@objectstack/plugin-webhooks 5.1.0 → 6.0.0

package/.turbo/turbo-build.log

@@ -1,22 +1,44 @@
 
-> @objectstack/plugin-webhooks@5.1.0 build /home/runner/work/framework/framework/packages/plugins/plugin-webhooks
-> tsup --config ../../../tsup.config.ts
+> @objectstack/plugin-webhooks@6.0.0 build /home/runner/work/framework/framework/packages/plugins/plugin-webhooks
+> tsup
 
-CLI Building entry: src/index.ts
+CLI Building entry: src/index.ts, src/schema.ts, src/sql-outbox.ts
 CLI Using tsconfig: tsconfig.json
 CLI tsup v8.5.1
-CLI Using tsup config: /home/runner/work/framework/framework/tsup.config.ts
+CLI Using tsup config: /home/runner/work/framework/framework/packages/plugins/plugin-webhooks/tsup.config.ts
 CLI Target: es2020
 CLI Cleaning output folder
 ESM Build start
 CJS Build start
-ESM dist/index.mjs     7.36 KB
-ESM dist/index.mjs.map 15.67 KB
-ESM ⚡️ Build success in 97ms
-CJS dist/index.js     9.02 KB
-CJS dist/index.js.map 16.38 KB
-CJS ⚡️ Build success in 110ms
+ESM dist/index.js              27.98 KB
+ESM dist/schema.js             175.00 B
+ESM dist/sql-outbox.js         157.00 B
+ESM dist/chunk-BS2QTZH3.js     6.92 KB
+ESM dist/chunk-33LYZT7O.js     7.13 KB
+ESM dist/index.js.map          73.03 KB
+ESM dist/schema.js.map         71.00 B
+ESM dist/sql-outbox.js.map     71.00 B
+ESM dist/chunk-BS2QTZH3.js.map 24.11 KB
+ESM dist/chunk-33LYZT7O.js.map 14.02 KB
+ESM ⚡️ Build success in 958ms
+CJS dist/index.cjs              33.81 KB
+CJS dist/schema.cjs             309.00 B
+CJS dist/sql-outbox.cjs         269.00 B
+CJS dist/chunk-FA66GQEO.cjs     8.30 KB
+CJS dist/chunk-MJZGD37S.cjs     7.37 KB
+CJS dist/schema.cjs.map         288.00 B
+CJS dist/sql-outbox.cjs.map     299.00 B
+CJS dist/index.cjs.map          65.94 KB
+CJS dist/chunk-FA66GQEO.cjs.map 27.71 KB
+CJS dist/chunk-MJZGD37S.cjs.map 16.72 KB
+CJS ⚡️ Build success in 979ms
 DTS Build start
-DTS ⚡️ Build success in 9704ms
-DTS dist/index.d.mts 3.46 KB
-DTS dist/index.d.ts  3.46 KB
+DTS ⚡️ Build success in 13284ms
+DTS dist/index.d.ts            17.42 KB
+DTS dist/schema.d.ts           211.97 KB
+DTS dist/sql-outbox.d.ts       2.44 KB
+DTS dist/outbox-CIn7LSyB.d.ts  5.82 KB
+DTS dist/index.d.cts           17.42 KB
+DTS dist/schema.d.cts          211.97 KB
+DTS dist/sql-outbox.d.cts      2.45 KB
+DTS dist/outbox-CIn7LSyB.d.cts 5.82 KB

package/CHANGELOG.md

@@ -1,42 +1,26 @@
 # @objectstack/plugin-webhooks
 
-## 5.1.0
+## 6.0.0
 
 ### Patch Changes
 
-- Updated dependencies [75f4ee6]
-- Updated dependencies [823d559]
-  - @objectstack/spec@5.1.0
-  - @objectstack/core@5.1.0
+- Updated dependencies [629a716]
+- Updated dependencies [dbc4f7d]
+- Updated dependencies [944f187]
+  - @objectstack/spec@6.0.0
+  - @objectstack/platform-objects@6.0.0
+  - @objectstack/core@6.0.0
+  - @objectstack/service-cluster@5.1.2
 
-## 5.0.0
+## 5.2.0
 
 ### Patch Changes
 
-- Updated dependencies [2f9073a]
-  - @objectstack/spec@5.0.0
-  - @objectstack/core@5.0.0
-
-## 4.2.0
-
-### Patch Changes
-
-- Updated dependencies [2869891]
-  - @objectstack/spec@4.2.0
-  - @objectstack/core@4.2.0
-
-## 4.1.1
-
-### Patch Changes
-
-- @objectstack/spec@4.1.1
-- @objectstack/core@4.1.1
-
-## 4.0.1
-
-### Patch Changes
-
-- Updated dependencies [2108c30]
-- Updated dependencies [23db640]
-  - @objectstack/spec@4.1.0
-  - @objectstack/core@4.1.0
+- Updated dependencies [bab2b20]
+- Updated dependencies [fa011d8]
+- Updated dependencies [f0f7c27]
+- Updated dependencies [b806f58]
+  - @objectstack/platform-objects@5.2.0
+  - @objectstack/spec@5.2.0
+  - @objectstack/core@5.2.0
+  - @objectstack/service-cluster@5.1.1

