@objectstack/plugin-webhooks 17.0.0-rc.0 → 17.0.0-rc.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@objectstack/plugin-webhooks",
-  "version": "17.0.0-rc.0",
+  "version": "17.0.0-rc.1",
   "license": "Apache-2.0",
   "description": "Persistent, cluster-aware webhook dispatcher. Durable outbox + per-partition cluster.lock for exactly-once-ish delivery across nodes. See content/docs/concepts/webhook-delivery.mdx.",
   "type": "module",
@@ -19,9 +19,9 @@
     }
   },
   "dependencies": {
-    "@objectstack/core": "17.0.0-rc.0",
-    "@objectstack/spec": "17.0.0-rc.0",
-    "@objectstack/service-messaging": "17.0.0-rc.0"
+    "@objectstack/core": "17.0.0-rc.1",
+    "@objectstack/service-messaging": "17.0.0-rc.1",
+    "@objectstack/spec": "17.0.0-rc.1"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",
@@ -41,8 +41,14 @@
     "url": "https://github.com/objectstack-ai/objectstack.git",
     "directory": "packages/plugins/plugin-webhooks"
   },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
   "scripts": {
     "build": "tsup",
-    "test": "vitest run"
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
   }
 }

package/.turbo/turbo-build.log

@@ -1,36 +0,0 @@
-
-> @objectstack/plugin-webhooks@17.0.0-rc.0 build /home/runner/work/objectstack/objectstack/packages/plugins/plugin-webhooks
-> tsup
-
-CLI Building entry: src/index.ts, src/schema.ts
-CLI Using tsconfig: tsconfig.json
-CLI tsup v8.5.1
-CLI Using tsup config: /home/runner/work/objectstack/objectstack/packages/plugins/plugin-webhooks/tsup.config.ts
-CLI Target: es2020
-CLI Cleaning output folder
-ESM Build start
-CJS Build start
-ESM dist/index.js                     20.63 KB
-ESM dist/schema.js                    111.00 B
-ESM dist/chunk-6EPMRZ7I.js            6.98 KB
-ESM dist/translations-Y3CXWOTM.js     12.89 KB
-ESM dist/index.js.map                 53.27 KB
-ESM dist/schema.js.map                71.00 B
-ESM dist/chunk-6EPMRZ7I.js.map        12.42 KB
-ESM dist/translations-Y3CXWOTM.js.map 17.78 KB
-ESM ⚡️ Build success in 546ms
-CJS dist/index.cjs                     26.40 KB
-CJS dist/schema.cjs                    220.00 B
-CJS dist/chunk-QUTQSOQC.cjs            7.14 KB
-CJS dist/translations-CBQRUIS5.cjs     12.98 KB
-CJS dist/index.cjs.map                 48.41 KB
-CJS dist/schema.cjs.map                286.00 B
-CJS dist/chunk-QUTQSOQC.cjs.map        14.45 KB
-CJS dist/translations-CBQRUIS5.cjs.map 20.24 KB
-CJS ⚡️ Build success in 695ms
-DTS Build start
-DTS ⚡️ Build success in 25488ms
-DTS dist/index.d.ts   7.79 KB
-DTS dist/schema.d.ts  118.05 KB
-DTS dist/index.d.cts  7.79 KB
-DTS dist/schema.d.cts 118.05 KB

package/scripts/i18n-extract.config.ts

@@ -1,34 +0,0 @@
-// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
-
-/**
- * Build-time only config for `os i18n extract` (ADR-0029 D8). Not deployed.
- * The plugin owns the i18n extraction for the objects it owns; the
- * `translations` baseline is this plugin's OWN generated bundles so re-running
- * `--merge` preserves every hand-translated string. (Initial zh-CN/ja-JP/es-ES
- * strings were seeded from @objectstack/platform-objects.)
- *
- *   os i18n extract packages/plugins/plugin-webhooks/scripts/i18n-extract.config.ts \
- *     --locales=zh-CN,ja-JP,es-ES --fill=default --objects-only --no-metadata-forms \
- *     --out=packages/plugins/plugin-webhooks/src/translations
- */
-
-import { defineStack } from '@objectstack/spec';
-import { SysWebhook } from '../src/sys-webhook.object.js';
-// NOTE: sys_webhook_delivery moved to @objectstack/service-messaging
-// (sys_http_delivery, ADR-0018 M3) — this plugin no longer owns a delivery
-// object, so it is not extracted here.
