@objectstack/plugin-webhooks 17.0.0-rc.1 → 17.0.0-rc.3

package/dist/index.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkQUTQSOQCcjs = require('./chunk-QUTQSOQC.cjs');
+var _chunkJQUVS5KKcjs = require('./chunk-JQUVS5KK.cjs');
 
 // src/auto-enqueuer.ts
 var AutoEnqueuer = class {
@@ -112,7 +112,7 @@ var AutoEnqueuer = class {
     const unknown = normalized.filter((t) => !DISPATCHABLE_WEBHOOK_TRIGGERS.has(t));
     if (unknown.length > 0) {
       _optionalChain([this, 'access', _15 => _15.logger, 'access', _16 => _16.warn, 'optionalCall', _17 => _17(
-        `[webhook-auto-enqueuer] webhook '${_nullishCoalesce(row.name, () => ( row.id))}' declares trigger(s) the engine never emits: ${unknown.join(", ")} \u2014 ignored. Dispatchable triggers: create, update, delete.`,
+        `[webhook-auto-enqueuer] webhook '${_nullishCoalesce(row.name, () => ( row.id))}' declares trigger(s) the engine never emits: ${unknown.join(", ")} \u2014 ignored. Dispatchable triggers: ${[...DISPATCHABLE_WEBHOOK_TRIGGERS].join(", ")}.`,
         { id: row.id, unknown }
       )]);
     }
@@ -120,6 +120,10 @@ var AutoEnqueuer = class {
       normalized.filter((t) => DISPATCHABLE_WEBHOOK_TRIGGERS.has(t))
     );
     if (triggers.size === 0) {
+      _optionalChain([this, 'access', _18 => _18.logger, 'access', _19 => _19.warn, 'optionalCall', _20 => _20(
+        `[webhook-auto-enqueuer] webhook '${_nullishCoalesce(row.name, () => ( row.id))}' has no dispatchable triggers \u2014 it will NEVER fire (rule webhook/without-triggers): there is no manual fire path (#3196), so this row is dead while looking armed in Setup. Declare one of: ${[...DISPATCHABLE_WEBHOOK_TRIGGERS].join(", ")}, or set it inactive if it should be off.`,
+        { id: row.id }
+      )]);
       return null;
     }
     let defn = {};
@@ -154,9 +158,13 @@ var AutoEnqueuer = class {
    * webhook persistence.
    */
   handleEvent(event) {
-    if (!_optionalChain([event, 'access', _18 => _18.type, 'optionalAccess', _19 => _19.startsWith, 'call', _20 => _20("data.record.")])) return;
     if (!event.object) return;
     if (event.object === this.subscriptionsObject) return;
+    if (_optionalChain([event, 'access', _21 => _21.type, 'optionalAccess', _22 => _22.startsWith, 'call', _23 => _23("data.records.")])) {
+      this.handleBulkEvent(event);
+      return;
+    }
+    if (!_optionalChain([event, 'access', _24 => _24.type, 'optionalAccess', _25 => _25.startsWith, 'call', _26 => _26("data.record.")])) return;
     const action = event.type.slice("data.record.".length);
     const trigger = mapActionToTrigger(action);
     if (!trigger) return;
@@ -166,7 +174,14 @@ var AutoEnqueuer = class {
     ];
     if (subs.length === 0) return;
     const payload = _nullishCoalesce(event.payload, () => ( {}));
-    const recordId = _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_nullishCoalesce(payload.recordId, () => ( payload.id)), () => ( _optionalChain([payload, 'access', _21 => _21.after, 'optionalAccess', _22 => _22.id]))), () => ( _optionalChain([payload, 'access', _23 => _23.before, 'optionalAccess', _24 => _24.id]))), () => ( "unknown"));
+    const recordId = payload.recordId;
+    if (typeof recordId !== "string" || recordId === "") {
+      _optionalChain([this, 'access', _27 => _27.logger, 'access', _28 => _28.warn, 'optionalCall', _29 => _29(
+        "[webhook-auto-enqueuer] dropping off-contract data event: payload is not a DataEvent (no top-level string `recordId`) \u2014 fix the producer",
+        { type: event.type, object: event.object }
+      )]);
+      return;
+    }
     const eventId = `${event.object}:${recordId}:${action}:${event.timestamp}`;
     for (const sub of subs) {
       if (!sub.triggers.has(trigger)) continue;
@@ -182,12 +197,13 @@ var AutoEnqueuer = class {
         timeoutMs: sub.timeoutMs,
         // [#3946] Envelope keys are written LAST so the event payload
         // cannot rewrite them. Behaviour-neutral for the engine's own
-        // publishers — `data.record.*` payloads are