package/dist/chunk-33LYZT7O.js

@@ -0,0 +1,184 @@
+// src/sys-webhook-delivery.object.ts
+import { Field, ObjectSchema } from "@objectstack/spec/data";
+var SysWebhookDelivery = ObjectSchema.create({
+  name: "sys_webhook_delivery",
+  label: "Webhook Delivery",
+  pluralLabel: "Webhook Deliveries",
+  icon: "package",
+  isSystem: true,
+  managedBy: "config",
+  userActions: { create: false, edit: false, delete: false, import: false },
+  description: "Durable outbox row for one webhook attempt. Managed by @objectstack/plugin-webhooks; do not write directly.",
+  displayNameField: "id",
+  titleFormat: "{event_type} \u2192 {url}",
+  compactLayout: ["event_type", "url", "status", "attempts", "next_retry_at"],
+  actions: [
+    {
+      name: "redeliver",
+      label: "Redeliver",
+      icon: "refresh-cw",
+      variant: "secondary",
+      locations: ["list_item", "record_header"],
+      type: "api",
+      target: "/api/v1/webhooks/redeliver",
+      method: "POST",
+      recordIdParam: "deliveryId",
+      confirmText: "Replay this delivery? The receiver will get the original payload again \u2014 they must be idempotent on the X-Objectstack-Delivery header.",
+      successMessage: "Queued for redelivery",
+      refreshAfter: true,
+      // Only terminal rows are safe to replay. Pending / in_flight rows
+      // are either already queued or actively being sent — replaying
+      // would double-deliver.
+      disabled: "!(status in ['success', 'failed', 'dead'])"
+    }
+  ],
+  listViews: {
+    recent: {
+      type: "grid",
+      name: "recent",
+      label: "Recent",
+      data: { provider: "object", object: "sys_webhook_delivery" },
+      columns: ["event_type", "url", "status", "attempts", "response_code", "updated_at"],
+      sort: [{ field: "updated_at", order: "desc" }],
+      pagination: { pageSize: 50 }
+    },
+    failures: {
+      type: "grid",
+      name: "failures",
+      label: "Failures",
+      data: { provider: "object", object: "sys_webhook_delivery" },
+      columns: ["event_type", "url", "status", "attempts", "response_code", "error", "updated_at"],
+      filter: [{ field: "status", operator: "in", value: ["failed", "dead"] }],
+      sort: [{ field: "updated_at", order: "desc" }],
+      pagination: { pageSize: 50 }
+    },
+    in_flight: {
+      type: "grid",
+      name: "in_flight",
+      label: "In Flight",
+      data: { provider: "object", object: "sys_webhook_delivery" },
+      columns: ["event_type", "url", "attempts", "claimed_by", "claimed_at"],
+      filter: [{ field: "status", operator: "equals", value: "in_flight" }],
+      sort: [{ field: "claimed_at", order: "desc" }],
+      pagination: { pageSize: 50 }
+    },
+    pending: {
+      type: "grid",
+      name: "pending",
+      label: "Pending",
+      data: { provider: "object", object: "sys_webhook_delivery" },
+      columns: ["event_type", "url", "attempts", "next_retry_at", "updated_at"],
+      filter: [{ field: "status", operator: "equals", value: "pending" }],
+      sort: [{ field: "next_retry_at", order: "asc" }],
+      pagination: { pageSize: 50 }
+    },
+    by_status: {
+      type: "grid",
+      name: "by_status",
+      label: "By Status",
+      data: { provider: "object", object: "sys_webhook_delivery" },
+      columns: ["status", "event_type", "url", "attempts", "updated_at"],
+      sort: [{ field: "status", order: "asc" }, { field: "updated_at", order: "desc" }],
+      grouping: { fields: [{ field: "status", order: "asc", collapsed: false }] },
+      pagination: { pageSize: 100 }
+    },
+    by_webhook: {
+      type: "grid",
+      name: "by_webhook",
+      label: "By Webhook",
+      data: { provider: "object", object: "sys_webhook_delivery" },
+      columns: ["webhook_id", "event_type", "status", "attempts", "updated_at"],
+      sort: [{ field: "webhook_id", order: "asc" }, { field: "updated_at", order: "desc" }],
+      grouping: { fields: [{ field: "webhook_id", order: "asc", collapsed: true }] },
+      pagination: { pageSize: 100 }
+    },
+    all_deliveries: {
+      type: "grid",
+      name: "all_deliveries",
+      label: "All",
+      data: { provider: "object", object: "sys_webhook_delivery" },
+      columns: ["event_type", "url", "status", "attempts", "response_code", "updated_at"],
+      sort: [{ field: "updated_at", order: "desc" }],
+      pagination: { pageSize: 100 }
+    }
+  },
+  fields: {
+    id: Field.text({
+      label: "Delivery ID",
+      required: true,
+      maxLength: 64,
+      description: "UUID \u2014 also doubles as the receiver-side idempotency key"
+    }),
+    webhook_id: Field.text({
+      label: "Webhook ID",
+      required: true,
+      maxLength: 64,
+      description: "FK to sys_webhook.id (loosely coupled \u2014 denormalised URL/secret on row)"
+    }),
+    event_id: Field.text({
+      label: "Event ID",
+      required: true,
+      maxLength: 128,
+      description: "Source event id; UNIQUE(event_id, webhook_id) for dedup"
+    }),
+    event_type: Field.text({
+      label: "Event Type",
+      required: true,
+      maxLength: 128,
+      description: "e.g. data.record.created"
+    }),
+    url: Field.text({
+      label: "Target URL",
+      required: true,
+      maxLength: 2048,
+      description: "Snapshotted at enqueue so config edits do not rewrite live rows"
+    }),
+    method: Field.text({ label: "Method", required: false, maxLength: 10 }),
+    headers_json: Field.textarea({ label: "Headers JSON", required: false }),
+    secret: Field.text({ label: "HMAC Secret", required: false, maxLength: 256 }),
+    timeout_ms: Field.number({ label: "Timeout (ms)", required: false }),
+    payload_json: Field.textarea({ label: "Payload JSON", required: true }),
+    partition_key: Field.number({
+      label: "Partition",
+      required: true,
+      description: "hash(webhook_id) mod partitionCount \u2014 precomputed for cheap WHERE"
+    }),
+    status: Field.text({
+      label: "Status",
+      required: true,
+      defaultValue: "pending",
+      maxLength: 16,
+      description: "pending | in_flight | success | failed | dead"
+    }),
+    attempts: Field.number({
+      label: "Attempts",
+      required: true,
+      defaultValue: 0,
+      description: "Number of POST attempts made so far"
+    }),
+    claimed_by: Field.text({ label: "Claimed By", required: false, maxLength: 128 }),
+    claimed_at: Field.number({ label: "Claimed At (ms)", required: false }),
+    next_retry_at: Field.number({ label: "Next Retry At (ms)", required: false }),
+    last_attempted_at: Field.number({ label: "Last Attempted At (ms)", required: false }),
+    response_code: Field.number({ label: "HTTP Status", required: false }),
+    response_body: Field.textarea({ label: "Response Body (capped)", required: false }),
+    error: Field.textarea({ label: "Error", required: false }),
+    created_at: Field.number({ label: "Created At (ms)", required: true }),
+    updated_at: Field.number({ label: "Updated At (ms)", required: true })
+  },
+  indexes: [
+    { fields: ["event_id", "webhook_id"], unique: true },
+    // Hot path: claim query
+    { fields: ["status", "partition_key", "next_retry_at"] },
+    // Reaper: scan stale in_flight rows by claimed_at
+    { fields: ["status", "claimed_at"] },
+    { fields: ["webhook_id"] }
+  ]
+});
+var SYS_WEBHOOK_DELIVERY = "sys_webhook_delivery";
+
+export {
+  SysWebhookDelivery,
+  SYS_WEBHOOK_DELIVERY
+};
+//# sourceMappingURL=chunk-33LYZT7O.js.map