-import { enObjects } from '../src/translations/en.objects.generated.js';
-import { zhCNObjects } from '../src/translations/zh-CN.objects.generated.js';
-import { jaJPObjects } from '../src/translations/ja-JP.objects.generated.js';
-import { esESObjects } from '../src/translations/es-ES.objects.generated.js';
-
-export default defineStack({
-  name: 'plugin-webhooks-i18n-extract',
-  objects: [SysWebhook] as any,
-  translations: [
-    { en: { objects: enObjects } },
-    { 'zh-CN': { objects: zhCNObjects } },
-    { 'ja-JP': { objects: jaJPObjects } },
-    { 'es-ES': { objects: esESObjects } },
-  ],
-});

package/src/auto-enqueuer.test.ts

@@ -1,431 +0,0 @@
-// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
-
-/**
- * AutoEnqueuer end-to-end test.
- *
- * Verifies the bridge between `IRealtimeService` (data events) and the shared
- * `service-messaging` HTTP outbox (ADR-0018 M3 — enqueue via `messaging.enqueueHttp`):
- *
- *   - On startup, subscription rules are loaded from the engine.
- *   - `data.record.created/updated/deleted` events fan out to matching
- *     `sys_webhook` rows, enqueued as `source: 'webhook'`.
- *   - The `triggers` CSV column filters which actions fire.
- *   - The `object_name` field scopes events to a specific object.
- *   - Edits to `sys_webhook` self-heal the cache without restart.
- *   - Enqueue is fire-and-forget (handler never throws or blocks).
- *   - The deterministic dedupKey (`<webhookId>:<eventId>`) collapses replays.
- */
-
-import { describe, expect, it, vi } from 'vitest';
-import type {
-    IDataEngine,
-    IRealtimeService,
-    RealtimeEventHandler,
-    RealtimeEventPayload,
-} from '@objectstack/spec/contracts';
-import type { EnqueueHttpInput } from '@objectstack/service-messaging';
-import { AutoEnqueuer, type HttpEnqueueFn } from './auto-enqueuer.js';
-
-// ---------------------------------------------------------------------------
-// Fakes
-// ---------------------------------------------------------------------------
-
-/**
- * Records `enqueueHttp` calls and dedups on `(source, dedupKey)` — mirroring the
- * shared outbox's UNIQUE constraint so the replay test still holds.
- */
-function makeRecorder() {
-    const calls: EnqueueHttpInput[] = [];
-    const seen = new Map<string, string>();
-    const enqueue: HttpEnqueueFn = async (input) => {
-        const key = `${input.source}::${input.dedupKey}`;
-        const existing = seen.get(key);
-        if (existing) return existing;
-        seen.set(key, key);
-        calls.push(input);
-        return key;
-    };
-    return { enqueue, calls };
-}
-
-class FakeRealtime implements IRealtimeService {
-    private subs = new Map<string, { handler: RealtimeEventHandler; opts?: any }>();
-    private n = 0;
-
-    async publish(event: RealtimeEventPayload): Promise<void> {
-        for (const sub of this.subs.values()) {
-            const o = sub.opts ?? {};
-            if (o.object && event.object !== o.object) continue;
-            await sub.handler(event);
-        }
-    }
-    async subscribe(_channel: string, handler: any, opts?: any): Promise<string> {
-        const id = `s-${++this.n}`;
-        this.subs.set(id, { handler, opts });
-        return id;
-    }
-    async unsubscribe(id: string): Promise<void> {
-        this.subs.delete(id);
-    }
-}
-
-class FakeEngine implements IDataEngine {
-    rows: Record<string, any[]> = {};
-
-    constructor(seed?: Record<string, any[]>) {
-        if (seed) this.rows = JSON.parse(JSON.stringify(seed));
-    }
-
-    async find(name: string, q?: any): Promise<any[]> {
-        const all = this.rows[name] ?? [];
-        if (!q?.where) return all;
-        return all.filter((r) => Object.entries(q.where).every(([k, v]) => r[k] === v));
-    }
-    async findOne(name: string, q?: any): Promise<any> {
-        return (await this.find(name, q))[0] ?? null;
-    }
-    async insert(name: string, data: any): Promise<any> {
-        const arr = (this.rows[name] = this.rows[name] ?? []);
-        arr.push(data);
-        return data;
-    }
-    async update(name: string, data: any, opts?: any): Promise<any> {
-        const arr = this.rows[name] ?? [];
-        for (const r of arr) {
-            if (opts?.where && Object.entries(opts.where).every(([k, v]) => r[k] === v)) {
-                Object.assign(r, data);
-            }
-        }
-        return { affected: 0 };
-    }
-    async delete(name: string, opts?: any): Promise<any> {
-        const arr = this.rows[name] ?? [];
-        const before = arr.length;
-        this.rows[name] = arr.filter(
-            (r) => !(opts?.where && Object.entries(opts.where).every(([k, v]) => r[k] === v)),
-        );
-        return { affected: before - this.rows[name].length };
-    }
-    async count(name: string): Promise<number> {
-        return (this.rows[name] ?? []).length;
-    }
-    async aggregate(): Promise<any[]> {
-        return [];
-    }
-}
-
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-
-function webhook(over: Partial<any> = {}): any {
-    return {
-        id: over.id ?? 'wh-1',
-        name: over.name ?? 'default',