-        // `{ recordId, after, changes }`, with record fields nested
-        // under `after`, so none of these four keys collide today. It
-        // is the shape that was wrong: a publisher that flattened
-        // record fields into the payload (the `payload.id` fallback
-        // above suggests some do) would have silently rewritten the
+        // publishers — since #4626 a `data.record.*` payload is a
+        // `DataEvent` (`id`, `type`, `object`, `recordId`, `changes?`,
+        // `after?`, `userId?`, `timestamp`), whose `object` /
+        // `recordId` / `timestamp` carry the SAME values written here
+        // and whose record fields stay nested under `after`. It is the
+        // shape that was wrong: a publisher that flattened record
+        // fields into the payload would have silently rewritten the
         // `object` / `action` / `timestamp` a subscriber receives.
         payload: {
           ...payload,
@@ -197,19 +213,87 @@ var AutoEnqueuer = class {
           timestamp: event.timestamp
         }
       }).catch(
-        (err) => _optionalChain([this, 'access', _25 => _25.logger, 'access', _26 => _26.warn, 'optionalCall', _27 => _27("[webhook-auto-enqueuer] enqueue failed", {
+        (err) => _optionalChain([this, 'access', _30 => _30.logger, 'access', _31 => _31.warn, 'optionalCall', _32 => _32("[webhook-auto-enqueuer] enqueue failed", {
+          webhook: sub.name,
+          eventId,
+          err: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _33 => _33.message]), () => ( err))
+        })])
+      );
+    }
+  }
+  /**
+   * Handler for aggregate `data.records.*` events — a predicate write
+   * (`multi: true`) that the driver reports only as an affected-row count
+   * (#4639).
+   *
+   * Deliberately NOT folded into {@link handleEvent}'s per-record path. The
+   * delivered body has no `recordId` and no record fields, so a subscriber
+   * to `update` that started receiving these would get a payload missing
+   * everything it reads — which is how the pre-#4626 `recordId: ''`
+   * fabrication broke consumers, just arriving from the other side. A
+   * webhook opts in with `bulk_update` / `bulk_delete`.
+   */
+  handleBulkEvent(event) {
+    const action = event.type.slice("data.records.".length);
+    const trigger = mapBulkActionToTrigger(action);
+    if (!trigger) return;
+    const subs = [
+      ..._nullishCoalesce(this.subscriptions.get(event.object), () => ( [])),
+      ..._nullishCoalesce(this.subscriptions.get("*"), () => ( []))
+    ];
+    if (subs.length === 0) return;
+    const payload = _nullishCoalesce(event.payload, () => ( {}));
+    const matched = payload.matched;
+    if (typeof matched !== "number" || !Number.isInteger(matched) || matched < 0) {
+      _optionalChain([this, 'access', _34 => _34.logger, 'access', _35 => _35.warn, 'optionalCall', _36 => _36(
+        "[webhook-auto-enqueuer] dropping off-contract bulk data event: payload is not a BulkDataEvent (no top-level non-negative integer `matched`) \u2014 fix the producer",
+        { type: event.type, object: event.object }
+      )]);
+      return;
+    }
+    const eventUuid = payload.id;
+    if (typeof eventUuid !== "string" || eventUuid === "") {
+      _optionalChain([this, 'access', _37 => _37.logger, 'access', _38 => _38.warn, 'optionalCall', _39 => _39(
+        "[webhook-auto-enqueuer] dropping off-contract bulk data event: payload has no top-level string `id` to dedup on \u2014 fix the producer",
+        { type: event.type, object: event.object }
+      )]);
+      return;
+    }
+    const eventId = `${event.object}:${event.type}:${eventUuid}`;
+    for (const sub of subs) {
+      if (!sub.triggers.has(trigger)) continue;
+      void this.enqueue({
+        source: "webhook",
+        refId: sub.id,
+        dedupKey: `${sub.id}:${eventId}`,
+        label: event.type,
+        url: sub.url,
+        method: sub.method,
+        headers: sub.headers,
+        signingSecret: sub.secret,
+        timeoutMs: sub.timeoutMs,
+        // [#3946] Envelope keys last so the payload cannot rewrite them.