package/dist/chunk-33LYZT7O.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sys-webhook-delivery.object.ts"],"sourcesContent":["// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { Field, ObjectSchema } from '@objectstack/spec/data';\n\n/**\n * sys_webhook_delivery — Durable outbox row for one HTTP attempt.\n *\n * Schema is owned by `@objectstack/plugin-webhooks`. Add it to your stack\n * via:\n *\n *   import { SysWebhookDelivery } from '@objectstack/plugin-webhooks/schema';\n *   defineStack({ objects: [SysWebhookDelivery, ...], plugins: [...] });\n *\n * Designed for the SqlWebhookOutbox claim algorithm:\n *\n *   1. Producers INSERT pending rows (dedup'd by (event_id, webhook_id)).\n *   2. The dispatcher's per-partition lock-holder runs:\n *        SELECT id WHERE status='pending' AND partition_key=? AND (next_retry_at <= now OR null)\n *        UPDATE SET status='in_flight' WHERE id IN (...) AND status='pending'  ← atomic claim\n *        POST to target URL\n *        UPDATE SET status=success/pending/dead, attempts=attempts+1, ...\n *\n * `partition_key` is precomputed on enqueue (hash(webhook_id) mod N) so the\n * dispatcher can filter cheaply without DB-side hash functions.\n *\n * Indexes are tuned for the hot path: `(status, partition_key, next_retry_at)`\n * is the claim query; `(event_id, webhook_id)` is the dedup uniqueness.\n *\n * @namespace sys\n */\nexport const SysWebhookDelivery = ObjectSchema.create({\n    name: 'sys_webhook_delivery',\n    label: 'Webhook Delivery',\n    pluralLabel: 'Webhook Deliveries',\n    icon: 'package',\n    isSystem: true,\n    managedBy: 'config',\n    userActions: { create: false, edit: false, delete: false, import: false },\n    description:\n        'Durable outbox row for one webhook attempt. Managed by @objectstack/plugin-webhooks; do not write directly.',\n    displayNameField: 'id',\n    titleFormat: '{event_type} → {url}',\n    compactLayout: ['event_type', 'url', 'status', 'attempts', 'next_retry_at'],\n\n    actions: [\n        {\n            name: 'redeliver',\n            label: 'Redeliver',\n            icon: 'refresh-cw',\n            variant: 'secondary',\n            locations: ['list_item', 'record_header'],\n            type: 'api',\n            target: '/api/v1/webhooks/redeliver',\n            method: 'POST',\n            recordIdParam: 'deliveryId',\n            confirmText:\n                'Replay this delivery? The receiver will get the original payload again — they must be idempotent on the X-Objectstack-Delivery header.',\n            successMessage: 'Queued for redelivery',\n            refreshAfter: true,\n            // Only terminal rows are safe to replay. Pending / in_flight rows\n            // are either already queued or actively being sent — replaying\n            // would double-deliver.\n            disabled: \"!(status in ['success', 'failed', 'dead'])\",\n        },\n    ],\n\n    listViews: {\n        recent: {\n            type: 'grid',\n            name: 'recent',\n            label: 'Recent',\n            data: { provider: 'object', object: 'sys_webhook_delivery' },\n            columns: ['event_type', 'url', 'status', 'attempts', 'response_code', 'updated_at'],\n            sort: [{ field: 'updated_at', order: 'desc' }],\n            pagination: { pageSize: 50 },\n        },\n        failures: {\n            type: 'grid',\n            name: 'failures',\n            label: 'Failures',\n            data: { provider: 'object', object: 'sys_webhook_delivery' },\n            columns: ['event_type', 'url', 'status', 'attempts', 'response_code', 'error', 'updated_at'],\n            filter: [{ field: 'status', operator: 'in', value: ['failed', 'dead'] }],\n            sort: [{ field: 'updated_at', order: 'desc' }],\n            pagination: { pageSize: 50 },\n        },\n        in_flight: {\n            type: 'grid',\n            name: 'in_flight',\n            label: 'In Flight',\n            data: { provider: 'object', object: 'sys_webhook_delivery' },\n            columns: ['event_type', 'url', 'attempts', 'claimed_by', 'claimed_at'],\n            filter: [{ field: 'status', operator: 'equals', value: 'in_flight' }],\n            sort: [{ field: 'claimed_at', order: 'desc' }],\n            pagination: { pageSize: 50 },\n        },\n        pending: {\n            type: 'grid',\n            name: 'pending',\n            label: 'Pending',\n            data: { provider: 'object', object: 'sys_webhook_delivery' },\n            columns: ['event_type', 'url', 'attempts', 'next_retry_at', 'updated_at'],\n            filter: [{ field: 'status', operator: 'equals', value: 'pending' }],\n            sort: [{ field: 'next_retry_at', order: 'asc' }],\n            pagination: { pageSize: 50 },\n        },\n        by_status: {\n            type: 'grid',\n            name: 'by_status',\n            label: 'By Status',\n            data: { provider: 'object', object: 'sys_webhook_delivery' },\n            columns: ['status', 'event_type', 'url', 'attempts', 'updated_at'],\n            sort: [{ field: 'status', order: 'asc' }, { field: 'updated_at', order: 'desc' }],\n            grouping: { fields: [{ field: 'status', order: 'asc', collapsed: false }] },\n            pagination: { pageSize: 100 },\n        },\n        by_webhook: {\n            type: 'grid',\n            name: 'by_webhook',\n            label: 'By Webhook',\n            data: { provider: 'object', object: 'sys_webhook_delivery' },\n            columns: ['webhook_id', 'event_type', 'status', 'attempts', 'updated_at'],\n            sort: [{ field: 'webhook_id', order: 'asc' }, { field: 'updated_at', order: 'desc' }],\n            grouping: { fields: [{ field: 'webhook_id', order: 'asc', collapsed: true }] },\n            pagination: { pageSize: 100 },\n        },\n        all_deliveries: {\n            type: 'grid',\n            name: 'all_deliveries',\n            label: 'All',\n            data: { provider: 'object', object: 'sys_webhook_delivery' },\n            columns: ['event_type', 'url', 'status', 'attempts', 'response_code', 'updated_at'],\n            sort: [{ field: 'updated_at', order: 'desc' }],\n            pagination: { pageSize: 100 },\n        },\n    },\n\n    fields: {\n        id: Field.text({\n            label: 'Delivery ID',\n            required: true,\n            maxLength: 64,\n            description: 'UUID — also doubles as the receiver-side idempotency key',\n        }),\n\n        webhook_id: Field.text({\n            label: 'Webhook ID',\n            required: true,\n            maxLength: 64,\n            description: 'FK to sys_webhook.id (loosely coupled — denormalised URL/secret on row)',\n        }),\n\n        event_id: Field.text({\n            label: 'Event ID',\n            required: true,\n            maxLength: 128,\n            description: 'Source event id; UNIQUE(event_id, webhook_id) for dedup',\n        }),\n\n        event_type: Field.text({\n            label: 'Event Type',\n            required: true,\n            maxLength: 128,\n            description: 'e.g. data.record.created',\n        }),\n\n        url: Field.text({\n            label: 'Target URL',\n            