@open-mercato/webhooks 0.10.1-develop.7618.1.ba9531c18e → 0.10.1-develop.7619.1.97f9a4bda8

package/dist/modules/webhooks/api/webhooks/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/webhooks/api/webhooks/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { WebhookEntity } from '../../data/entities'\nimport { webhookCreateSchema, webhookUpdateSchema, webhookListQuerySchema } from '../../data/validators'\nimport { generateWebhookSecret } from '@open-mercato/shared/lib/webhooks'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport type { WebhookCreateInput, WebhookUpdateInput } from '../../data/validators'\nimport { invalidateWebhookSubscriptionCacheFor } from '../../lib/subscription-cache'\nimport { applyWebhookActiveState } from '../../lib/activation'\n\ntype WebhookCrudCtx = CrudCtx & {\n  __webhookSecret?: string\n}\n\nfunction json(payload: unknown, init: ResponseInit = { status: 200 }) {\n  return new Response(JSON.stringify(payload), {\n    ...init,\n    headers: { 'content-type': 'application/json', ...(init.headers || {}) },\n  })\n}\n\nconst webhookListItemSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  description: z.string().nullable(),\n  url: z.string(),\n  subscribedEvents: z.array(z.string()),\n  httpMethod: z.string(),\n  isActive: z.boolean(),\n  deliveryStrategy: z.string(),\n  maxRetries: z.number(),\n  consecutiveFailures: z.number(),\n  lastSuccessAt: z.string().nullable(),\n  lastFailureAt: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst webhookCollectionResponseSchema = z.object({\n  items: z.array(webhookListItemSchema),\n  total: z.number().int().nonnegative(),\n  page: z.number().int().positive(),\n  pageSize: z.number().int().positive(),\n  totalPages: z.number().int().nonnegative(),\n})\n\nconst webhookCreateResponseSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  url: z.string(),\n  secret: z.string(),\n  subscribedEvents: z.array(z.string()),\n  isActive: z.boolean(),\n})\n\nconst webhookDetailResponseSchema = webhookListItemSchema.extend({\n  customHeaders: z.record(z.string(), z.string()).nullable(),\n  strategyConfig: z.record(z.string(), z.unknown()).nullable(),\n  timeoutMs: z.number(),\n  rateLimitPerMinute: z.number(),\n  autoDisableThreshold: z.number(),\n  integrationId: z.string().nullable(),\n})\n\nconst deleteResponseSchema = z.object({ success: z.literal(true) })\nconst errorSchema = z.object({ error: z.string() })\n\nfunction resolveTenantIdForInvalidation(entity: unknown, ctx: CrudCtx): string | null {\n  const entityTenantId = (entity as { tenantId?: unknown } | null)?.tenantId\n  if (typeof entityTenantId === 'string' && entityTenantId.length > 0) return entityTenantId\n  return ctx.auth?.tenantId ?? null\n}\n\nconst crud = makeCrudRoute<WebhookCreateInput, WebhookUpdateInput, z.infer<typeof webhookListQuerySchema>>({\n  metadata: {\n    GET: { requireAuth: true, requireFeatures: ['webhooks.view'] },\n    POST: { requireAuth: true, requireFeatures: ['webhooks.manage'] },\n    PUT: { requireAuth: true, requireFeatures: ['webhooks.manage'] },\n    DELETE: { requireAuth: true, requireFeatures: ['webhooks.manage'] },\n  },\n  orm: { entity: WebhookEntity, orgField: 'organizationId' },\n  events: { module: 'webhooks', entity: 'webhook', persistent: true },\n  list: { schema: webhookListQuerySchema },\n  create: {\n    schema: webhookCreateSchema,\n    mapToEntity: (input, ctx) => {\n      const scopedCtx = ctx as WebhookCrudCtx\n      const secret = scopedCtx.__webhookSecret\n      if (!secret) throw new Error('Webhook secret not prepared')\n      return {\n        name: input.name,\n        description: input.description ?? null,\n        url: input.url,\n        secret,\n        subscribedEvents: input.subscribedEvents,\n        httpMethod: input.httpMethod ?? 'POST',\n        customHeaders: input.customHeaders ?? null,\n        deliveryStrategy: input.deliveryStrategy ?? 'http',\n        strategyConfig: input.strategyConfig ?? null,\n        maxRetries: input.maxRetries ?? 10,\n        timeoutMs: input.timeoutMs ?? 15000,\n        rateLimitPerMinute: input.rateLimitPerMinute ?? 0,\n        autoDisableThreshold: input.autoDisableThreshold ?? 100,\n        integrationId: input.integrationId ?? null,\n        organizationId: ctx.auth?.orgId ?? '',\n        tenantId: ctx.auth?.tenantId ?? '',\n      }\n    },\n    response: (entity) => ({\n      id: entity.id,\n      name: entity.name,\n      url: entity.url,\n      secret: (entity as WebhookEntity & { __revealSecret?: string }).__revealSecret ?? '***',\n      subscribedEvents: entity.subscribedEvents,\n      isActive: entity.isActive,\n    }),\n  },\n  update: {\n    schema: webhookUpdateSchema,\n    applyToEntity: (entity, input) => {\n      if (input.name !== undefined) entity.name = input.name\n      if (input.description !== undefined) entity.description = input.description\n      if (input.url !== undefined) entity.url = input.url\n      if (input.subscribedEvents !== undefined) entity.subscribedEvents = input.subscribedEvents\n      if (input.httpMethod !== undefined) entity.httpMethod = input.httpMethod\n      if (input.customHeaders !== undefined) entity.customHeaders = input.customHeaders\n      if (input.deliveryStrategy !== undefined) entity.deliveryStrategy = input.deliveryStrategy\n      if (input.strategyConfig !== undefined) entity.strategyConfig = input.strategyConfig\n      if (input.maxRetries !== undefined) entity.maxRetries = input.maxRetries\n      if (input.timeoutMs !== undefined) entity.timeoutMs = input.timeoutMs\n      if (input.rateLimitPerMinute !== undefined) entity.rateLimitPerMinute = input.rateLimitPerMinute\n      if (input.autoDisableThreshold !== undefined) entity.autoDisableThreshold = input.autoDisableThreshold\n      if (input.integrationId !== undefined) entity.integrationId = input.integrationId\n      if (input.isActive !