+        payload: {
+          ...payload,
+          object: event.object,
+          matched,
+          action,
+          timestamp: event.timestamp
+        }
+      }).catch(
+        (err) => _optionalChain([this, 'access', _40 => _40.logger, 'access', _41 => _41.warn, 'optionalCall', _42 => _42("[webhook-auto-enqueuer] bulk enqueue failed", {
           webhook: sub.name,
           eventId,
-          err: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _28 => _28.message]), () => ( err))
+          err: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _43 => _43.message]), () => ( err))
         })])
       );
     }
   }
   handleSelfHealEvent(event) {
     if (event.object !== this.subscriptionsObject) return;
-    if (!_optionalChain([event, 'access', _29 => _29.type, 'optionalAccess', _30 => _30.startsWith, 'call', _31 => _31("data.record.")])) return;
+    if (!_optionalChain([event, 'access', _44 => _44.type, 'optionalAccess', _45 => _45.startsWith, 'call', _46 => _46("data.record.")]) && !_optionalChain([event, 'access', _47 => _47.type, 'optionalAccess', _48 => _48.startsWith, 'call', _49 => _49("data.records.")])) return;
     this.refresh().catch(
-      (err) => _optionalChain([this, 'access', _32 => _32.logger, 'access', _33 => _33.warn, 'optionalCall', _34 => _34("[webhook-auto-enqueuer] self-heal refresh failed", err)])
+      (err) => _optionalChain([this, 'access', _50 => _50.logger, 'access', _51 => _51.warn, 'optionalCall', _52 => _52("[webhook-auto-enqueuer] self-heal refresh failed", err)])
     );
   }
   /** Test / admin accessor. */
@@ -229,29 +313,45 @@ function mapActionToTrigger(action) {
       return null;
   }
 }
-var DISPATCHABLE_WEBHOOK_TRIGGERS = /* @__PURE__ */ new Set(["create", "update", "delete"]);
+function mapBulkActionToTrigger(action) {
+  switch (action) {
+    case "updated":
+      return "bulk_update";
+    case "deleted":
+      return "bulk_delete";
+    default:
+      return null;
+  }
+}
+var DISPATCHABLE_WEBHOOK_TRIGGERS = /* @__PURE__ */ new Set([
+  "create",
+  "update",
+  "delete",
+  "bulk_update",
+  "bulk_delete"
+]);
 
 // src/bootstrap-declared-webhooks.ts
 var _automation = require('@objectstack/spec/automation');
 var SYSTEM_CTX = { isSystem: true, positions: [], permissions: [] };
 function uid(prefix) {
   const g = globalThis;
-  if (_optionalChain([g, 'access', _35 => _35.crypto, 'optionalAccess', _36 => _36.randomUUID])) return `${prefix}_${g.crypto.randomUUID()}`;
+  if (_optionalChain([g, 'access', _53 => _53.crypto, 'optionalAccess', _54 => _54.randomUUID])) return `${prefix}_${g.crypto.randomUUID()}`;
   return `${prefix}_${Math.random().toString(36).slice(2, 10)}`;
 }
 function readDeclared(engine, metadataService, type) {
   try {
-    const reg = _optionalChain([engine, 'optionalAccess', _37 => _37._registry]);
-    if (_optionalChain([reg, 'optionalAccess', _38 => _38.listItems])) {
-      const items = (_nullishCoalesce(reg.listItems(type), () => ( []))).map((i) => _nullishCoalesce(_optionalChain([i, 'optionalAccess', _39 => _39.content]), () => ( i))).filter(Boolean);
+    const reg = _optionalChain([engine, 'optionalAccess', _55 => _55._registry]);
+    if (_optionalChain([reg, 'optionalAccess', _56 => _56.listItems])) {
+      const items = (_nullishCoalesce(reg.listItems(type), () => ( []))).map((i) => _nullishCoalesce(_optionalChain([i, 'optionalAccess', _57 => _57.content]), () => ( i))).filter(Boolean);