required: true,\n            maxLength: 2048,\n            description: 'Snapshotted at enqueue so config edits do not rewrite live rows',\n        }),\n\n        method: Field.text({ label: 'Method', required: false, maxLength: 10 }),\n        headers_json: Field.textarea({ label: 'Headers JSON', required: false }),\n        secret: Field.text({ label: 'HMAC Secret', required: false, maxLength: 256 }),\n        timeout_ms: Field.number({ label: 'Timeout (ms)', required: false }),\n        payload_json: Field.textarea({ label: 'Payload JSON', required: true }),\n\n        partition_key: Field.number({\n            label: 'Partition',\n            required: true,\n            description: 'hash(webhook_id) mod partitionCount — precomputed for cheap WHERE',\n        }),\n\n        status: Field.text({\n            label: 'Status',\n            required: true,\n            defaultValue: 'pending',\n            maxLength: 16,\n            description: 'pending | in_flight | success | failed | dead',\n        }),\n\n        attempts: Field.number({\n            label: 'Attempts',\n            required: true,\n            defaultValue: 0,\n            description: 'Number of POST attempts made so far',\n        }),\n\n        claimed_by: Field.text({ label: 'Claimed By', required: false, maxLength: 128 }),\n        claimed_at: Field.number({ label: 'Claimed At (ms)', required: false }),\n        next_retry_at: Field.number({ label: 'Next Retry At (ms)', required: false }),\n        last_attempted_at: Field.number({ label: 'Last Attempted At (ms)', required: false }),\n        response_code: Field.number({ label: 'HTTP Status', required: false }),\n        response_body: Field.textarea({ label: 'Response Body (capped)', required: false }),\n        error: Field.textarea({ label: 'Error', required: false }),\n\n        created_at: Field.number({ label: 'Created At (ms)', required: true }),\n        updated_at: Field.number({ label: 'Updated At (ms)', required: true }),\n    },\n\n    indexes: [\n        { fields: ['event_id', 'webhook_id'], unique: true },\n        // Hot path: claim query\n        { fields: ['status', 'partition_key', 'next_retry_at'] },\n        // Reaper: scan stale in_flight rows by claimed_at\n        { fields: ['status', 'claimed_at'] },\n        { fields: ['webhook_id'] },\n    ],\n});\n\n/** Canonical object name — exported so SqlWebhookOutbox callers can override if needed. */\nexport const SYS_WEBHOOK_DELIVERY = 'sys_webhook_delivery' as const;\n"],"mappings":";AAEA,SAAS,OAAO,oBAAoB;AA4B7B,IAAM,qBAAqB,aAAa,OAAO;AAAA,EAClD,MAAM;AAAA,EACN,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,UAAU;AAAA,EACV,WAAW;AAAA,EACX,aAAa,EAAE,QAAQ,OAAO,MAAM,OAAO,QAAQ,OAAO,QAAQ,MAAM;AAAA,EACxE,aACI;AAAA,EACJ,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,eAAe,CAAC,cAAc,OAAO,UAAU,YAAY,eAAe;AAAA,EAE1E,SAAS;AAAA,IACL;AAAA,MACI,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,MACT,WAAW,CAAC,aAAa,eAAe;AAAA,MACxC,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,eAAe;AAAA,MACf,aACI;AAAA,MACJ,gBAAgB;AAAA,MAChB,cAAc;AAAA;AAAA;AAAA;AAAA,MAId,UAAU;AAAA,IACd;AAAA,EACJ;AAAA,EAEA,WAAW;AAAA,IACP,QAAQ;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM,EAAE,UAAU,UAAU,QAAQ,uBAAuB;AAAA,MAC3D,SAAS,CAAC,cAAc,OAAO,UAAU,YAAY,iBAAiB,YAAY;AAAA,MAClF,MAAM,CAAC,EAAE,OAAO,cAAc,OAAO,OAAO,CAAC;AAAA,MAC7C,YAAY,EAAE,UAAU,GAAG;AAAA,IAC/B;AAAA,IACA,UAAU;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM,EAAE,UAAU,UAAU,QAAQ,uBAAuB;AAAA,MAC3D,SAAS,CAAC,cAAc,OAAO,UAAU,YAAY,iBAAiB,SAAS,YAAY;AAAA,MAC3F,QAAQ,CAAC,EAAE,OAAO,UAAU,UAAU,MAAM,OAAO,CAAC,UAAU,MAAM,EAAE,CAAC;AAAA,MACvE,MAAM,CAAC,EAAE,OAAO,cAAc,OAAO,OAAO,CAAC;AAAA,MAC7C,YAAY,EAAE,UAAU,GAAG;AAAA,IAC/B;AAAA,IACA,WAAW;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM,EAAE,UAAU,UAAU,QAAQ,uBAAuB;AAAA,MAC3D,SAAS,CAAC,cAAc,OAAO,YAAY,cAAc,YAAY;AAAA,MACrE,QAAQ,CAAC,EAAE,OAAO,UAAU,UAAU,UAAU,OAAO,YAAY,CAAC;AAAA,MACpE,MAAM,CAAC,EAAE,OAAO,cAAc,OAAO,OAAO,CAAC;AAAA,MAC7C,YAAY,EAAE,UAAU,GAAG;AAAA,IAC/B;AAAA,IACA,SAAS;AAAA,MACL,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM,EAAE,UAAU,UAAU,QAAQ,uBAAuB;AAAA,MAC3D,SAAS,CAAC,cAAc,OAAO,YAAY,iBAAiB,YAAY;AAAA,MACxE,QAAQ,CAAC,EAAE,OAAO,UAAU,UAAU,UAAU,OAAO,UAAU,CAAC;AAAA,MAClE,MAAM,CAAC,EAAE,OAAO,iBAAiB,OAAO,MAAM,CAAC;AAAA,MAC/C,YAAY,EAAE,UAAU,GAAG;AAAA,IAC/B;AAAA,IACA,WAAW;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM,EAAE,UAAU,UAAU,QAAQ,uBAAuB;AAAA,MAC3D,SAAS,CAAC,UAAU,cAAc,OAAO,YAAY,YAAY;AAAA,MACjE,MAAM,CAAC,EAAE,OAAO,UAAU,OAAO,MAAM,GAAG,EAAE,OAAO,cAAc,OAAO,OAAO,CAAC;AAAA,MAChF,UAAU,EAAE,QAAQ,CAAC,EAAE,OAAO,UAAU,OAAO,OAAO,WAAW,MAAM,CAAC,EAAE;AAAA,MAC1E,YAAY,EAAE,UAAU,IAAI;AAAA,IAChC;AAAA,IACA,YAAY;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM,EAAE,UAAU,UAAU,QAAQ,uBAAuB;AAAA,MAC3D,SAAS,CAAC,cAAc,cAAc,UAAU,YAAY,YAAY;AAAA,MACxE,MAAM,CAAC,EAAE,OAAO,cAAc,OAAO,MAAM,GAAG,EAAE,OAAO,cAAc,OAAO,OAAO,CAAC;AAAA,MACpF,UAAU,EAAE,QAAQ,CAAC,EAAE,OAAO,cAAc,OAAO,OAAO,WAAW,KAAK,CAAC,EAAE;AAAA,MAC7E,YAAY,EAAE,UAAU,IAAI;AAAA,IAChC;AAAA,IACA,gBAAgB;AAAA,MACZ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM,EAAE,UAAU,UAAU,QAAQ,uBAAuB;AAAA,MAC3D,SAAS,CAAC,cAAc,OAAO,UAAU,YAAY,iBAAiB,YAAY;AAAA,MAClF,MAAM,CAAC,EAAE,OAAO,cAAc,OAAO,OAAO,CAAC;AAAA,MAC7C,YAAY,EAAE,UAAU,IAAI;AAAA,IAChC;AAAA,EACJ;AAAA,EAEA,QAAQ;AAAA,IACJ,IAAI,MAAM,KAAK;AAAA,MACX,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACjB,CAAC;AAAA,IAED,YAAY,MAAM,KAAK;AAAA,MACnB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACjB,CAAC;AAAA,IAED,UAAU,MAAM,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACjB,CAAC;AAAA,IAED,YAAY,MAAM,KAAK;AAAA,MACnB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACjB,CAAC;AAAA,IAED,KAAK,MAAM,KAAK;AAAA,MACZ,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACjB,CAAC;AAAA,IAED,QAAQ,MAAM,KAAK,EAAE,OAAO,UAAU,UAAU,OAAO,WAAW,GAAG,CAAC;AAAA,IACtE,cAAc,MAAM,SAAS,EAAE,OAAO,gBAAgB,UAAU,MAAM,CAAC;AAAA,IACvE,QAAQ,MAAM,KAAK,EAAE,OAAO,eAAe,UAAU,OAAO,WAAW,IAAI,CAAC;AAAA,IAC5E,YAAY,MAAM,OAAO,EAAE,OAAO,gBAAgB,UAAU,MAAM,CAAC;AAAA,IACnE,cAAc,MAAM,SAAS,EAAE,OAAO,gBAAgB,UAAU,KAAK,CAAC;AAAA,IAEtE,eAAe,MAAM,OAAO;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACjB,CAAC;AAAA,IAED,QAAQ,MAAM,KAAK;AAAA,MACf,OAAO;AAAA,MACP,UAAU;AAAA,MACV,cAAc;AAAA,MACd,WAAW;AAAA,MACX,aAAa;AAAA,IACjB,CAAC;AAAA,IAED,UAAU,MAAM,OAAO;AAAA,MACnB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,cAAc;AAAA,MACd,aAAa;AAAA,IACjB,CAAC;AAAA,IAED,YAAY,MAAM,KAAK,EAAE,OAAO,cAAc,UAAU,OAAO,WAAW,IAAI,CAAC;AAAA,IAC/E,YAAY,MAAM,OAAO,EAAE,OAAO,mBAAmB,UAAU,MAAM,CAAC;AAAA,IACtE,eAAe,MAAM,OAAO,EAAE,OAAO,sBAAsB,UAAU,MAAM,CAAC;AAAA,IAC5E,mBAAmB,MAAM,OAAO,EAAE,OAAO,0BAA0B,UAAU,MAAM,CAAC;AAAA,IACpF,eAAe,MAAM,OAAO,EAAE,OAAO,eAAe,UAAU,MAAM,CAAC;AAAA,IACrE,eAAe,MAAM,SAAS,EAAE,OAAO,0BAA0B,UAAU,MAAM,CAAC;AAAA,IAClF,OAAO,MAAM,SAAS,EAAE,OAAO,SAAS,UAAU,MAAM,CAAC;AAAA,IAEzD,YAAY,MAAM,OAAO,EAAE,OAAO,mBAAmB,UAAU,KAAK,CAAC;AAAA,IACrE,YAAY,MAAM,OAAO,EAAE,OAAO,mBAAmB,UAAU,KAAK,CAAC;AAAA,EACzE;AAAA,EAEA,SAAS;AAAA,IACL,EAAE,QAAQ,CAAC,YAAY,YAAY,GAAG,QAAQ,KAAK;AAAA;AAAA,IAEnD,EAAE,QAAQ,CAAC,UAAU,iBAAiB,eAAe,EAAE;AAAA;AAAA,IAEvD,EAAE,QAAQ,CAAC,UAAU,YAAY,EAAE;AAAA,IACnC,EAAE,QAAQ,CAAC,YAAY,EAAE;AAAA,EAC7B;AACJ,CAAC;AAGM,IAAM,uBAAuB;","names":[]}