-        active: over.active ?? true,
-        object_name: over.object_name ?? 'contact',
-        triggers: over.triggers ?? 'create,update,delete',
-        url: over.url ?? 'https://hooks.example/wh',
-        method: 'POST',
-        definition_json: over.definition_json,
-        ...over,
-    };
-}
-
-function event(
-    type: 'created' | 'updated' | 'deleted',
-    object: string,
-    record: any,
-    timestamp = '2026-05-24T00:00:00.000Z',
-): RealtimeEventPayload {
-    return {
-        type: `data.record.${type}`,
-        object,
-        payload: { recordId: record.id, after: record },
-        timestamp,
-    };
-}
-
-async function flush() {
-    await new Promise((r) => setTimeout(r, 0));
-}
-
-// ---------------------------------------------------------------------------
-// Tests
-// ---------------------------------------------------------------------------
-
-describe('AutoEnqueuer', () => {
-    it('enqueues a delivery when a matching data event fires', async () => {
-        const engine = new FakeEngine({ sys_webhook: [webhook()] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1', name: 'Alice' }));
-        await flush();
-
-        expect(calls).toHaveLength(1);
-        expect(calls[0].source).toBe('webhook');
-        expect(calls[0].refId).toBe('wh-1');
-        expect(calls[0].url).toBe('https://hooks.example/wh');
-        expect(calls[0].label).toBe('data.record.created');
-        expect((calls[0].payload as any).recordId).toBe('c-1');
-        await ae.stop();
-    });
-
-    it('skips events for other objects', async () => {
-        const engine = new FakeEngine({ sys_webhook: [webhook({ object_name: 'contact' })] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'lead', { id: 'l-1' }));
-        await flush();
-
-        expect(calls).toHaveLength(0);
-        await ae.stop();
-    });
-
-    it('respects the triggers CSV (create-only webhook ignores updates)', async () => {
-        const engine = new FakeEngine({ sys_webhook: [webhook({ triggers: 'create' })] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await realtime.publish(event('updated', 'contact', { id: 'c-1' }, '2026-05-24T00:00:01.000Z'));
-        await realtime.publish(event('deleted', 'contact', { id: 'c-1' }, '2026-05-24T00:00:02.000Z'));
-        await flush();
-
-        expect(calls).toHaveLength(1);
-        expect(calls[0].label).toBe('data.record.created');
-        await ae.stop();
-    });
-
-    it('parses triggers authored as a multi-select array', async () => {
-        // The `triggers` field is now a multi-select stored as an array; the
-        // parser must treat it identically to the legacy CSV form.
-        const engine = new FakeEngine({ sys_webhook: [webhook({ triggers: ['create'] })] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await realtime.publish(event('updated', 'contact', { id: 'c-1' }, '2026-05-24T00:00:01.000Z'));
-        await flush();
-
-        expect(calls).toHaveLength(1);
-        expect(calls[0].label).toBe('data.record.created');
-        await ae.stop();
-    });
-
-    it('parses triggers stored as a JSON-encoded array string', async () => {
-        // Some drivers hand a JSON array column back as a string — accept it.
-        const engine = new FakeEngine({ sys_webhook: [webhook({ triggers: '["create","update"]' })] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await realtime.publish(event('deleted', 'contact', { id: 'c-1' }, '2026-05-24T00:00:02.000Z'));
-        await flush();
-
-        // create + update are subscribed; delete is not.
-        expect(calls).toHaveLength(1);
-        expect(calls[0].label).toBe('data.record.created');
-        await ae.stop();
-    });
-
-    it('fans out to multiple matching webhooks', async () => {
-        const engine = new FakeEngine({
-            sys_webhook: [
-                webhook({ id: 'wh-1', name: 'slack', url: 'https://slack.test' }),
-                webhook({ id: 'wh-2', name: 'analytics', url: 'https://amplitude.test' }),
-            ],
-        });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await flush();
-
-        expect(calls).toHaveLength(2);
-        expect(calls.map((r) => r.url).sort()).toEqual([
-            'https://amplitude.test',
-            'https://slack.test',
-        ]);
-        await ae.stop();
-    });
-
-    it('skips inactive webhooks', async () => {
-        const engine = new FakeEngine({ sys_webhook: [webhook({ active: false })] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await flush();
-
-        expect(calls).toHaveLength(0);
-        await ae.stop();
-    });
-
-    it('skips manual-only webhooks (no triggers)', async () => {
-        const engine = new FakeEngine({ sys_webhook: [webhook({ triggers: '' })] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await flush();
-
-        expect(calls).toHaveLength(0);
-        await ae.stop();
-    });
-
-    it('warns and ignores a legacy trigger the engine never emits (#3196)', async () => {
-        // A row authored before undelete/api were removed keeps its valid
-        // triggers; the dead ones are dropped with a warning (drift-guard).