       if (items.length > 0) return items;
     }
   } catch (e3) {
   }
   try {
-    const listed = _optionalChain([metadataService, 'optionalAccess', _40 => _40.list, 'optionalCall', _41 => _41(type)]);
-    const arr = typeof _optionalChain([listed, 'optionalAccess', _42 => _42.then]) === "function" ? [] : _nullishCoalesce(listed, () => ( []));
-    return Array.isArray(arr) ? arr.map((i) => _nullishCoalesce(_optionalChain([i, 'optionalAccess', _43 => _43.content]), () => ( i))).filter(Boolean) : [];
+    const listed = _optionalChain([metadataService, 'optionalAccess', _58 => _58.list, 'optionalCall', _59 => _59(type)]);
+    const arr = typeof _optionalChain([listed, 'optionalAccess', _60 => _60.then]) === "function" ? [] : _nullishCoalesce(listed, () => ( []));
+    return Array.isArray(arr) ? arr.map((i) => _nullishCoalesce(_optionalChain([i, 'optionalAccess', _61 => _61.content]), () => ( i))).filter(Boolean) : [];
   } catch (e4) {
     return [];
   }
@@ -267,9 +367,9 @@ async function bootstrapDeclaredWebhooks(engine, metadataService, logger, subscr
     try {
       wh = _automation.WebhookSchema.parse(raw);
     } catch (err) {
-      _optionalChain([logger, 'optionalAccess', _44 => _44.warn, 'optionalCall', _45 => _45("[webhook] declared webhook failed validation \u2014 skipped", {
-        name: _optionalChain([raw, 'optionalAccess', _46 => _46.name]),
-        error: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _47 => _47.message]), () => ( String(err)))
+      _optionalChain([logger, 'optionalAccess', _62 => _62.warn, 'optionalCall', _63 => _63("[webhook] declared webhook failed validation \u2014 skipped", {
+        name: _optionalChain([raw, 'optionalAccess', _64 => _64.name]),
+        error: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _65 => _65.message]), () => ( String(err)))
       })]);
       skipped += 1;
       continue;
@@ -283,7 +383,7 @@ async function bootstrapDeclaredWebhooks(engine, metadataService, logger, subscr
       const row = Array.isArray(existing) ? existing[0] : void 0;
       if (row) {
         if (row.managed_by === "admin") {
-          _optionalChain([logger, 'optionalAccess', _48 => _48.warn, 'optionalCall', _49 => _49("[webhook] declared name collides with an admin-authored row \u2014 seed skipped", {
+          _optionalChain([logger, 'optionalAccess', _66 => _66.warn, 'optionalCall', _67 => _67("[webhook] declared name collides with an admin-authored row \u2014 seed skipped", {
             name: wh.name
           })]);
           skipped += 1;
@@ -316,14 +416,14 @@ async function bootstrapDeclaredWebhooks(engine, metadataService, logger, subscr
       await engine.insert(subscriptionsObject, newRow, { context: SYSTEM_CTX });
       seeded += 1;
     } catch (err) {
-      _optionalChain([logger, 'optionalAccess', _50 => _50.warn, 'optionalCall', _51 => _51("[webhook] declared webhook seed failed", {
+      _optionalChain([logger, 'optionalAccess', _68 => _68.warn, 'optionalCall', _69 => _69("[webhook] declared webhook seed failed", {
         name: wh.name,
-        error: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _52 => _52.message]), () => ( String(err)))
+        error: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _70 => _70.message]), () => ( String(err)))
       })]);
       skipped += 1;
     }
   }