== undefined) applyWebhookActiveState(entity, input.isActive)\n    },\n  },\n  del: { idFrom: 'query' },\n  hooks: {\n    beforeList: async (query, ctx) => {\n      const auth = ctx.auth\n      const { translate } = await resolveTranslations()\n      if (!auth?.tenantId) throw json({ error: translate('webhooks.errors.tenantRequired', 'Tenant context required') }, { status: 400 })\n\n      const page = Math.max(parseInt(query.page ?? '1', 10) || 1, 1)\n      const pageSize = Math.min(Math.max(parseInt(query.pageSize ?? '20', 10) || 20, 1), 100)\n      const search = (query.search ?? '').trim().toLowerCase()\n\n      const organizationIds = Array.isArray(ctx.organizationIds) ? ctx.organizationIds : null\n      if (organizationIds && organizationIds.length === 0) {\n        throw json({ items: [], total: 0, page, pageSize, totalPages: 0 })\n      }\n\n      const em = ctx.container.resolve('em') as EntityManager\n      const qb = em.createQueryBuilder(WebhookEntity, 'w')\n      qb.where({ deletedAt: null })\n      qb.andWhere({ tenantId: auth.tenantId })\n\n      if (organizationIds && organizationIds.length > 0) {\n        qb.andWhere({ organizationId: { $in: organizationIds } })\n      } else if (auth.orgId) {\n        qb.andWhere({ organizationId: auth.orgId })\n      }\n\n      if (search) {\n        const pattern = `%${escapeLikePattern(search)}%`\n        qb.andWhere({\n          $or: [\n            { name: { $ilike: pattern } },\n            { url: { $ilike: pattern } },\n          ],\n        })\n      }\n\n      if (query.isActive !== undefined && query.isActive !== '') {\n        const active = parseBooleanToken(query.isActive)\n        if (active !== null) {\n          qb.andWhere({ isActive: active })\n        }\n      }\n\n      qb.orderBy({ createdAt: 'desc' })\n      qb.limit(pageSize).offset((page - 1) * pageSize)\n      const [items, total] = await qb.getResultAndCount()\n\n      const payload = {\n        items: items.map((item) => ({\n          id: item.id,\n          name: item.name,\n          description: item.description ?? null,\n          url: item.url,\n          subscribedEvents: item.subscribedEvents,\n          httpMethod: item.httpMethod,\n          isActive: item.isActive,\n          deliveryStrategy: item.deliveryStrategy,\n          maxRetries: item.maxRetries,\n          consecutiveFailures: item.consecutiveFailures,\n          lastSuccessAt: item.lastSuccessAt?.toISOString() ?? null,\n          lastFailureAt: item.lastFailureAt?.toISOString() ?? null,\n          createdAt: item.createdAt.toISOString(),\n          updatedAt: item.updatedAt.toISOString(),\n        })),\n        total,\n        page,\n        pageSize,\n        totalPages: Math.ceil(total / pageSize),\n      }\n\n      throw json(payload)\n    },\n    beforeCreate: async (input, ctx) => {\n      const auth = ctx.auth\n      const { translate } = await resolveTranslations()\n      if (!auth?.tenantId) throw json({ error: translate('webhooks.errors.tenantRequired', 'Tenant context required') }, { status: 400 })\n      if (!auth?.orgId) throw json({ error: translate('webhooks.errors.orgRequired', 'Organization context required') }, { status: 400 })\n\n      const scopedCtx = ctx as WebhookCrudCtx\n      scopedCtx.__webhookSecret = generateWebhookSecret()\n\n      return input\n    },\n    afterCreate: async (entity, ctx) => {\n      const scopedCtx = ctx as WebhookCrudCtx\n      if (scopedCtx.__webhookSecret) {\n        ;(entity as WebhookEntity & { __revealSecret?: string }).__revealSecret = scopedCtx.__webhookSecret\n      }\n      await invalidateWebhookSubscriptionCacheFor(ctx.container, resolveTenantIdForInvalidation(entity, ctx))\n    },\n    afterUpdate: async (entity, ctx) => {\n      await invalidateWebhookSubscriptionCacheFor(ctx.container, resolveTenantIdForInvalidation(entity, ctx))\n    },\n    afterDelete: async (_id, ctx) => {\n      await invalidateWebhookSubscriptionCacheFor(ctx.container, ctx.auth?.tenantId ?? null)\n    },\n    beforeDelete: async (id, ctx) => {\n      const auth = ctx.auth\n      const { translate } = await resolveTranslations()\n      if (!auth?.tenantId) throw json({ error: translate('webhooks.errors.tenantRequired', 'Tenant context required') }, { status: 400 })\n\n      const em = ctx.container.resolve('em') as EntityManager\n      const record = await em.findOne(WebhookEntity, { id, deletedAt: null, tenantId: auth.tenantId })\n      if (!record) throw json({ error: translate('webhooks.errors.notFound', 'Webhook not found') }, { status: 404 })\n\n      const allowedIds = ctx.organizationScope?.allowedIds ?? null\n      if (record.organizationId && Array.isArray(allowedIds) && allowedIds.length > 0) {\n        if (!allowedIds.includes(record.organizationId)) {\n          throw json({ error: translate('webhooks.errors.forbidden', 'Forbidden') }, { status: 403 })\n        }\n      }\n    },\n  },\n})\n\nexport const metadata = crud.metadata\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Manage webhooks',\n  description: 'CRUD operations for webhook endpoints following the Standard Webhooks specification.',\n  methods: {\n    GET: {\n      summary: 'List webhooks',\n      description: 'Returns paginated webhooks for the current tenant and organization.',\n      query: webhookListQuerySchema,\n      responses: [{ status: 200, description: 'Webhook collection', schema: webhookCollectionResponseSchema }],\n      errors: [\n        { status: 400, description: 'Tenant context missing', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create webhook',\n      description: 'Creates a new webhook endpoint. A signing secret (whsec_ prefixed) is auto-generated and returned once.',\n      requestBody: { contentType: 'application/json', schema: webhookCreateSchema, description: 'Webhook configuration.' },\n      responses: [{ status: 201, description: 'Webhook created', schema: webhookCreateResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update webhook',\n      description: 'Updates an existing webhook