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAoB,EAAE,EAAE;gBACtC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACpD,IAAI,CAAC,KAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;oBAC/B,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAC3C,IAAI,CAAC,KAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAC5B,CACF;iBACF,CAAC,CAAC;gBAEH,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;gBACpB,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;YAC5C,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAAkB,EAAE,QAAgB,EAAE,MAAsB;QACzE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAoB,EAAE,EAAE;YAC5D,MAAM,EAAE,CAAC,WAAW,CAAA;;0CAEgB,QAAQ;;gCAElB,MAAM,CAAC,UAAU,IAAI,IAAI;8BAC3B,MAAM,CAAC,IAAI,IAAI,IAAI;2BACtB,MAAM,CAAC,SAAS;qBACtB,UAAU,QAAQ,CAAC;YAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,QAAgB,EAAE,MAAsB;QAC3E,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAoB,EAAE,EAAE;YAC5D,MAAM,EAAE,CAAC,WAAW,CAAA;;4CAEkB,QAAQ;;gCAEpB,MAAM,CAAC,UAAU,IAAI,IAAI;8BAC3B,MAAM,CAAC,IAAI,IAAI,IAAI;2BACtB,MAAM,CAAC,SAAS;2BAChB,MAAM,CAAC,KAAK,IAAI,IAAI;qBAC1B,UAAU,QAAQ,CAAC;YAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,QAAgB,EAChB,MAAY,EACZ,MAAsB;QAEtB,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAoB,EAAE,EAAE;YAC5D,MAAM,EAAE,CAAC,WAAW,CAAA;;6CAEmB,QAAQ;yDACI,MAAM;gCAC/B,MAAM,CAAC,UAAU,IAAI,IAAI;8BAC3B,MAAM,CAAC,IAAI,IAAI,IAAI;2BACtB,MAAM,CAAC,SAAS;2BAChB,MAAM,CAAC,KAAK,IAAI,IAAI;qBAC1B,UAAU,QAAQ,CAAC;YAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,gBAAwB;QAChD,MAAM,QAAQ,GAAG,GAAG,gBAAgB,UAAU,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAkB;;;;;;;;;;;;;;;;;;;;;2BAqBxC,4BAA4B;;;6BAG1B,QAAQ;;;;;;;;;;;;;;;;;;;;;;YAsBzB,4BAA4B;;;;;;;sEAO8B,CAAC;QACnE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,UAAkB,EAClB,OAA4B;QAE5B,MAAM,UAAU,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAChD,MAAM,MAAM,GAAc,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,oBAAoB,UAAU,EAAE,EAAE,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,yBAAyB,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,yBAAyB,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;cAiBJ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;eAEvB,UAAU,EAAE;gBACX,UAAU,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE3B,MAAM,OAAO,GAAqB,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC;QACtF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAyB;;;;;;;;;;;;;4BAa7B,UAAU;kCACJ,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;;;mBAG7B,UAAU,8BAA8B,CAAC;QACxD,OAAO,MAAM,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,UAAkB;QAC1D,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;;;;;;;;;;;;UAYvB,OAAO;;;;;;;;;;;;;;;qBAeI,UAAU,QAAQ,CAAC;IACtC,CAAC;IAES,KAAK,CAAC,gBAAgB,CAC9B,MAAwB,EACxB,UAAkB,EAClB,QAAgB,EAChB,MAAqC,EACrC,MAAsB;QAEtB,MAAM,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAC3C,2BAA2B,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAEnD,MAAM,MAAM,CAAC,WAAW,CAAA;;;;;;;;;;;;UAYlB,UAAU;UACV,QAAQ;UACR,MAAM;UACN,MAAM,CAAC,UAAU,IAAI,IAAI;UACzB,YAAY;UACZ,qBAAqB;UACrB,MAAM,CAAC,SAAS;UAChB,MAAM,CAAC,KAAK,IAAI,IAAI;QACtB,CAAC;IACP,CAAC;CACF,CAAA;AAhXY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;;GACA,wBAAwB,CAgXpC"}