-  _optionalChain([logger, 'optionalAccess', _53 => _53.info, 'optionalCall', _54 => _54("[webhook] declared webhooks materialized into sys_webhook", {
+  _optionalChain([logger, 'optionalAccess', _71 => _71.info, 'optionalCall', _72 => _72("[webhook] declared webhooks materialized into sys_webhook", {
     seeded,
     skipped,
     total: declared.length
@@ -350,14 +450,14 @@ function mapWebhookToRow(wh) {
 var WEBHOOK_PROVENANCE_PACKAGE = "plugin-webhooks:provenance";
 var SYSTEM_CTX2 = { isSystem: true, positions: [], permissions: [] };
 function bindWebhookProvenanceStamp(engine, logger) {
-  if (typeof _optionalChain([engine, 'optionalAccess', _55 => _55.registerHook]) !== "function") return;
+  if (typeof _optionalChain([engine, 'optionalAccess', _73 => _73.registerHook]) !== "function") return;
   engine.registerHook(
     "beforeUpdate",
     async (ctx) => {
-      if (_optionalChain([ctx, 'optionalAccess', _56 => _56.session, 'optionalAccess', _57 => _57.isSystem])) return;
-      const id = _nullishCoalesce(_optionalChain([ctx, 'optionalAccess', _58 => _58.input, 'optionalAccess', _59 => _59.id]), () => ( _optionalChain([ctx, 'optionalAccess', _60 => _60.input, 'optionalAccess', _61 => _61.data, 'optionalAccess', _62 => _62.id])));
+      if (_optionalChain([ctx, 'optionalAccess', _74 => _74.session, 'optionalAccess', _75 => _75.isSystem])) return;
+      const id = _nullishCoalesce(_optionalChain([ctx, 'optionalAccess', _76 => _76.input, 'optionalAccess', _77 => _77.id]), () => ( _optionalChain([ctx, 'optionalAccess', _78 => _78.input, 'optionalAccess', _79 => _79.data, 'optionalAccess', _80 => _80.id])));
       if (!id) return;
-      const data = _optionalChain([ctx, 'optionalAccess', _63 => _63.input, 'optionalAccess', _64 => _64.data]);
+      const data = _optionalChain([ctx, 'optionalAccess', _81 => _81.input, 'optionalAccess', _82 => _82.data]);
       if (!data || typeof data !== "object") return;
       try {
         const rows = await engine.find("sys_webhook", {
@@ -372,18 +472,18 @@ function bindWebhookProvenanceStamp(engine, logger) {
           data.customized = true;
         }
       } catch (err) {
-        _optionalChain([logger, 'optionalAccess', _65 => _65.warn, 'optionalCall', _66 => _66("[webhook] provenance stamp failed (edit proceeds unstamped)", {
+        _optionalChain([logger, 'optionalAccess', _83 => _83.warn, 'optionalCall', _84 => _84("[webhook] provenance stamp failed (edit proceeds unstamped)", {
           id,
-          error: _optionalChain([err, 'optionalAccess', _67 => _67.message])
+          error: _optionalChain([err, 'optionalAccess', _85 => _85.message])
         })]);
       }
     },
     { object: "sys_webhook", packageId: WEBHOOK_PROVENANCE_PACKAGE, priority: 150 }
   );
-  _optionalChain([logger, 'optionalAccess', _68 => _68.info, 'optionalCall', _69 => _69("[webhook] provenance stamp hook bound")]);
+  _optionalChain([logger, 'optionalAccess', _86 => _86.info, 'optionalCall', _87 => _87("[webhook] provenance stamp hook bound")]);
 }
 function unbindWebhookProvenanceStamp(engine) {
-  if (typeof _optionalChain([engine, 'optionalAccess', _70 => _70.unregisterHooksByPackage]) === "function") {
+  if (typeof _optionalChain([engine, 'optionalAccess', _88 => _88.unregisterHooksByPackage]) === "function") {
     engine.unregisterHooksByPackage(WEBHOOK_PROVENANCE_PACKAGE);
   }
 }
@@ -418,7 +518,7 @@ var WebhookOutboxPlugin = class {
         scope: "system",
         name: "Webhook Schemas",