configuration.',\n      requestBody: { contentType: 'application/json', schema: webhookUpdateSchema, description: 'Fields to update.' },\n      responses: [{ status: 200, description: 'Webhook updated', schema: webhookDetailResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorSchema },\n        { status: 404, description: 'Not found', schema: errorSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete webhook',\n      description: 'Soft-deletes a webhook endpoint.',\n      query: z.object({ id: z.string().uuid().describe('Webhook ID to delete') }),\n      responses: [{ status: 200, description: 'Deleted', schema: deleteResponseSchema }],\n      errors: [\n        { status: 404, description: 'Not found', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,qBAAqB;AAE9B,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB,qBAAqB,8BAA8B;AACjF,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC,SAAS,yBAAyB;AAElC,SAAS,6CAA6C;AACtD,SAAS,+BAA+B;AAMxC,SAAS,KAAK,SAAkB,OAAqB,EAAE,QAAQ,IAAI,GAAG;AACpE,SAAO,IAAI,SAAS,KAAK,UAAU,OAAO,GAAG;AAAA,IAC3C,GAAG;AAAA,IACH,SAAS,EAAE,gBAAgB,oBAAoB,GAAI,KAAK,WAAW,CAAC,EAAG;AAAA,EACzE,CAAC;AACH;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO;AAAA,EACf,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,KAAK,EAAE,OAAO;AAAA,EACd,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACpC,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,QAAQ;AAAA,EACpB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,qBAAqB,EAAE,OAAO;AAAA,EAC9B,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,kCAAkC,EAAE,OAAO;AAAA,EAC/C,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC3C,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO;AAAA,EACf,KAAK,EAAE,OAAO;AAAA,EACd,QAAQ,EAAE,OAAO;AAAA,EACjB,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACpC,UAAU,EAAE,QAAQ;AACtB,CAAC;AAED,MAAM,8BAA8B,sBAAsB,OAAO;AAAA,EAC/D,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EACzD,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC3D,WAAW,EAAE,OAAO;AAAA,EACpB,oBAAoB,EAAE,OAAO;AAAA,EAC7B,sBAAsB,EAAE,OAAO;AAAA,EAC/B,eAAe,EAAE,OAAO,EAAE,SAAS;AACrC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC;AAClE,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,SAAS,+BAA+B,QAAiB,KAA6B;AACpF,QAAM,iBAAkB,QAA0C;AAClE,MAAI,OAAO,mBAAmB,YAAY,eAAe,SAAS,EAAG,QAAO;AAC5E,SAAO,IAAI,MAAM,YAAY;AAC/B;AAEA,MAAM,OAAO,cAA8F;AAAA,EACzG,UAAU;AAAA,IACR,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAAA,IAC7D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,IAChE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,IAC/D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EACpE;AAAA,EACA,KAAK,EAAE,QAAQ,eAAe,UAAU,iBAAiB;AAAA,EACzD,QAAQ,EAAE,QAAQ,YAAY,QAAQ,WAAW,YAAY,KAAK;AAAA,EAClE,MAAM,EAAE,QAAQ,uBAAuB;AAAA,EACvC,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,aAAa,CAAC,OAAO,QAAQ;AAC3B,YAAM,YAAY;AAClB,YAAM,SAAS,UAAU;AACzB,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6BAA6B;AAC1D,aAAO;AAAA,QACL,MAAM,MAAM;AAAA,QACZ,aAAa,MAAM,eAAe;AAAA,QAClC,KAAK,MAAM;AAAA,QACX;AAAA,QACA,kBAAkB,MAAM;AAAA,QACxB,YAAY,MAAM,cAAc;AAAA,QAChC,eAAe,MAAM,iBAAiB;AAAA,QACtC,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,gBAAgB,MAAM,kBAAkB;AAAA,QACxC,YAAY,MAAM,cAAc;AAAA,QAChC,WAAW,MAAM,aAAa;AAAA,QAC9B,oBAAoB,MAAM,sBAAsB;AAAA,QAChD,sBAAsB,MAAM,wBAAwB;AAAA,QACpD,eAAe,MAAM,iBAAiB;AAAA,QACtC,gBAAgB,IAAI,MAAM,SAAS;AAAA,QACnC,UAAU,IAAI,MAAM,YAAY;AAAA,MAClC;AAAA,IACF;AAAA,IACA,UAAU,CAAC,YAAY;AAAA,MACrB,IAAI,OAAO;AAAA,MACX,MAAM,OAAO;AAAA,MACb,KAAK,OAAO;AAAA,MACZ,QAAS,OAAuD,kBAAkB;AAAA,MAClF,kBAAkB,OAAO;AAAA,MACzB,UAAU,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,eAAe,CAAC,QAAQ,UAAU;AAChC,UAAI,MAAM,SAAS,OAAW,QAAO,OAAO,MAAM;AAClD,UAAI,MAAM,gBAAgB,OAAW,QAAO,cAAc,MAAM;AAChE,UAAI,MAAM,QAAQ,OAAW,QAAO,MAAM,MAAM;AAChD,UAAI,MAAM,qBAAqB,OAAW,QAAO,mBAAmB,MAAM;AAC1E,UAAI,MAAM,eAAe,OAAW,QAAO,aAAa,MAAM;AAC9D,UAAI,MAAM,kBAAkB,OAAW,QAAO,gBAAgB,MAAM;AACpE,UAAI,MAAM,qBAAqB,OAAW,QAAO,mBAAmB,MAAM;AAC1E,UAAI,MAAM,mBAAmB,OAAW,QAAO,iBAAiB,MAAM;AACtE,UAAI,MAAM,eAAe,OAAW,QAAO,aAAa,MAAM;AAC9D,UAAI,MAAM,cAAc,OAAW,QAAO,YAAY,MAAM;AAC5D,UAAI,MAAM,uBAAuB,OAAW,QAAO,qBAAqB,MAAM;AAC9E,UAAI,MAAM,yBAAyB,OAAW,QAAO,uBAAuB,MAAM;AAClF,UAAI,MAAM,kBAAkB,OAAW,QAAO,gBAAgB,MAAM;AACpE,UAAI,MAAM,aAAa,OAAW,yBAAwB,QAAQ,MAAM,QAAQ;AAAA,IAClF;AAAA,EACF;AAAA,EACA,KAAK,EAAE,QAAQ,QAAQ;AAAA,EACvB,OAAO;AAAA,IACL,YAAY,OAAO,OAAO,QAAQ;AAChC,YAAM,OAAO,IAAI;AACjB,YAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAI,CAAC,MAAM,SAAU,OAAM,KAAK,EAAE,OAAO,UAAU,kCAAkC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElI,YAAM,OAAO,KAAK,IAAI,SAAS,MAAM,QAAQ,KAAK,EAAE,KAAK,GAAG,CAAC;AAC7D,YAAM,WAAW,KAAK,IAAI,KAAK,IAAI,SAAS,MAAM,YAAY,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,GAAG;AACtF,YAAM,UAAU,MAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AAEvD,YAAM,kBAAkB,MAAM,QAAQ,IAAI,eAAe,IAAI,IAAI,kBAAkB;AACnF,UAAI,mBAAmB,gBAAgB,WAAW,GAAG;AACnD,cAAM,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,MAAM,UAAU,YAAY,EAAE,CAAC;AAAA,MACnE;AAEA,YAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,YAAM,KAAK,GAAG,mBAAmB,eAAe,GAAG;AACnD,SAAG,MAAM,EAAE,WAAW,KAAK,CAAC;AAC5B,SAAG,SAAS,EAAE,UAAU,KAAK,SAAS,CAAC;AAEvC,UAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,WAAG,SAAS,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,CAAC;AAAA,MAC1D,WAAW,KAAK,OAAO;AACrB,WAAG,SAAS,EAAE,gBAAgB,KAAK,MAAM,CAAC;AAAA,MAC5C;AAEA,UAAI,QAAQ;AACV,cAAM,UAAU,IAAI,kBAAkB,MAAM,CAAC;AAC7C,WAAG,SAAS;AAAA,UACV,KAAK;AAAA,YACH,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE;AAAA,YAC5B,EAAE,KAAK,EAAE,QAAQ,QAAQ,EAAE;AAAA,UAC7B;AAAA,QACF,CAAC;AAAA,MACH;AAEA,UAAI,MAAM,aAAa,UAAa,MAAM,aAAa,IAAI;AACzD,cAAM,SAAS,kBAAkB,MAAM,QAAQ;AAC/C,YAAI,WAAW,MAAM;AACnB,aAAG,SAAS,EAAE,UAAU,OAAO,CAAC;AAAA,QAClC;AAAA,MACF;AAEA,SAAG,QAAQ,EAAE,WAAW,OAAO,CAAC;AAChC,SAAG,MAAM,QAAQ,EAAE,QAAQ,OAAO,KAAK,QAAQ;AAC/C,YAAM,CAAC,OAAO,KAAK,IAAI,MAAM,GAAG,kBAAkB;AAElD,YAAM,UAAU;AAAA,QACd,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,UAC1B,IAAI,KAAK;AAAA,UACT,MAAM,KAAK;AAAA,UACX,aAAa,KAAK,eAAe;AAAA,UACjC,KAAK,KAAK;AAAA,UACV,kBAAkB,KAAK;AAAA,UACvB,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,kBAAkB,KAAK;AAAA,UACvB,YAAY,KAAK;AAAA,UACjB,qBAAqB,KAAK;AAAA,UAC1B,eAAe,KAAK,eAAe,YAAY,KAAK;AAAA,UACpD,eAAe,KAAK,eAAe,YAAY,KAAK;AAAA,UACpD,WAAW,KAAK,UAAU,YAAY;AAAA,UACtC,WAAW,KAAK,UAAU,YAAY;AAAA,QACxC,EAAE;AAAA,QACF;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY,KAAK,KAAK,QAAQ,QAAQ;AAAA,MACxC;AAEA,YAAM,KAAK,OAAO;AAAA,IACpB;AAAA,IACA,cAAc,OAAO,OAAO,QAAQ;AAClC,YAAM,OAAO,IAAI;AACjB,YAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAI,CAAC,MAAM,SAAU,OAAM,KAAK,EAAE,OAAO,UAAU,kCAAkC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClI,UAAI,CAAC,MAAM,MAAO,OAAM,KAAK,EAAE,OAAO,UAAU,+BAA+B,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElI,YAAM,YAAY;AAClB,gBAAU,kBAAkB,sBAAsB;AAElD,aAAO;AAAA,IACT;AAAA,IACA,aAAa,OAAO,QAAQ,QAAQ;AAClC,YAAM,YAAY;AAClB,UAAI,UAAU,iBAAiB;AAC7B;AAAC,QAAC,OAAuD,iBAAiB,UAAU;AAAA,MACtF;AACA,YAAM,sCAAsC,IAAI,WAAW,+BAA+B,QAAQ,GAAG,CAAC;AAAA,IACxG;AAAA,IACA,aAAa,OAAO,QAAQ,QAAQ;AAClC,YAAM,sCAAsC,IAAI,WAAW,+BAA+B,QAAQ,GAAG,CAAC;AAAA,IACxG;AAAA,IACA,aAAa,OAAO,KAAK,QAAQ;AAC/B,YAAM,sCAAsC,IAAI,WAAW,IAAI,MAAM,YAAY,IAAI;AAAA,IACvF;AAAA,IACA,cAAc,OAAO,IAAI,QAAQ;AAC/B,YAAM,OAAO,IAAI;AACjB,YAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAI,CAAC,MAAM,SAAU,OAAM,KAAK,EAAE,OAAO,UAAU,kCAAkC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElI,YAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,YAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,WAAW,MAAM,UAAU,KAAK,SAAS,CAAC;AAC/F,UAAI,CAAC,OAAQ,OAAM,KAAK,EAAE,OAAO,UAAU,4BAA4B,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9G,YAAM,aAAa,IAAI,mBAAmB,cAAc;AACxD,UAAI,OAAO,kBAAkB,MAAM,QAAQ,UAAU,KAAK,WAAW,SAAS,GAAG;AAC/E,YAAI,CAAC,WAAW,SAAS,OAAO,cAAc,GAAG;AAC/C,gBAAM,KAAK,EAAE,OAAO,UAAU,6BAA6B,WAAW,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC5F;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAEM,MAAM,WAAW,KAAK;AACtB,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAEpB,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,gCAAgC,CAAC;AAAA,MACvG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,YAAY;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,MAClE;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,qBAAqB,aAAa,yBAAyB;AAAA,MACnH,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,4BAA4B,CAAC;AAAA,MAChG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,MAClE;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,qBAAqB,aAAa,oBAAoB;AAAA,MAC9G,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,4BAA4B,CAAC;AAAA,MAChG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;AAAA,MAC1E,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,WAAW,QAAQ,qBAAqB,CAAC;AAAA,MACjF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport type { CrudCtx } from '@open-mercato/shared/lib/crud/factory'\nimport { WebhookEntity } from '../../data/entities'\nimport { webhookCreateSchema, webhookUpdateSchema, webhookListQuerySchema } from '../../data/validators'\nimport { generateWebhookSecret } from '@open-mercato/shared/lib/webhooks'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport type { WebhookCreateInput, WebhookUpdateInput } from '../../data/validators'\nimport { invalidateWebhookSubscriptionCacheFor } from '../../lib/subscription-cache'\nimport { applyWebhookActiveState } from '../../lib/activation'\nimport { planWebhookCustomHeadersUpdate } from '../../lib/custom-headers'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { canRevealWebhookCredentialHeaders, translateWebhookCustomHeadersRejection } from '../helpers'\n\ntype WebhookCrudCtx = CrudCtx & {\n  __webhookSecret?: string\n}\n\nfunction json(payload: unknown, init: ResponseInit = { status: 200 }) {\n  return new Response(JSON.stringify(payload), {\n    ...init,\n    headers: { 'content-type': 'application/json', ...(init.headers || {}) },\n  })\n}\n\nconst webhookListItemSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  description: z.string().nullable(),\n  url: z.string(),\n  subscribedEvents: z.array(z.string()),\n  httpMethod: z.string(),\n  isActive: z.boolean(),\n  deliveryStrategy: z.string(),\n  maxRetries: z.number(),\n  consecutiveFailures: z.number(),\n  lastSuccessAt: z.string().nullable(),\n  lastFailureAt: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n})\n\nconst webhookCollectionResponseSchema = z.object({\n  items: z.array(webhookListItemSchema),\n  total: z.number().int().nonnegative(),\n  page: z.number().int().positive(),\n  pageSize: z.number().int().positive(),\n  totalPages: z.number().int().nonnegative(),\n})\n\nconst webhookCreateResponseSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  url: z.string(),\n  secret: z.string(),\n  subscribedEvents: z.array(z.string()),\n  isActive: z.boolean(),\n})\n\nconst webhookDetailResponseSchema = webhookListItemSchema.extend({\n  customHeaders: z.record(z.string(), z.string()).nullable().describe(\n    'Credential-like header values are returned as \u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022 unless the caller has webhooks.secrets. Sending \u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022 back on update keeps the stored value.',\n  ),\n  strategyConfig: z.record(z.string(), z.unknown()).nullable(),\n  timeoutMs: z.number(),\n  rateLimitPerMinute: z.number(),\n  autoDisableThreshold: z.number(),\n  integrationId: z.string().nullable(),\n})\n\nconst deleteResponseSchema = z.object({ success: z.literal(true) })\nconst errorSchema = z.object({ error: z.string() })\n\nfunction resolveTenantIdForInvalidation(entity: unknown, ctx: CrudCtx): string | null {\n  const entityTenantId = (entity as { tenantId?: unknown } | null)?.tenantId\n  if (typeof entityTenantId === 'string' && entityTenantId.length > 0) return entityTenantId\n  return ctx.auth?.tenantId ?? null\n}\n\nconst crud = makeCrudRoute<WebhookCreateInput, WebhookUpdateInput, z.infer<typeof webhookListQuerySchema>>({\n  metadata: {\n    GET: { requireAuth: true, requireFeatures: ['webhooks.view'] },\n    POST: { requireAuth: true, requireFeatures: ['webhooks.manage'] },\n    PUT: { requireAuth: true, requireFeatures: ['webhooks.manage'] },\n    DELETE: { requireAuth: true, requireFeatures: ['webhooks.manage'] },\n  },\n  orm: { entity: WebhookEntity, orgField: 'organizationId' },\n  events: { module: 'webhooks', entity: 'webhook', persistent: true },\n  list: { schema: webhookListQuerySchema },\n  create: {\n    schema: webhookCreateSchema,\n    mapToEntity: (input, ctx) => {\n      const scopedCtx = ctx as WebhookCrudCtx\n      const secret = scopedCtx.