package/dist/chunk-BS2QTZH3.js

@@ -0,0 +1,256 @@
+import {
+  SYS_WEBHOOK_DELIVERY
+} from "./chunk-33LYZT7O.js";
+
+// src/sql-outbox.ts
+import { randomUUID } from "crypto";
+
+// src/outbox.ts
+var RedeliverError = class extends Error {
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "RedeliverError";
+  }
+};
+
+// src/partition.ts
+function hashPartition(key, count) {
+  if (count <= 0) throw new Error("partition count must be > 0");
+  let h = 2166136261;
+  for (let i = 0; i < key.length; i++) {
+    h ^= key.charCodeAt(i);
+    h = Math.imul(h, 16777619);
+  }
+  return Math.abs(h | 0) % count;
+}
+
+// src/sql-outbox.ts
+var SqlWebhookOutbox = class {
+  constructor(engine, opts) {
+    this.engine = engine;
+    if (opts.partitionCount <= 0) {
+      throw new Error("SqlWebhookOutbox: partitionCount must be > 0");
+    }
+    this.objectName = opts.objectName ?? SYS_WEBHOOK_DELIVERY;
+    this.partitionCount = opts.partitionCount;
+  }
+  async enqueue(input) {
+    const existing = await this.engine.findOne(this.objectName, {
+      where: { event_id: input.eventId, webhook_id: input.webhookId },
+      fields: ["id"]
+    });
+    if (existing?.id) return existing.id;
+    const id = randomUUID();
+    const now = Date.now();
+    const row = {
+      id,
+      webhook_id: input.webhookId,
+      event_id: input.eventId,
+      event_type: input.eventType,
+      url: input.url,
+      method: input.method ?? "POST",
+      headers_json: input.headers ? JSON.stringify(input.headers) : void 0,
+      secret: input.secret,
+      timeout_ms: input.timeoutMs,
+      payload_json: JSON.stringify(input.payload ?? null),
+      partition_key: hashPartition(input.webhookId, this.partitionCount),
+      status: "pending",
+      attempts: 0,
+      created_at: now,
+      updated_at: now
+    };
+    try {
+      await this.engine.insert(this.objectName, row);
+      return id;
+    } catch (err) {
+      const winner = await this.engine.findOne(this.objectName, {
+        where: { event_id: input.eventId, webhook_id: input.webhookId },
+        fields: ["id"]
+      });
+      if (winner?.id) return winner.id;
+      throw err;
+    }
+  }
+  async claim(opts) {
+    const now = opts.now ?? Date.now();
+    await this.engine.update(
+      this.objectName,
+      { status: "pending", claimed_by: null, claimed_at: null, updated_at: now },
+      {
+        where: {
+          status: "in_flight",
+          claimed_at: { $lt: now - opts.claimTtlMs }
+        },
+        multi: true
+      }
+    );
+    const partitionFilter = opts.partition ? { partition_key: opts.partition.index } : {};
+    const candidates = await this.engine.find(this.objectName, {
+      where: {
+        status: "pending",
+        ...partitionFilter,
+        // next_retry_at <= now OR null
+        $or: [
+          { next_retry_at: null },
+          { next_retry_at: { $lte: now } }
+        ]
+      },
+      fields: ["id"],
+      // No orderBy for portability — drivers handle the natural insert order.
+      limit: opts.limit
+    });
+    if (candidates.length === 0) return [];
+    const ids = candidates.map((c) => c.id);
+    await this.engine.update(
+      this.objectName,
+      {
+        status: "in_flight",
+        claimed_by: opts.nodeId,
+        claimed_at: now,
+        updated_at: now
+      },
+      {
+        where: { id: { $in: ids }, status: "pending" },
+        multi: true
+      }
+    );
+    const claimed = await this.engine.find(this.objectName, {
+      where: {
+        id: { $in: ids },
+        claimed_by: opts.nodeId,
+        claimed_at: now,
+        status: "in_flight"
+      }
+    });
+    return claimed.map((r) => this.toDelivery(r));
+  }
+  async ack(id, result) {
+    const current = await this.engine.findOne(this.objectName, {
+      where: { id },
+      fields: ["attempts"]
+    });
+    if (!current) return;
+    const now = Date.now();
+    let status;
+    let nextRetryAt;
+    let error;
+    if (result.success) {
+      status = "success";
+      nextRetryAt = null;
+      error = null;
+    } else if (result.dead) {
+      status = "dead";
+      nextRetryAt = null;
+      error = result.error ?? null;
+    } else {
+      status = "pending";
+      nextRetryAt = result.nextRetryAt ?? null;
+      error = result.error ?? null;
+    }
+    await this.engine.update(
+      this.objectName,
+      {
+        status,
+        attempts: (current.attempts ?? 0) + 1,
+        last_attempted_at: now,
+        claimed_by: null,
+        claimed_at: null,
+        response_code: result.httpStatus ?? null,
+        response_body: result.responseBody ?? null,
+        next_retry_at: nextRetryAt,
+        error,
+        updated_at: now
+      },
+      { where: { id }, multi: false }
+    );
+  }
+  async list(filter) {
+    const rows = await this.engine.find(this.objectName, {
+      where: filter?.status ? { status: filter.status } : {}
+    });
+    return rows.map((r) => this.toDelivery(r));
+  }
+  async redeliver(id) {
+    const current = await this.engine.findOne(this.objectName, {
+      where: { id }
+    });
+    if (!current) {
+      throw new RedeliverError(
+        `Delivery row '${id}' not found`,
+        "not_found"
+      );
+    }
+    if (current.status !== "success" && current.status !== "failed" && current.status !== "dead") {
+      throw new RedeliverError(
+        `Delivery row '${id}' is '${current.status}', expected one of: success, failed, dead`,
+        "not_eligible"
+      );
+    }
+    const now = Date.now();
+    await this.engine.update(
+      this.objectName,
+      {
+        status: "pending",
+        attempts: 0,
+        claimed_by: null,
+        claimed_at: null,
+        next_retry_at: null,
+        last_attempted_at: null,
+        response_code: null,
+        response_body: null,
+        error: null,
+        updated_at: now
+      },
+      {
+        where: {
+          id,
+          status: { $in: ["success", "failed", "dead"] }
+        },
+        multi: false
+      }
+    );
+    const after = await this.engine.findOne(this.objectName, {
+      where: { id }
+    });
+    if (!after || after.status !== "pending") {
+      throw new RedeliverError(
+        `Delivery row '${id}' state changed during redeliver`,
+        "not_eligible"
+      );
+    }
+    return this.toDelivery(after);
+  }
+  toDelivery(r) {
+    return {
+      id: r.id,
+      webhookId: r.webhook_id,
+      eventId: r.event_id,
+      eventType: r.event_type,
+      url: r.url,
+      method: r.method ?? void 0,
+      headers: r.headers_json ? JSON.parse(r.headers_json) : void 0,
+      secret: r.secret ?? void 0,
+      timeoutMs: r.timeout_ms ?? void 0,
+      payload: JSON.parse(r.payload_json),
+      status: r.status,
+      attempts: r.attempts,
+      claimedBy: r.claimed_by ?? void 0,
+      claimedAt: r.claimed_at ?? void 0,
+      nextRetryAt: r.next_retry_at ?? void 0,
+      lastAttemptedAt: r.last_attempted_at ?? void 0,
+      responseCode: r.response_code ?? void 0,
+      responseBody: r.response_body ?? void 0,
+      error: r.error ?? void 0,
+      createdAt: r.created_at,
+      updatedAt: r.updated_at
+    };
+  }
+};
+
+export {
+  RedeliverError,
+  hashPartition,
+  SqlWebhookOutbox
+};
+//# sourceMappingURL=chunk-BS2QTZH3.js.map