         description: "Registers sys_webhook (configuration). Deliveries use messaging's sys_http_delivery outbox.",
-        objects: [_chunkQUTQSOQCcjs.SysWebhook],
+        objects: [_chunkJQUVS5KKcjs.SysWebhook],
         navigationContributions: [
           {
             app: "setup",
@@ -432,7 +532,7 @@ var WebhookOutboxPlugin = class {
         ]
       });
     } else {
-      _optionalChain([ctx, 'access', _71 => _71.logger, 'access', _72 => _72.warn, 'optionalCall', _73 => _73(
+      _optionalChain([ctx, 'access', _89 => _89.logger, 'access', _90 => _90.warn, 'optionalCall', _91 => _91(
         "[webhook-outbox] manifest service unavailable \u2014 sys_webhook will NOT appear in REST or Studio nav. Register MetadataService before WebhookOutboxPlugin."
       )]);
     }
@@ -441,7 +541,7 @@ var WebhookOutboxPlugin = class {
         try {
           const i18n = ctx.getService("i18n");
           if (i18n && typeof i18n.loadTranslations === "function") {
-            const { WebhooksTranslations } = await Promise.resolve().then(() => _interopRequireWildcard(require("./translations-CBQRUIS5.cjs")));
+            const { WebhooksTranslations } = await Promise.resolve().then(() => _interopRequireWildcard(require("./translations-BWS57U2V.cjs")));
             for (const [locale, data] of Object.entries(WebhooksTranslations)) {
               i18n.loadTranslations(locale, data);
             }
@@ -458,12 +558,12 @@ var WebhookOutboxPlugin = class {
         this.registerAdminRoutes(ctx);
       });
     }
-    _optionalChain([ctx, 'access', _74 => _74.logger, 'access', _75 => _75.info, 'optionalCall', _76 => _76("[webhook-outbox] initialised (delivery via shared messaging HTTP outbox)", {
+    _optionalChain([ctx, 'access', _92 => _92.logger, 'access', _93 => _93.info, 'optionalCall', _94 => _94("[webhook-outbox] initialised (delivery via shared messaging HTTP outbox)", {
       autoEnqueue: autoEnqueueOpt !== false
     })]);
   }
   async dispose() {
-    await _optionalChain([this, 'access', _77 => _77.autoEnqueuer, 'optionalAccess', _78 => _78.stop, 'call', _79 => _79()]);
+    await _optionalChain([this, 'access', _95 => _95.autoEnqueuer, 'optionalAccess', _96 => _96.stop, 'call', _97 => _97()]);
     if (this.boundEngine) {
       try {
         unbindWebhookProvenanceStamp(this.boundEngine);
@@ -491,7 +591,7 @@ var WebhookOutboxPlugin = class {
   async bootDeclaredWebhooks(ctx) {
     const engine = this.tryGetService(ctx, ["objectql", "data"]);
     if (!engine) {
-      _optionalChain([ctx, 'access', _80 => _80.logger, 'access', _81 => _81.warn, 'optionalCall', _82 => _82("[webhook] declared-webhook bootstrap skipped \u2014 no data engine available")]);
+      _optionalChain([ctx, 'access', _98 => _98.logger, 'access', _99 => _99.warn, 'optionalCall', _100 => _100("[webhook] declared-webhook bootstrap skipped \u2014 no data engine available")]);
       return;
     }
     this.boundEngine = engine;
@@ -504,8 +604,8 @@ var WebhookOutboxPlugin = class {
     try {
       await bootstrapDeclaredWebhooks(engine, metadataService, ctx.logger);
     } catch (err) {
-      _optionalChain([ctx, 'access', _83 => _83.logger, 'access', _84 => _84.warn, 'optionalCall', _85 => _85("[webhook] declared-webhook bootstrap failed (dispatcher still serves admin rows)", {
-        error: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _86 => _86.message]), () => ( String(err)))