__webhookSecret\n      if (!secret) throw new Error('Webhook secret not prepared')\n      return {\n        name: input.name,\n        description: input.description ?? null,\n        url: input.url,\n        secret,\n        subscribedEvents: input.subscribedEvents,\n        httpMethod: input.httpMethod ?? 'POST',\n        customHeaders: input.customHeaders ?? null,\n        deliveryStrategy: input.deliveryStrategy ?? 'http',\n        strategyConfig: input.strategyConfig ?? null,\n        maxRetries: input.maxRetries ?? 10,\n        timeoutMs: input.timeoutMs ?? 15000,\n        rateLimitPerMinute: input.rateLimitPerMinute ?? 0,\n        autoDisableThreshold: input.autoDisableThreshold ?? 100,\n        integrationId: input.integrationId ?? null,\n        organizationId: ctx.auth?.orgId ?? '',\n        tenantId: ctx.auth?.tenantId ?? '',\n      }\n    },\n    response: (entity) => ({\n      id: entity.id,\n      name: entity.name,\n      url: entity.url,\n      secret: (entity as WebhookEntity & { __revealSecret?: string }).__revealSecret ?? '***',\n      subscribedEvents: entity.subscribedEvents,\n      isActive: entity.isActive,\n    }),\n  },\n  update: {\n    schema: webhookUpdateSchema,\n    applyToEntity: async (entity: WebhookEntity, input, ctx) => {\n      const headersUpdate = planWebhookCustomHeadersUpdate({\n        current: entity,\n        next: input,\n        canRevealCredentials: await canRevealWebhookCredentialHeaders(ctx.container, ctx.auth, entity),\n      })\n      if (!headersUpdate.ok) {\n        throw new CrudHttpError(400, { error: await translateWebhookCustomHeadersRejection(headersUpdate) })\n      }\n      if (input.name !== undefined) entity.name = input.name\n      if (input.description !== undefined) entity.description = input.description\n      if (input.url !== undefined) entity.url = input.url\n      if (input.subscribedEvents !== undefined) entity.subscribedEvents = input.subscribedEvents\n      if (input.httpMethod !== undefined) entity.httpMethod = input.httpMethod\n      if (headersUpdate.customHeaders !== undefined) entity.customHeaders = headersUpdate.customHeaders\n      if (input.deliveryStrategy !== undefined) entity.deliveryStrategy = input.deliveryStrategy\n      if (input.strategyConfig !== undefined) entity.strategyConfig = input.strategyConfig\n      if (input.maxRetries !== undefined) entity.maxRetries = input.maxRetries\n      if (input.timeoutMs !== undefined) entity.timeoutMs = input.timeoutMs\n      if (input.rateLimitPerMinute !== undefined) entity.rateLimitPerMinute = input.rateLimitPerMinute\n      if (input.autoDisableThreshold !== undefined) entity.autoDisableThreshold = input.autoDisableThreshold\n      if (input.integrationId !== undefined) entity.integrationId = input.integrationId\n      if (input.isActive !== undefined) applyWebhookActiveState(entity, input.isActive)\n    },\n  },\n  del: { idFrom: 'query' },\n  hooks: {\n    beforeList: async (query, ctx) => {\n      const auth = ctx.auth\n      const { translate } = await resolveTranslations()\n      if (!auth?.tenantId) throw json({ error: translate('webhooks.errors.tenantRequired', 'Tenant context required') }, { status: 400 })\n\n      const page = Math.max(parseInt(query.page ?? '1', 10) || 1, 1)\n      const pageSize = Math.min(Math.max(parseInt(query.pageSize ?? '20', 10) || 20, 1), 100)\n      const search = (query.search ?? '').trim().toLowerCase()\n\n      const organizationIds = Array.isArray(ctx.organizationIds) ? ctx.organizationIds : null\n      if (organizationIds && organizationIds.length === 0) {\n        throw json({ items: [], total: 0, page, pageSize, totalPages: 0 })\n      }\n\n      const em = ctx.container.resolve('em') as EntityManager\n      const qb = em.createQueryBuilder(WebhookEntity, 'w')\n      qb.where({ deletedAt: null })\n      qb.andWhere({ tenantId: auth.tenantId })\n\n      if (organizationIds && organizationIds.length > 0) {\n        qb.andWhere({ organizationId: { $in: organizationIds } })\n      } else if (auth.orgId) {\n        qb.andWhere({ organizationId: auth.orgId })\n      }\n\n      if (search) {\n        const pattern = `%${escapeLikePattern(search)}%`\n        qb.andWhere({\n          $or: [\n            { name: { $ilike: pattern } },\n            { url: { $ilike: pattern } },\n          ],\n        })\n      }\n\n      if (query.isActive !== undefined && query.isActive !== '') {\n        const active = parseBooleanToken(query.isActive)\n        if (active !== null) {\n          qb.andWhere({ isActive: active })\n        }\n      }\n\n      qb.orderBy({ createdAt: 'desc' })\n      qb.limit(pageSize).offset((page - 1) * pageSize)\n      const [items, total] = await qb.getResultAndCount()\n\n      const payload = {\n        items: items.map((item) => ({\n          id: item.id,\n          name: item.name,\n          description: item.description ?? null,\n          url: item.url,\n          subscribedEvents: item.subscribedEvents,\n          httpMethod: item.httpMethod,\n          isActive: item.isActive,\n          deliveryStrategy: item.deliveryStrategy,\n          maxRetries: item.maxRetries,\n          consecutiveFailures: item.consecutiveFailures,\n          lastSuccessAt: item.lastSuccessAt?.toISOString() ?? null,\n          lastFailureAt: item.lastFailureAt?.toISOString() ?? null,\n          createdAt: item.createdAt.toISOString(),\n          updatedAt: item.updatedAt.toISOString(),\n        })),\n        total,\n        page,\n        pageSize,\n        totalPages: Math.ceil(total / pageSize),\n      }\n\n      throw json(payload)\n    },\n    beforeCreate: async (input, ctx) => {\n      const auth = ctx.auth\n      const { translate } = await resolveTranslations()\n      if (!auth?.tenantId) throw json({ error: translate('webhooks.errors.tenantRequired', 'Tenant context required') }, { status: 400 })\n      if (!auth?.orgId) throw json({ error: translate('webhooks.errors.orgRequired', 'Organization context required') }, { status: 400 })\n\n      const scopedCtx = ctx as WebhookCrudCtx\n      scopedCtx.