package/dist/chunk-BS2QTZH3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sql-outbox.ts","../src/outbox.ts","../src/partition.ts"],"sourcesContent":["// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { randomUUID } from 'node:crypto';\nimport type { IDataEngine } from '@objectstack/spec/contracts';\nimport type {\n    AckResult,\n    ClaimOptions,\n    DeliveryStatus,\n    EnqueueInput,\n    IWebhookOutbox,\n    WebhookDelivery,\n} from './outbox.js';\nimport { RedeliverError } from './outbox.js';\nimport { hashPartition } from './partition.js';\nimport { SYS_WEBHOOK_DELIVERY } from './schema.js';\n\nexport interface SqlWebhookOutboxOptions {\n    /**\n     * Total partition count — MUST match the dispatcher's `partitionCount`.\n     * Used at enqueue time to precompute `partition_key`.\n     */\n    partitionCount: number;\n    /**\n     * Object name to read/write. Defaults to `sys_webhook_delivery`. Override\n     * only if you've registered the schema under a different name.\n     */\n    objectName?: string;\n}\n\ninterface DeliveryRow {\n    id: string;\n    webhook_id: string;\n    event_id: string;\n    event_type: string;\n    url: string;\n    method?: string | null;\n    headers_json?: string | null;\n    secret?: string | null;\n    timeout_ms?: number | null;\n    payload_json: string;\n    partition_key: number;\n    status: DeliveryStatus;\n    attempts: number;\n    claimed_by?: string | null;\n    claimed_at?: number | null;\n    next_retry_at?: number | null;\n    last_attempted_at?: number | null;\n    response_code?: number | null;\n    response_body?: string | null;\n    error?: string | null;\n    created_at: number;\n    updated_at: number;\n}\n\n/**\n * Durable `IWebhookOutbox` backed by ObjectQL — the production storage\n * impl. Works against any registered driver (SQL, Turso, Mongo, in-memory)\n * because everything goes through the driver-agnostic `IDataEngine` API.\n *\n * **Why no `FOR UPDATE SKIP LOCKED`?** ObjectQL is driver-agnostic — that\n * SQL feature is Postgres-only. We get equivalent safety from two layers:\n *\n *   1. `cluster.lock` held per partition by the dispatcher (the primary\n *      mutex). One node owns one partition at a time → no two claimers.\n *   2. Atomic `UPDATE WHERE status='pending'` (the backup). Even if two\n *      claimers slip through (e.g. admin reschedule + dispatcher), only\n *      the first UPDATE matches each row.\n *\n * **Why precompute `partition_key` on enqueue?** ObjectQL has no\n * cross-driver `hash()` function in WHERE clauses. Storing the partition\n * as a column makes the claim query a plain indexed lookup.\n *\n * **Dedup race**: SELECT-then-INSERT has a tiny window where two\n * concurrent producers both miss the SELECT and both INSERT. The unique\n * index `(event_id, webhook_id)` on the table catches it — the second\n * INSERT errors, the producer ignores it. Receivers MUST be idempotent\n * on the `X-Objectstack-Delivery` header anyway.\n */\nexport class SqlWebhookOutbox implements IWebhookOutbox {\n    private readonly objectName: string;\n    private readonly partitionCount: number;\n\n    constructor(\n        private readonly engine: IDataEngine,\n        opts: SqlWebhookOutboxOptions,\n    ) {\n        if (opts.partitionCount <= 0) {\n            throw new Error('SqlWebhookOutbox: partitionCount must be > 0');\n        }\n        this.objectName = opts.objectName ?? SYS_WEBHOOK_DELIVERY;\n        this.partitionCount = opts.partitionCount;\n    }\n\n    async enqueue(input: EnqueueInput): Promise<string> {\n        // Cheap pre-check to absorb most duplicates without hitting the\n        // unique-index error path. Race window with the INSERT below is\n        // intentional and documented.\n        const existing = await this.engine.findOne(this.objectName, {\n            where: { event_id: input.eventId, webhook_id: input.webhookId },\n            fields: ['id'],\n        });\n        if (existing?.id) return existing.id as string;\n\n        const id = randomUUID();\n        const now = Date.now();\n        const row: Omit<DeliveryRow, 'response_body' | 'error'> = {\n            id,\n            webhook_id: input.webhookId,\n            event_id: input.eventId,\n            event_type: input.eventType,\n            url: input.url,\n            method: input.method ?? 'POST',\n            headers_json: input.headers ? JSON.stringify(input.headers) : undefined,\n            secret: input.secret,\n            timeout_ms: input.timeoutMs,\n            payload_json: JSON.stringify(input.payload ?? null),\n            partition_key: hashPartition(input.webhookId, this.partitionCount),\n            status: 'pending',\n            attempts: 0,\n            created_at: now,\n            updated_at: now,\n        };\n        try {\n            await this.engine.insert(this.objectName, row);\n            return id;\n        } catch (err) {\n            // Unique-index collision (dedup race) → look up the winner and\n            // return its id. Any other error propagates.\n            const winner = await this.engine.findOne(this.objectName, {\n                where: { event_id: input.eventId, webhook_id: input.webhookId },\n                fields: ['id'],\n            });\n            if (winner?.id) return winner.id as string;\n            throw err;\n        }\n    }\n\n    async claim(opts: ClaimOptions): Promise<WebhookDelivery[]> {\n        const now = opts.now ?? Date.now();\n\n        // 1. Reap stale in_flight rows — visibility-timeout recovery.\n        await this.engine.update(\n            this.objectName,\n            { status: 'pending', claimed_by: null, claimed_at: null, updated_at: now },\n            {\n                where: {\n                    status: 'in_flight',\n                    claimed_at: { $lt: now - opts.claimTtlMs },\n                },\n                multi: true,\n            },\n        );\n\n        // 2. Pick candidate ids.\n        const partitionFilter = opts.partition\n            ? { partition_key: opts.partition.index }\n            : {};\n        const candidates = await this.engine.find(this.objectName, {\n            where: {\n                status: 'pending',\n                ...partitionFilter,\n                // next_retry_at <= now OR null\n                $or: [\n                    { next_retry_at: null },\n                    { next_retry_at: { $lte: now } },\n                ],\n            },\n            fields: ['id'],\n            // No orderBy for portability — drivers handle the natural insert order.\n            limit: opts.limit,\n        });\n        if (candidates.length === 0) return [];\n\n        const ids = (candidates as Array<{ id: string }>).map((c) => c.id);\n\n        // 3. Atomic claim. WHERE status='pending' rejects any rows another\n        //    worker swept up between steps 2 and 3.\n        await this.engine.update(\n            this.objectName,\n            {\n                status: 'in_flight',\n                claimed_by: opts.nodeId,\n                claimed_at: now,\n                updated_at: now,\n            },\n            {\n                where: { id: { $in: ids }, status: 'pending' },\n                multi: true,\n            },\n        );\n\n        // 4. Read back the rows we actually own.\n        const claimed = (await this.engine.find(this.objectName, {\n            where: {\n                id: { $in: ids },\n                claimed_by: opts.nodeId,\n                claimed_at: now,\n                status: 'in_flight',\n            },\n        })) as DeliveryRow[];\n\n        return claimed.map((r) => this.toDelivery(r));\n    }\n\n    async ack(id: string, result: AckResult): Promise<void> {\n        // ObjectQL has no atomic $inc across drivers, so read-then-write.\n        // Safe enough: ack is single-writer per row (only the claimer acks).