-        const engine = new FakeEngine({
-            sys_webhook: [webhook({ triggers: 'create,undelete,api' })],
-        });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const warn = vi.fn();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0, logger: { warn } });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await flush();
-
-        expect(calls).toHaveLength(1); // the valid `create` trigger still fires
-        expect(warn).toHaveBeenCalledWith(
-            expect.stringContaining('undelete'),
-            expect.objectContaining({ unknown: expect.arrayContaining(['undelete', 'api']) }),
-        );
-        await ae.stop();
-    });
-
-    it('skips a webhook whose only triggers are removed values (#3196)', async () => {
-        const engine = new FakeEngine({ sys_webhook: [webhook({ triggers: 'undelete,api' })] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await flush();
-
-        expect(calls).toHaveLength(0);
-        await ae.stop();
-    });
-
-    it('self-heals the cache when sys_webhook changes', async () => {
-        const engine = new FakeEngine({ sys_webhook: [] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await flush();
-        expect(calls).toHaveLength(0);
-
-        await engine.insert('sys_webhook', webhook());
-        await realtime.publish({
-            type: 'data.record.created',
-            object: 'sys_webhook',
-            payload: { recordId: 'wh-1' },
-            timestamp: '2026-05-24T00:01:00.000Z',
-        });
-        await flush();
-        await flush(); // Two ticks: the self-heal handler itself awaits refresh
-
-        await realtime.publish(event('created', 'contact', { id: 'c-2' }, '2026-05-24T00:01:01.000Z'));
-        await flush();
-
-        expect(calls).toHaveLength(1);
-        expect((calls[0].payload as any).recordId).toBe('c-2');
-        await ae.stop();
-    });
-
-    it('uses a deterministic dedupKey so replays collapse', async () => {
-        const engine = new FakeEngine({ sys_webhook: [webhook()] });
-        const realtime = new FakeRealtime();
-        const { enqueue, calls } = makeRecorder();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        const evt = event('created', 'contact', { id: 'c-1' });
-        await realtime.publish(evt);
-        await realtime.publish(evt);
-        await flush();
-
-        expect(calls).toHaveLength(1);
-        await ae.stop();
-    });
-
-    it('handler is fire-and-forget (publish does not block on enqueue)', async () => {
-        const engine = new FakeEngine({ sys_webhook: [webhook()] });
-        const realtime = new FakeRealtime();
-        let slowResolve!: () => void;
-        const blocker = new Promise<void>((res) => {
-            slowResolve = res;
-        });
-        const calls: EnqueueHttpInput[] = [];
-        const enqueue: HttpEnqueueFn = async (input) => {
-            await blocker;
-            calls.push(input);
-            return 'id';
-        };
-
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0 });
-        await ae.start();
-
-        const before = Date.now();
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        const elapsed = Date.now() - before;
-        expect(elapsed).toBeLessThan(20); // publish must not have awaited blocker
-
-        slowResolve();
-        await flush();
-        expect(calls).toHaveLength(1);
-        await ae.stop();
-    });
-
-    it('logs but swallows enqueue errors so other webhooks still fire', async () => {
-        const engine = new FakeEngine({
-            sys_webhook: [
-                webhook({ id: 'wh-bad', url: 'https://bad.test' }),
-                webhook({ id: 'wh-good', url: 'https://good.test' }),
-            ],
-        });
-        const realtime = new FakeRealtime();
-        const calls: EnqueueHttpInput[] = [];
-        const enqueue: HttpEnqueueFn = vi.fn(async (input) => {
-            if (input.refId === 'wh-bad') throw new Error('boom');
-            calls.push(input);
-            return 'id';
-        });
-        const warn = vi.fn();
-        const ae = new AutoEnqueuer(engine, realtime, enqueue, { refreshIntervalMs: 0, logger: { warn } });
-        await ae.start();
-
-        await realtime.publish(event('created', 'contact', { id: 'c-1' }));
-        await flush();
-
-        expect(calls).toHaveLength(1);
-        expect(calls[0].url).toBe('https://good.test');
-        expect(warn).toHaveBeenCalled();
-        await ae.stop();
-    });
-});