__webhookSecret = generateWebhookSecret()\n\n      return input\n    },\n    afterCreate: async (entity, ctx) => {\n      const scopedCtx = ctx as WebhookCrudCtx\n      if (scopedCtx.__webhookSecret) {\n        ;(entity as WebhookEntity & { __revealSecret?: string }).__revealSecret = scopedCtx.__webhookSecret\n      }\n      await invalidateWebhookSubscriptionCacheFor(ctx.container, resolveTenantIdForInvalidation(entity, ctx))\n    },\n    afterUpdate: async (entity, ctx) => {\n      await invalidateWebhookSubscriptionCacheFor(ctx.container, resolveTenantIdForInvalidation(entity, ctx))\n    },\n    afterDelete: async (_id, ctx) => {\n      await invalidateWebhookSubscriptionCacheFor(ctx.container, ctx.auth?.tenantId ?? null)\n    },\n    beforeDelete: async (id, ctx) => {\n      const auth = ctx.auth\n      const { translate } = await resolveTranslations()\n      if (!auth?.tenantId) throw json({ error: translate('webhooks.errors.tenantRequired', 'Tenant context required') }, { status: 400 })\n\n      const em = ctx.container.resolve('em') as EntityManager\n      const record = await em.findOne(WebhookEntity, { id, deletedAt: null, tenantId: auth.tenantId })\n      if (!record) throw json({ error: translate('webhooks.errors.notFound', 'Webhook not found') }, { status: 404 })\n\n      const allowedIds = ctx.organizationScope?.allowedIds ?? null\n      if (record.organizationId && Array.isArray(allowedIds) && allowedIds.length > 0) {\n        if (!allowedIds.includes(record.organizationId)) {\n          throw json({ error: translate('webhooks.errors.forbidden', 'Forbidden') }, { status: 403 })\n        }\n      }\n    },\n  },\n})\n\nexport const metadata = crud.metadata\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Manage webhooks',\n  description: 'CRUD operations for webhook endpoints following the Standard Webhooks specification.',\n  methods: {\n    GET: {\n      summary: 'List webhooks',\n      description: 'Returns paginated webhooks for the current tenant and organization.',\n      query: webhookListQuerySchema,\n      responses: [{ status: 200, description: 'Webhook collection', schema: webhookCollectionResponseSchema }],\n      errors: [\n        { status: 400, description: 'Tenant context missing', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create webhook',\n      description: 'Creates a new webhook endpoint. A signing secret (whsec_ prefixed) is auto-generated and returned once.',\n      requestBody: { contentType: 'application/json', schema: webhookCreateSchema, description: 'Webhook configuration.' },\n      responses: [{ status: 201, description: 'Webhook created', schema: webhookCreateResponseSchema }],\n      errors: [\n        { status: 400, description: 'Invalid payload', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update webhook',\n      description: 'Updates an existing webhook configuration.',\n      requestBody: { contentType: 'application/json', schema: webhookUpdateSchema, description: 'Fields to update.' },\n      responses: [{ status: 200, description: 'Webhook updated', schema: webhookDetailResponseSchema }],\n      errors: [\n        {\n          status: 400,\n          description: 'Invalid payload, a hidden header value with no stored value, or a URL change that keeps hidden header values for a caller without webhooks.secrets',\n          schema: errorSchema,\n        },\n        { status: 404, description: 'Not found', schema: errorSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Delete webhook',\n      description: 'Soft-deletes a webhook endpoint.',\n      query: z.object({ id: z.string().uuid().describe('Webhook ID to delete') }),\n      responses: [{ status: 200, description: 'Deleted', schema: deleteResponseSchema }],\n      errors: [\n        { status: 404, description: 'Not found', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGlB,SAAS,qBAAqB;AAE9B,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB,qBAAqB,8BAA8B;AACjF,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,yBAAyB;AAClC,SAAS,yBAAyB;AAElC,SAAS,6CAA6C;AACtD,SAAS,+BAA+B;AACxC,SAAS,sCAAsC;AAC/C,SAAS,qBAAqB;AAC9B,SAAS,mCAAmC,8CAA8C;AAM1F,SAAS,KAAK,SAAkB,OAAqB,EAAE,QAAQ,IAAI,GAAG;AACpE,SAAO,IAAI,SAAS,KAAK,UAAU,OAAO,GAAG;AAAA,IAC3C,GAAG;AAAA,IACH,SAAS,EAAE,gBAAgB,oBAAoB,GAAI,KAAK,WAAW,CAAC,EAAG;AAAA,EACzE,CAAC;AACH;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO;AAAA,EACf,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,KAAK,EAAE,OAAO;AAAA,EACd,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACpC,YAAY,EAAE,OAAO;AAAA,EACrB,UAAU,EAAE,QAAQ;AAAA,EACpB,kBAAkB,EAAE,OAAO;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,qBAAqB,EAAE,OAAO;AAAA,EAC9B,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,kCAAkC,EAAE,OAAO;AAAA,EAC/C,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC3C,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO;AAAA,EACb,MAAM,EAAE,OAAO;AAAA,EACf,KAAK,EAAE,OAAO;AAAA,EACd,QAAQ,EAAE,OAAO;AAAA,EACjB,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EACpC,UAAU,EAAE,QAAQ;AACtB,CAAC;AAED,MAAM,8BAA8B,sBAAsB,OAAO;AAAA,EAC/D,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE;AAAA,IACzD;AAAA,EACF;AAAA,EACA,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC3D,WAAW,EAAE,OAAO;AAAA,EACpB,oBAAoB,EAAE,OAAO;AAAA,EAC7B,sBAAsB,EAAE,OAAO;AAAA,EAC/B,eAAe,EAAE,OAAO,EAAE,SAAS;AACrC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC;AAClE,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAElD,SAAS,+BAA+B,QAAiB,KAA6B;AACpF,QAAM,iBAAkB,QAA0C;AAClE,MAAI,OAAO,mBAAmB,YAAY,eAAe,SAAS,EAAG,QAAO;AAC5E,SAAO,IAAI,MAAM,YAAY;AAC/B;AAEA,MAAM,OAAO,cAA8F;AAAA,EACzG,UAAU;AAAA,IACR,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAAA,IAC7D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,IAChE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,IAC/D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EACpE;AAAA,EACA,KAAK,EAAE,QAAQ,eAAe,UAAU,iBAAiB;AAAA,EACzD,QAAQ,EAAE,QAAQ,YAAY,QAAQ,WAAW,YAAY,KAAK;AAAA,EAClE,MAAM,EAAE,QAAQ,uBAAuB;AAAA,EACvC,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,aAAa,CAAC,OAAO,QAAQ;AAC3B,YAAM,YAAY;AAClB,YAAM,SAAS,UAAU;AACzB,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6BAA6B;AAC1D,aAAO;AAAA,QACL,MAAM,MAAM;AAAA,QACZ,aAAa,MAAM,eAAe;AAAA,QAClC,KAAK,MAAM;AAAA,QACX;AAAA,QACA,kBAAkB,MAAM;AAAA,QACxB,YAAY,MAAM,cAAc;AAAA,QAChC,eAAe,MAAM,iBAAiB;AAAA,QACtC,kBAAkB,MAAM,oBAAoB;AAAA,QAC5C,gBAAgB,MAAM,kBAAkB;AAAA,QACxC,YAAY,MAAM,cAAc;AAAA,QAChC,WAAW,MAAM,aAAa;AAAA,QAC9B,oBAAoB,MAAM,sBAAsB;AAAA,QAChD,sBAAsB,MAAM,wBAAwB;AAAA,QACpD,eAAe,MAAM,iBAAiB;AAAA,QACtC,gBAAgB,IAAI,MAAM,SAAS;AAAA,QACnC,UAAU,IAAI,MAAM,YAAY;AAAA,MAClC;AAAA,IACF;AAAA,IACA,UAAU,CAAC,YAAY;AAAA,MACrB,IAAI,OAAO;AAAA,MACX,MAAM,OAAO;AAAA,MACb,KAAK,OAAO;AAAA,MACZ,QAAS,OAAuD,kBAAkB;AAAA,MAClF,kBAAkB,OAAO;AAAA,MACzB,UAAU,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,eAAe,OAAO,QAAuB,OAAO,QAAQ;AAC1D,YAAM,gBAAgB,+BAA+B;AAAA,QACnD,SAAS;AAAA,QACT,MAAM;AAAA,QACN,sBAAsB,MAAM,kCAAkC,IAAI,WAAW,IAAI,MAAM,MAAM;AAAA,MAC/F,CAAC;AACD,UAAI,CAAC,cAAc,IAAI;AACrB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,MAAM,uCAAuC,aAAa,EAAE,CAAC;AAAA,MACrG;AACA,UAAI,MAAM,SAAS,OAAW,QAAO,OAAO,MAAM;AAClD,UAAI,MAAM,gBAAgB,OAAW,QAAO,cAAc,MAAM;AAChE,UAAI,MAAM,QAAQ,OAAW,QAAO,MAAM,MAAM;AAChD,UAAI,MAAM,qBAAqB,OAAW,QAAO,mBAAmB,MAAM;AAC1E,UAAI,MAAM,eAAe,OAAW,QAAO,aAAa,MAAM;AAC9D,UAAI,cAAc,kBAAkB,OAAW,QAAO,gBAAgB,cAAc;AACpF,UAAI,MAAM,qBAAqB,OAAW,QAAO,mBAAmB,MAAM;AAC1E,UAAI,MAAM,mBAAmB,OAAW,QAAO,iBAAiB,MAAM;AACtE,UAAI,MAAM,eAAe,OAAW,QAAO,aAAa,MAAM;AAC9D,UAAI,MAAM,cAAc,OAAW,QAAO,YAAY,MAAM;AAC5D,UAAI,MAAM,uBAAuB,OAAW,QAAO,qBAAqB,MAAM;AAC9E,UAAI,MAAM,yBAAyB,OAAW,QAAO,uBAAuB,MAAM;AAClF,UAAI,MAAM,kBAAkB,OAAW,QAAO,gBAAgB,MAAM;AACpE,UAAI,MAAM,aAAa,OAAW,yBAAwB,QAAQ,MAAM,QAAQ;AAAA,IAClF;AAAA,EACF;AAAA,EACA,KAAK,EAAE,QAAQ,QAAQ;AAAA,EACvB,OAAO;AAAA,IACL,YAAY,OAAO,OAAO,QAAQ;AAChC,YAAM,OAAO,IAAI;AACjB,YAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAI,CAAC,MAAM,SAAU,OAAM,KAAK,EAAE,OAAO,UAAU,kCAAkC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElI,YAAM,OAAO,KAAK,IAAI,SAAS,MAAM,QAAQ,KAAK,EAAE,KAAK,GAAG,CAAC;AAC7D,YAAM,WAAW,KAAK,IAAI,KAAK,IAAI,SAAS,MAAM,YAAY,MAAM,EAAE,KAAK,IAAI,CAAC,GAAG,GAAG;AACtF,YAAM,UAAU,MAAM,UAAU,IAAI,KAAK,EAAE,YAAY;AAEvD,YAAM,kBAAkB,MAAM,QAAQ,IAAI,eAAe,IAAI,IAAI,kBAAkB;AACnF,UAAI,mBAAmB,gBAAgB,WAAW,GAAG;AACnD,cAAM,KAAK,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,MAAM,UAAU,YAAY,EAAE,CAAC;AAAA,MACnE;AAEA,YAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,YAAM,KAAK,GAAG,mBAAmB,eAAe,GAAG;AACnD,SAAG,MAAM,EAAE,WAAW,KAAK,CAAC;AAC5B,SAAG,SAAS,EAAE,UAAU,KAAK,SAAS,CAAC;AAEvC,UAAI,mBAAmB,gBAAgB,SAAS,GAAG;AACjD,WAAG,SAAS,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,CAAC;AAAA,MAC1D,WAAW,KAAK,OAAO;AACrB,WAAG,SAAS,EAAE,gBAAgB,KAAK,MAAM,CAAC;AAAA,MAC5C;AAEA,UAAI,QAAQ;AACV,cAAM,UAAU,IAAI,kBAAkB,MAAM,CAAC;AAC7C,WAAG,SAAS;AAAA,UACV,KAAK;AAAA,YACH,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE;AAAA,YAC5B,EAAE,KAAK,EAAE,QAAQ,QAAQ,EAAE;AAAA,UAC7B;AAAA,QACF,CAAC;AAAA,MACH;AAEA,UAAI,MAAM,aAAa,UAAa,MAAM,aAAa,IAAI;AACzD,cAAM,SAAS,kBAAkB,MAAM,QAAQ;AAC/C,YAAI,WAAW,MAAM;AACnB,aAAG,SAAS,EAAE,UAAU,OAAO,CAAC;AAAA,QAClC;AAAA,MACF;AAEA,SAAG,QAAQ,EAAE,WAAW,OAAO,CAAC;AAChC,SAAG,MAAM,QAAQ,EAAE,QAAQ,OAAO,KAAK,QAAQ;AAC/C,YAAM,CAAC,OAAO,KAAK,IAAI,MAAM,GAAG,kBAAkB;AAElD,YAAM,UAAU;AAAA,QACd,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,UAC1B,IAAI,KAAK;AAAA,UACT,MAAM,KAAK;AAAA,UACX,aAAa,KAAK,eAAe;AAAA,UACjC,KAAK,KAAK;AAAA,UACV,kBAAkB,KAAK;AAAA,UACvB,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,kBAAkB,KAAK;AAAA,UACvB,YAAY,KAAK;AAAA,UACjB,qBAAqB,KAAK;AAAA,UAC1B,eAAe,KAAK,eAAe,YAAY,KAAK;AAAA,UACpD,eAAe,KAAK,eAAe,YAAY,KAAK;AAAA,UACpD,WAAW,KAAK,UAAU,YAAY;AAAA,UACtC,WAAW,KAAK,UAAU,YAAY;AAAA,QACxC,EAAE;AAAA,QACF;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY,KAAK,KAAK,QAAQ,QAAQ;AAAA,MACxC;AAEA,YAAM,KAAK,OAAO;AAAA,IACpB;AAAA,IACA,cAAc,OAAO,OAAO,QAAQ;AAClC,YAAM,OAAO,IAAI;AACjB,YAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAI,CAAC,MAAM,SAAU,OAAM,KAAK,EAAE,OAAO,UAAU,kCAAkC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClI,UAAI,CAAC,MAAM,MAAO,OAAM,KAAK,EAAE,OAAO,UAAU,+BAA+B,+BAA+B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElI,YAAM,YAAY;AAClB,gBAAU,kBAAkB,sBAAsB;AAElD,aAAO;AAAA,IACT;AAAA,IACA,aAAa,OAAO,QAAQ,QAAQ;AAClC,YAAM,YAAY;AAClB,UAAI,UAAU,iBAAiB;AAC7B;AAAC,QAAC,OAAuD,iBAAiB,UAAU;AAAA,MACtF;AACA,YAAM,sCAAsC,IAAI,WAAW,+BAA+B,QAAQ,GAAG,CAAC;AAAA,IACxG;AAAA,IACA,aAAa,OAAO,QAAQ,QAAQ;AAClC,YAAM,sCAAsC,IAAI,WAAW,+BAA+B,QAAQ,GAAG,CAAC;AAAA,IACxG;AAAA,IACA,aAAa,OAAO,KAAK,QAAQ;AAC/B,YAAM,sCAAsC,IAAI,WAAW,IAAI,MAAM,YAAY,IAAI;AAAA,IACvF;AAAA,IACA,cAAc,OAAO,IAAI,QAAQ;AAC/B,YAAM,OAAO,IAAI;AACjB,YAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAI,CAAC,MAAM,SAAU,OAAM,KAAK,EAAE,OAAO,UAAU,kCAAkC,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAElI,YAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,YAAM,SAAS,MAAM,GAAG,QAAQ,eAAe,EAAE,IAAI,WAAW,MAAM,UAAU,KAAK,SAAS,CAAC;AAC/F,UAAI,CAAC,OAAQ,OAAM,KAAK,EAAE,OAAO,UAAU,4BAA4B,mBAAmB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9G,YAAM,aAAa,IAAI,mBAAmB,cAAc;AACxD,UAAI,OAAO,kBAAkB,MAAM,QAAQ,UAAU,KAAK,WAAW,SAAS,GAAG;AAC/E,YAAI,CAAC,WAAW,SAAS,OAAO,cAAc