\n        const current = (await this.engine.findOne(this.objectName, {\n            where: { id },\n            fields: ['attempts'],\n        })) as { attempts?: number } | null;\n        if (!current) return;\n\n        const now = Date.now();\n        let status: DeliveryStatus;\n        let nextRetryAt: number | null;\n        let error: string | null;\n\n        if (result.success) {\n            status = 'success';\n            nextRetryAt = null;\n            error = null;\n        } else if (result.dead) {\n            status = 'dead';\n            nextRetryAt = null;\n            error = result.error ?? null;\n        } else {\n            status = 'pending';\n            nextRetryAt = result.nextRetryAt ?? null;\n            error = result.error ?? null;\n        }\n\n        await this.engine.update(\n            this.objectName,\n            {\n                status,\n                attempts: (current.attempts ?? 0) + 1,\n                last_attempted_at: now,\n                claimed_by: null,\n                claimed_at: null,\n                response_code: result.httpStatus ?? null,\n                response_body: result.responseBody ?? null,\n                next_retry_at: nextRetryAt,\n                error,\n                updated_at: now,\n            },\n            { where: { id }, multi: false },\n        );\n    }\n\n    async list(filter?: { status?: DeliveryStatus }): Promise<WebhookDelivery[]> {\n        const rows = (await this.engine.find(this.objectName, {\n            where: filter?.status ? { status: filter.status } : {},\n        })) as DeliveryRow[];\n        return rows.map((r) => this.toDelivery(r));\n    }\n\n    async redeliver(id: string): Promise<WebhookDelivery> {\n        const current = (await this.engine.findOne(this.objectName, {\n            where: { id },\n        })) as DeliveryRow | null;\n        if (!current) {\n            throw new RedeliverError(\n                `Delivery row '${id}' not found`,\n                'not_found',\n            );\n        }\n        if (\n            current.status !== 'success' &&\n            current.status !== 'failed' &&\n            current.status !== 'dead'\n        ) {\n            throw new RedeliverError(\n                `Delivery row '${id}' is '${current.status}', expected one of: success, failed, dead`,\n                'not_eligible',\n            );\n        }\n        const now = Date.now();\n        // Guarded UPDATE — re-check status server-side so two concurrent\n        // redeliver calls cannot both flip the row, and so a dispatcher\n        // tick that flipped the row to in_flight between our SELECT and\n        // UPDATE cannot be clobbered.\n        await this.engine.update(\n            this.objectName,\n            {\n                status: 'pending',\n                attempts: 0,\n                claimed_by: null,\n                claimed_at: null,\n                next_retry_at: null,\n                last_attempted_at: null,\n                response_code: null,\n                response_body: null,\n                error: null,\n                updated_at: now,\n            },\n            {\n                where: {\n                    id,\n                    status: { $in: ['success', 'failed', 'dead'] },\n                },\n                multi: false,\n            },\n        );\n        const after = (await this.engine.findOne(this.objectName, {\n            where: { id },\n        })) as DeliveryRow | null;\n        if (!after || after.status !== 'pending') {\n            // Lost the race — another writer flipped the row.\n            throw new RedeliverError(\n                `Delivery row '${id}' state changed during redeliver`,\n                'not_eligible',\n            );\n        }\n        return this.toDelivery(after);\n    }\n\n    private toDelivery(r: DeliveryRow): WebhookDelivery {\n        return {\n            id: r.id,\n            webhookId: r.webhook_id,\n            eventId: r.event_id,\n            eventType: r.event_type,\n            url: r.url,\n            method: r.method ?? undefined,\n            headers: r.headers_json ? JSON.parse(r.headers_json) : undefined,\n            secret: r.secret ?? undefined,\n            timeoutMs: r.timeout_ms ?? undefined,\n            payload: JSON.parse(r.payload_json),\n            status: r.status,\n            attempts: r.attempts,\n            claimedBy: r.claimed_by ?? undefined,\n            claimedAt: r.claimed_at ?? undefined,\n            nextRetryAt: r.next_retry_at ?? undefined,\n            lastAttemptedAt: r.last_attempted_at ?? undefined,\n            responseCode: r.response_code ?? undefined,\n            responseBody: r.response_body ?? undefined,\n            error: r.error ?? undefined,\n            createdAt: r.created_at,\n            updatedAt: r.updated_at,\n        };\n    }\n}\n","// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * Webhook outbox contracts.\n *\n * The outbox stores webhook delivery rows that must be POSTed exactly once\n * (modulo at-least-once + receiver-side idempotency). Implementations are\n * pluggable so the same dispatcher can run against an in-memory test store\n * or a SQL-backed production table.\n *\n * See `content/docs/concepts/webhook-delivery.mdx` §3.2 for the full schema.\n */\n\nexport type DeliveryStatus =\n    | 'pending'\n    | 'in_flight'\n    | 'success'\n    | 'failed'\n    | 'dead';\n\nexport interface WebhookDelivery {\n    /** UUID — also doubles as the receiver-side idempotency key. */\n    id: string;\n    /** FK to sys_webhook.id — opaque to the dispatcher; only used for hashing. */\n    webhookId: string;\n    /** Origin event id. UNIQUE(event_id, webhook_id) prevents double-enqueue. */\n    eventId: string;\n    /** Origin event type, e.g. `data.record.created`. */\n    eventType: string;\n    /** Destination URL (snapshotted on enqueue — config edits don't rewrite live rows). */\n    url: string;\n    /** HTTP method — defaults to POST. */\n    method?: string;\n    /** Custom headers configured on the sink. */\n    headers?: Record<string, string>;\n    /** HMAC-SHA256 secret. If present, signature is added. */\n    secret?: string;\n    /** Per-request timeout in ms. */\n    timeoutMs?: number;\n    /** JSON-serialisable body. */\n    payload: unknown;\n\n    /** Lifecycle state. */\n    status: DeliveryStatus;\n    /** Number of POST attempts made so far (0 before first attempt). */\n    attempts: number;\n    /** Node id currently working on this row, when `status = in_flight`. */\n    claimedBy?: string;\n    /** Wall-clock ms when the row was claimed. */\n    claimedAt?: number;\n    /** Earliest ms at which this row becomes eligible for the next attempt. */\n    nextRetryAt?: number;\n    /** Wall-clock ms of the last attempt (success or fail). */\n    lastAttemptedAt?: number;\n    /** HTTP status code from the most recent attempt. */\n    responseCode?: number;\n    /** Truncated response body for diagnostics. */\n    responseBody?: string;\n    /** Last transport / timeout error message. */\n    error?: string;\n\n    createdAt: number;\n    updatedAt: number;\n}\n\nexport interface EnqueueInput {\n    webhookId: string;\n    eventId: string;\n    eventType: string;\n    url: string;\n    method?: string;\n    headers?: Record<string, string>;\n    secret?: string;\n    timeoutMs?: number;\n    payload: unknown;\n}\n\nexport interface ClaimOptions {\n    /** Identifier of the node doing the claim (for `claimedBy`). */\n    nodeId: string;\n    /** Max rows to claim per call. */\n    limit: number;\n    /**\n     * Partition assignment for this worker. Only rows whose\n     * `hash(webhookId) mod count === index` are claimed. Omit to claim\n     * across all partitions (single-node mode).\n     */\n    partition?: { index: number; count: number };\n    /** Visibility timeout — claimed rows revert to pending after this many ms. */\n    claimTtlMs: number;\n    /** \"Now\" reference, ms since epoch. Defaults to Date.now(). */\n    now?: number;\n}\n\nexport interface AckSuccess {\n    success: true;\n    httpStatus: number;\n    responseBody?: string;\n    durationMs: number;\n}\n\nexport interface AckFailure {\n    success: false;\n    httpStatus?: number;\n    responseBody?: string;\n    error?: string;\n    durationMs: number;\n    /** Computed by the dispatcher per the retry schedule, or undefined for dead. */\n    nextRetryAt?: number;\n    /** Marks the row terminal — no more attempts. */\n    dead?: boolean;\n}\n\nexport type AckResult = AckSuccess | AckFailure;\n\n/**\n * Error raised by `IWebhookOutbox.redeliver` when the requested row is\n * either missing or in a non-terminal state. The dispatcher / admin UI\n * surfaces this verbatim to the caller — never throw it for transient\n * conditions (transport errors should bubble as native `Error`).