+      _optionalChain([ctx, 'access', _101 => _101.logger, 'access', _102 => _102.warn, 'optionalCall', _103 => _103("[webhook] declared-webhook bootstrap failed (dispatcher still serves admin rows)", {
+        error: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _104 => _104.message]), () => ( String(err)))
       })]);
     }
   }
@@ -515,14 +615,14 @@ var WebhookOutboxPlugin = class {
     const realtime = this.tryGetService(ctx, ["realtime"]);
     const messaging = this.getMessaging(ctx);
     if (!engine || !realtime || !messaging) {
-      _optionalChain([ctx, 'access', _87 => _87.logger, 'access', _88 => _88.warn, 'optionalCall', _89 => _89(
+      _optionalChain([ctx, 'access', _105 => _105.logger, 'access', _106 => _106.warn, 'optionalCall', _107 => _107(
         "[webhook-auto-enqueuer] disabled \u2014 ObjectQL, Realtime, or Messaging service not available",
         { hasEngine: !!engine, hasRealtime: !!realtime, hasMessaging: !!messaging }
       )]);
       return;
     }
     if (!messaging.isHttpDeliveryReady()) {
-      _optionalChain([ctx, 'access', _90 => _90.logger, 'access', _91 => _91.warn, 'optionalCall', _92 => _92(
+      _optionalChain([ctx, 'access', _108 => _108.logger, 'access', _109 => _109.warn, 'optionalCall', _110 => _110(
         "[webhook-auto-enqueuer] messaging HTTP outbox not ready (no data engine / reliableDelivery off) \u2014 webhook deliveries will not be durable"
       )]);
     }
@@ -535,7 +635,7 @@ var WebhookOutboxPlugin = class {
     );
     await this.autoEnqueuer.start();
     ctx.registerService("webhook.autoEnqueuer", this.autoEnqueuer);
-    _optionalChain([ctx, 'access', _93 => _93.logger, 'access', _94 => _94.info, 'optionalCall', _95 => _95("[webhook-auto-enqueuer] started (enqueues source=webhook onto sys_http_delivery)")]);
+    _optionalChain([ctx, 'access', _111 => _111.logger, 'access', _112 => _112.info, 'optionalCall', _113 => _113("[webhook-auto-enqueuer] started (enqueues source=webhook onto sys_http_delivery)")]);
   }
   tryGetService(ctx, names) {
     for (const n of names) {
@@ -555,7 +655,7 @@ var WebhookOutboxPlugin = class {
   registerAdminRoutes(ctx) {
     const http = this.tryGetService(ctx, ["http-server"]);
     if (!http || typeof http.getRawApp !== "function") {
-      _optionalChain([ctx, 'access', _96 => _96.logger, 'access', _97 => _97.debug, 'optionalCall', _98 => _98("[webhook-outbox] HTTP server not available; redeliver endpoint not mounted")]);
+      _optionalChain([ctx, 'access', _114 => _114.logger, 'access', _115 => _115.debug, 'optionalCall', _116 => _116("[webhook-outbox] HTTP server not available; redeliver endpoint not mounted")]);
       return;
     }
     const rawApp = http.getRawApp();
@@ -575,7 +675,7 @@ var WebhookOutboxPlugin = class {
       } catch (e9) {
         return c.json({ success: false, error: { code: "INVALID_REQUEST", message: "Request body must be JSON." } }, 400);
       }
-      const deliveryId = typeof _optionalChain([body, 'optionalAccess', _99 => _99.deliveryId]) === "string" ? body.deliveryId.trim() : "";
+      const deliveryId = typeof _optionalChain([body, 'optionalAccess', _117 => _117.deliveryId]) === "string" ? body.deliveryId.trim() : "";
       if (!deliveryId) {
         return c.json(
           { success: false, error: { code: "MISSING_REQUIRED_FIELD", message: "Body must include `deliveryId: string`." } },