\n */\nexport class RedeliverError extends Error {\n    constructor(\n        message: string,\n        readonly code: 'not_found' | 'not_eligible',\n    ) {\n        super(message);\n        this.name = 'RedeliverError';\n    }\n}\n\n/**\n * Pluggable storage backend for delivery rows. Implementations MUST make\n * `claim()` atomic across concurrent callers — that property is the\n * exactly-once guarantee.\n */\nexport interface IWebhookOutbox {\n    /**\n     * Insert a new delivery row. Implementations MUST treat\n     * `(eventId, webhookId)` as unique and silently drop duplicates.\n     * Returns the row id (existing or new).\n     */\n    enqueue(input: EnqueueInput): Promise<string>;\n\n    /**\n     * Atomically claim up to `limit` rows whose `nextRetryAt <= now` (or\n     * null) and matching the partition predicate. Claimed rows MUST be\n     * marked `in_flight` so concurrent claimers don't see them.\n     */\n    claim(opts: ClaimOptions): Promise<WebhookDelivery[]>;\n\n    /** Record the outcome of an attempt. */\n    ack(id: string, result: AckResult): Promise<void>;\n\n    /** Snapshot accessor for tests / admin tooling. */\n    list(filter?: { status?: DeliveryStatus }): Promise<WebhookDelivery[]>;\n\n    /**\n     * Reset a terminal row back to `pending` so the dispatcher will pick\n     * it up again on its next tick.\n     *\n     * - Eligible source states: `success`, `failed`, `dead`.\n     * - Rejects `pending` / `in_flight` rows — replaying those would\n     *   double-deliver because they're either already queued or actively\n     *   being sent.\n     * - Resets `attempts=0` so the retry budget restarts.\n     * - Clears `claimed_by`, `claimed_at`, `next_retry_at`, `error`,\n     *   `response_code`, `response_body`. URL / payload / secret are NOT\n     *   touched — replay reproduces the original POST byte-for-byte.\n     *\n     * Throws `RedeliverError` with code `not_found` or `not_eligible`.\n     * Returns the post-reset row.\n     */\n    redeliver(id: string): Promise<WebhookDelivery>;\n}\n","// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * Stable, framework-free partition hash. The dispatcher uses this to\n * assign webhooks to partitions; the in-memory outbox uses the same hash\n * to filter rows in `claim()`. Both call sites MUST agree, which is why\n * this is a single shared helper.\n *\n * Uses a 32-bit FNV-1a variant — fast, no allocations, deterministic.\n */\nexport function hashPartition(key: string, count: number): number {\n    if (count <= 0) throw new Error('partition count must be > 0');\n    let h = 0x811c9dc5;\n    for (let i = 0; i < key.length; i++) {\n        h ^= key.charCodeAt(i);\n        h = Math.imul(h, 0x01000193);\n    }\n    return Math.abs(h | 0) % count;\n}\n"],"mappings":";;;;;AAEA,SAAS,kBAAkB;;;ACuHpB,IAAM,iBAAN,cAA6B,MAAM;AAAA,EACtC,YACI,SACS,MACX;AACE,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO;AAAA,EAChB;AACJ;;;ACvHO,SAAS,cAAc,KAAa,OAAuB;AAC9D,MAAI,SAAS,EAAG,OAAM,IAAI,MAAM,6BAA6B;AAC7D,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACjC,SAAK,IAAI,WAAW,CAAC;AACrB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC/B;AACA,SAAO,KAAK,IAAI,IAAI,CAAC,IAAI;AAC7B;;;AF4DO,IAAM,mBAAN,MAAiD;AAAA,EAIpD,YACqB,QACjB,MACF;AAFmB;AAGjB,QAAI,KAAK,kBAAkB,GAAG;AAC1B,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAClE;AACA,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,iBAAiB,KAAK;AAAA,EAC/B;AAAA,EAEA,MAAM,QAAQ,OAAsC;AAIhD,UAAM,WAAW,MAAM,KAAK,OAAO,QAAQ,KAAK,YAAY;AAAA,MACxD,OAAO,EAAE,UAAU,MAAM,SAAS,YAAY,MAAM,UAAU;AAAA,MAC9D,QAAQ,CAAC,IAAI;AAAA,IACjB,CAAC;AACD,QAAI,UAAU,GAAI,QAAO,SAAS;AAElC,UAAM,KAAK,WAAW;AACtB,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,MAAoD;AAAA,MACtD;AAAA,MACA,YAAY,MAAM;AAAA,MAClB,UAAU,MAAM;AAAA,MAChB,YAAY,MAAM;AAAA,MAClB,KAAK,MAAM;AAAA,MACX,QAAQ,MAAM,UAAU;AAAA,MACxB,cAAc,MAAM,UAAU,KAAK,UAAU,MAAM,OAAO,IAAI;AAAA,MAC9D,QAAQ,MAAM;AAAA,MACd,YAAY,MAAM;AAAA,MAClB,cAAc,KAAK,UAAU,MAAM,WAAW,IAAI;AAAA,MAClD,eAAe,cAAc,MAAM,WAAW,KAAK,cAAc;AAAA,MACjE,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,YAAY;AAAA,IAChB;AACA,QAAI;AACA,YAAM,KAAK,OAAO,OAAO,KAAK,YAAY,GAAG;AAC7C,aAAO;AAAA,IACX,SAAS,KAAK;AAGV,YAAM,SAAS,MAAM,KAAK,OAAO,QAAQ,KAAK,YAAY;AAAA,QACtD,OAAO,EAAE,UAAU,MAAM,SAAS,YAAY,MAAM,UAAU;AAAA,QAC9D,QAAQ,CAAC,IAAI;AAAA,MACjB,CAAC;AACD,UAAI,QAAQ,GAAI,QAAO,OAAO;AAC9B,YAAM;AAAA,IACV;AAAA,EACJ;AAAA,EAEA,MAAM,MAAM,MAAgD;AACxD,UAAM,MAAM,KAAK,OAAO,KAAK,IAAI;AAGjC,UAAM,KAAK,OAAO;AAAA,MACd,KAAK;AAAA,MACL,EAAE,QAAQ,WAAW,YAAY,MAAM,YAAY,MAAM,YAAY,IAAI;AAAA,MACzE;AAAA,QACI,OAAO;AAAA,UACH,QAAQ;AAAA,UACR,YAAY,EAAE,KAAK,MAAM,KAAK,WAAW;AAAA,QAC7C;AAAA,QACA,OAAO;AAAA,MACX;AAAA,IACJ;AAGA,UAAM,kBAAkB,KAAK,YACvB,EAAE,eAAe,KAAK,UAAU,MAAM,IACtC,CAAC;AACP,UAAM,aAAa,MAAM,KAAK,OAAO,KAAK,KAAK,YAAY;AAAA,MACvD,OAAO;AAAA,QACH,QAAQ;AAAA,QACR,GAAG;AAAA;AAAA,QAEH,KAAK;AAAA,UACD,EAAE,eAAe,KAAK;AAAA,UACtB,EAAE,eAAe,EAAE,MAAM,IAAI,EAAE;AAAA,QACnC;AAAA,MACJ;AAAA,MACA,QAAQ,CAAC,IAAI;AAAA;AAAA,MAEb,OAAO,KAAK;AAAA,IAChB,CAAC;AACD,QAAI,WAAW,WAAW,EAAG,QAAO,CAAC;AAErC,UAAM,MAAO,WAAqC,IAAI,CAAC,MAAM,EAAE,EAAE;AAIjE,UAAM,KAAK,OAAO;AAAA,MACd,KAAK;AAAA,MACL;AAAA,QACI,QAAQ;AAAA,QACR,YAAY,KAAK;AAAA,QACjB,YAAY;AAAA,QACZ,YAAY;AAAA,MAChB;AAAA,MACA;AAAA,QACI,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,GAAG,QAAQ,UAAU;AAAA,QAC7C,OAAO;AAAA,MACX;AAAA,IACJ;AAGA,UAAM,UAAW,MAAM,KAAK,OAAO,KAAK,KAAK,YAAY;AAAA,MACrD,OAAO;AAAA,QACH,IAAI,EAAE,KAAK,IAAI;AAAA,QACf,YAAY,KAAK;AAAA,QACjB,YAAY;AAAA,QACZ,QAAQ;AAAA,MACZ;AAAA,IACJ,CAAC;AAED,WAAO,QAAQ,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;AAAA,EAChD;AAAA,EAEA,MAAM,IAAI,IAAY,QAAkC;AAGpD,UAAM,UAAW,MAAM,KAAK,OAAO,QAAQ,KAAK,YAAY;AAAA,MACxD,OAAO,EAAE,GAAG;AAAA,MACZ,QAAQ,CAAC,UAAU;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,QAAS;AAEd,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI;AACJ,QAAI;AACJ,QAAI;AAEJ,QAAI,OAAO,SAAS;AAChB,eAAS;AACT,oBAAc;AACd,cAAQ;AAAA,IACZ,WAAW,OAAO,MAAM;AACpB,eAAS;AACT,oBAAc;AACd,cAAQ,OAAO,SAAS;AAAA,IAC5B,OAAO;AACH,eAAS;AACT,oBAAc,OAAO,eAAe;AACpC,cAAQ,OAAO,SAAS;AAAA,IAC5B;AAEA,UAAM,KAAK,OAAO;AAAA,MACd,KAAK;AAAA,MACL;AAAA,QACI;AAAA,QACA,WAAW,QAAQ,YAAY,KAAK;AAAA,QACpC,mBAAmB;AAAA,QACnB,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,eAAe,OAAO,cAAc;AAAA,QACpC,eAAe,OAAO,gBAAgB;AAAA,QACtC,eAAe;AAAA,QACf;AAAA,QACA,YAAY;AAAA,MAChB;AAAA,MACA,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,MAAM;AAAA,IAClC;AAAA,EACJ;AAAA,EAEA,MAAM,KAAK,QAAkE;AACzE,UAAM,OAAQ,MAAM,KAAK,OAAO,KAAK,KAAK,YAAY;AAAA,MAClD,OAAO,QAAQ,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IACzD,CAAC;AACD,WAAO,KAAK,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;AAAA,EAC7C;AAAA,EAEA,MAAM,UAAU,IAAsC;AAClD,UAAM,UAAW,MAAM,KAAK,OAAO,QAAQ,KAAK,YAAY;AAAA,MACxD,OAAO,EAAE,GAAG;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS;AACV,YAAM,IAAI;AAAA,QACN,iBAAiB,EAAE;AAAA,QACnB;AAAA,MACJ;AAAA,IACJ;AACA,QACI,QAAQ,WAAW,aACnB,QAAQ,WAAW,YACnB,QAAQ,WAAW,QACrB;AACE,YAAM,IAAI;AAAA,QACN,iBAAiB,EAAE,SAAS,QAAQ,MAAM;AAAA,QAC1C;AAAA,MACJ;AAAA,IACJ;AACA,UAAM,MAAM,KAAK,IAAI;AAKrB,UAAM,KAAK,OAAO;AAAA,MACd,KAAK;AAAA,MACL;AAAA,QACI,QAAQ;AAAA,QACR,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,eAAe;AAAA,QACf,mBAAmB;AAAA,QACnB,eAAe;AAAA,QACf,eAAe;AAAA,QACf,OAAO;AAAA,QACP,YAAY;AAAA,MAChB;AAAA,MACA;AAAA,QACI,OAAO;AAAA,UACH;AAAA,UACA,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,MAAM,EAAE;AAAA,QACjD;AAAA,QACA,OAAO;AAAA,MACX;AAAA,IACJ;AACA,UAAM,QAAS,MAAM,KAAK,OAAO,QAAQ,KAAK,YAAY;AAAA,MACtD,OAAO,EAAE,GAAG;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,SAAS,MAAM,WAAW,WAAW;AAEtC,YAAM,IAAI;AAAA,QACN,iBAAiB,EAAE;AAAA,QACnB;AAAA,MACJ;AAAA,IACJ;AACA,WAAO,KAAK,WAAW,KAAK;AAAA,EAChC;AAAA,EAEQ,WAAW,GAAiC;AAChD,WAAO;AAAA,MACH,IAAI,EAAE;AAAA,MACN,WAAW,EAAE;AAAA,MACb,SAAS,EAAE;AAAA,MACX,WAAW,EAAE;AAAA,MACb,KAAK,EAAE;AAAA,MACP,QAAQ,EAAE,UAAU;AAAA,MACpB,SAAS,EAAE,eAAe,KAAK,MAAM,EAAE,YAAY,IAAI;AAAA,MACvD,QAAQ,EAAE,UAAU;AAAA,MACpB,WAAW,EAAE,cAAc;AAAA,MAC3B,SAAS,KAAK,MAAM,EAAE,YAAY;AAAA,MAClC,QAAQ,EAAE;AAAA,MACV,UAAU,EAAE;AAAA,MACZ,WAAW,EAAE,cAAc;AAAA,MAC3B,WAAW,EAAE,cAAc;AAAA,MAC3B,aAAa,EAAE,iBAAiB;AAAA,MAChC,iBAAiB,EAAE,qBAAqB;AAAA,MACxC,cAAc,EAAE,iBAAiB;AAAA,MACjC,cAAc,EAAE,iBAAiB;AAAA,MACjC,OAAO,EAAE,SAAS;AAAA,MAClB,WAAW,EAAE;AAAA,MACb,WAAW,EAAE;AAAA,IACjB;AAAA,EACJ;AACJ;","names":[]}