@@ -584,24 +684,24 @@ var WebhookOutboxPlugin = class {
       }
       try {
         const row = await messaging.redeliverHttp(deliveryId);
-        _optionalChain([ctx, 'access', _100 => _100.logger, 'access', _101 => _101.info, 'optionalCall', _102 => _102("[webhook-outbox] redelivered", { deliveryId, requestedBy: userId })]);
+        _optionalChain([ctx, 'access', _118 => _118.logger, 'access', _119 => _119.info, 'optionalCall', _120 => _120("[webhook-outbox] redelivered", { deliveryId, requestedBy: userId })]);
         return c.json({ success: true, data: { id: row.id, status: row.status } });
       } catch (err) {
-        const code = _optionalChain([err, 'optionalAccess', _103 => _103.code]);
+        const code = _optionalChain([err, 'optionalAccess', _121 => _121.code]);
         if (code === "RESOURCE_NOT_FOUND") {
           return c.json({ success: false, error: { code, message: err.message } }, 404);
         }
         if (code === "DELIVERY_NOT_ELIGIBLE") {
           return c.json({ success: false, error: { code, message: err.message } }, 409);
         }
-        _optionalChain([ctx, 'access', _104 => _104.logger, 'access', _105 => _105.error, 'optionalCall', _106 => _106("[webhook-outbox] redeliver failed", err)]);
+        _optionalChain([ctx, 'access', _122 => _122.logger, 'access', _123 => _123.error, 'optionalCall', _124 => _124("[webhook-outbox] redeliver failed", err)]);
         return c.json(
-          { success: false, error: { code: "INTERNAL_ERROR", message: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _107 => _107.message]), () => ( String(err))) } },
+          { success: false, error: { code: "INTERNAL_ERROR", message: _nullishCoalesce(_optionalChain([err, 'optionalAccess', _125 => _125.message]), () => ( String(err))) } },
           500
         );
       }
     });
-    _optionalChain([ctx, 'access', _108 => _108.logger, 'access', _109 => _109.info, 'optionalCall', _110 => _110("[webhook-outbox] redeliver endpoint mounted at POST /api/v1/webhooks/redeliver")]);
+    _optionalChain([ctx, 'access', _126 => _126.logger, 'access', _127 => _127.info, 'optionalCall', _128 => _128("[webhook-outbox] redeliver endpoint mounted at POST /api/v1/webhooks/redeliver")]);
   }
   async resolveSessionUserId(ctx, c) {
     try {
@@ -611,9 +711,9 @@ var WebhookOutboxPlugin = class {
       if (!api && typeof authService.getApi === "function") {
         api = await authService.getApi();
       }
-      if (!_optionalChain([api, 'optionalAccess', _111 => _111.getSession])) return void 0;
+      if (!_optionalChain([api, 'optionalAccess', _129 => _129.getSession])) return void 0;
       const session = await api.getSession({ headers: c.req.raw.headers });
-      const uid2 = _optionalChain([session, 'optionalAccess', _112 => _112.user, 'optionalAccess', _113 => _113.id]);
+      const uid2 = _optionalChain([session, 'optionalAccess', _130 => _130.user, 'optionalAccess', _131 => _131.id]);
       return typeof uid2 === "string" && uid2.length > 0 ? uid2 : void 0;
     } catch (e10) {
       return void 0;
@@ -624,5 +724,5 @@ var WebhookOutboxPlugin = class {
 
 
 
-exports.AutoEnqueuer = AutoEnqueuer; exports.SysWebhook = _chunkQUTQSOQCcjs.SysWebhook; exports.WebhookOutboxPlugin = WebhookOutboxPlugin;
+exports.AutoEnqueuer = AutoEnqueuer; exports.SysWebhook = _chunkJQUVS5KKcjs.SysWebhook; exports.WebhookOutboxPlugin = WebhookOutboxPlugin;
 //# sourceMappingURL=index.cjs.map