,GAAG;AAC/C,gBAAM,KAAK,EAAE,OAAO,UAAU,6BAA6B,WAAW,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC5F;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAEM,MAAM,WAAW,KAAK;AACtB,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAEpB,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,gCAAgC,CAAC;AAAA,MACvG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,YAAY;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,MAClE;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,qBAAqB,aAAa,yBAAyB;AAAA,MACnH,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,4BAA4B,CAAC;AAAA,MAChG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,YAAY;AAAA,QACnE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,MAClE;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa,EAAE,aAAa,oBAAoB,QAAQ,qBAAqB,aAAa,oBAAoB;AAAA,MAC9G,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,4BAA4B,CAAC;AAAA,MAChG,QAAQ;AAAA,QACN;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;AAAA,MAC1E,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,WAAW,QAAQ,qBAAqB,CAAC;AAAA,MACjF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/webhooks/lib/custom-headers.js

@@ -10,8 +10,68 @@ function sanitizeWebhookCustomHeaders(customHeaders) {
     Object.entries(customHeaders).filter(([name]) => !isReservedWebhookCustomHeader(name))
   );
 }
+const WEBHOOK_REDACTED_HEADER_VALUE = "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
+const CREDENTIAL_HEADER_NAME_PATTERN = /(auth|token|secret|pass|pwd|key|credential|sig|hmac|session|cookie|jwt|bearer|private)/i;
+const CREDENTIAL_HEADER_VALUE_PATTERN = /^(?:(?:bearer|basic|digest|token)\s|eyJ|sk_(?:live|test)_|rk_(?:live|test)_|gh[pousr]_|github_pat_|xox[abpr]-|glpat-)/i;
+function isCredentialWebhookHeader(name, value) {
+  if (CREDENTIAL_HEADER_NAME_PATTERN.test(name.trim())) return true;
+  return typeof value === "string" && CREDENTIAL_HEADER_VALUE_PATTERN.test(value.trim());
+}
+function redactWebhookCustomHeaders(customHeaders) {
+  if (!customHeaders) return null;
+  return Object.fromEntries(
+    Object.entries(customHeaders).map(([name, value]) => [
+      name,
+      isCredentialWebhookHeader(name, value) ? WEBHOOK_REDACTED_HEADER_VALUE : value
+    ])
+  );
+}
+function findStoredHeaderValue(name, stored) {
+  if (Object.prototype.hasOwnProperty.call(stored, name)) return stored[name];
+  const normalized = name.trim().toLowerCase();
+  const matches = Object.keys(stored).filter((storedName) => storedName.trim().toLowerCase() === normalized);
+  return matches.length === 1 ? stored[matches[0]] : null;
+}
+function resolveRedactedWebhookCustomHeaders(next, stored) {
+  const headers = {};
+  const keptStoredValues = [];
+  for (const [name, value] of Object.entries(next)) {
+    if (value !== WEBHOOK_REDACTED_HEADER_VALUE) {
+      headers[name] = value;
+      continue;
+    }
+    const storedValue = stored ? findStoredHeaderValue(name, stored) : null;
+    if (storedValue === null || storedValue === WEBHOOK_REDACTED_HEADER_VALUE) return { ok: false, header: name };
+    headers[name] = storedValue;
+    if (isCredentialWebhookHeader(name, storedValue)) keptStoredValues.push(name);
+  }
+  return { ok: true, headers, keptStoredValues };
+}
+function planWebhookCustomHeadersUpdate(input) {
+  const { current, next, canRevealCredentials } = input;
+  let customHeaders = next.customHeaders;
+  let keptCredentialHeaders = [];
+  if (next.customHeaders === void 0) {
+    keptCredentialHeaders = Object.entries(current.customHeaders ?? {}).filter(([name, value]) => isCredentialWebhookHeader(name, value)).map(([name]) => name);
+  } else if (next.customHeaders !== null) {
+    const resolved = resolveRedactedWebhookCustomHeaders(next.customHeaders, current.customHeaders);
+    if (!resolved.ok) return { ok: false, reason: "redactedHeaderWithoutValue", header: resolved.header };
+    customHeaders = resolved.headers;
+    keptCredentialHeaders = resolved.keptStoredValues;
+  }
+  const urlChanged = next.url !== void 0 && next.url !== current.url;
+  if (!canRevealCredentials && urlChanged && keptCredentialHeaders.length > 0) {
+    return { ok: false, reason: "credentialHeadersRequireReentry", header: keptCredentialHeaders[0] };
+  }
+  return { ok: true, customHeaders };
+}
 export {
+  WEBHOOK_REDACTED_HEADER_VALUE,
+  isCredentialWebhookHeader,
   isReservedWebhookCustomHeader,
+  planWebhookCustomHeadersUpdate,
+  redactWebhookCustomHeaders,
+  resolveRedactedWebhookCustomHeaders,
   sanitizeWebhookCustomHeaders
 };
 //# sourceMappingURL=custom-headers.js.map

package/dist/modules/webhooks/lib/custom-headers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/webhooks/lib/custom-headers.ts"],
-  "sourcesContent": ["const RESERVED_HEADER_PREFIX = 'webhook-'\nconst RESERVED_HEADER_NAMES = new Set(['content-type'])\n\nexport function isReservedWebhookCustomHeader(name: string): boolean {\n  const normalized = name.trim().toLowerCase()\n  return normalized.startsWith(RESERVED_HEADER_PREFIX) || RESERVED_HEADER_NAMES.has(normalized)\n}\n\nexport function sanitizeWebhookCustomHeaders(\n  customHeaders: Record<string, string> | null | undefined,\n): Record<string, string> {\n  if (!customHeaders) return {}\n  return Object.fromEntries(\n    Object.entries(customHeaders).filter(([name]) => !isReservedWebhookCustomHeader(name)),\n  )\n}\n"],
-  "mappings": "AAAA,MAAM,yBAAyB;AAC/B,MAAM,wBAAwB,oBAAI,IAAI,CAAC,cAAc,CAAC;AAE/C,SAAS,8BAA8B,MAAuB;AACnE,QAAM,aAAa,KAAK,KAAK,EAAE,YAAY;AAC3C,SAAO,WAAW,WAAW,sBAAsB,KAAK,sBAAsB,IAAI,UAAU;AAC9F;AAEO,SAAS,6BACd,eACwB;AACxB,MAAI,CAAC,cAAe,QAAO,CAAC;AAC5B,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,8BAA8B,IAAI,CAAC;AAAA,EACvF;AACF;",
+  "sourcesContent": ["const RESERVED_HEADER_PREFIX = 'webhook-'\nconst RESERVED_HEADER_NAMES = new Set(['content-type'])\n\nexport function isReservedWebhookCustomHeader(name: string): boolean {\n  const normalized = name.trim().toLowerCase()\n  return normalized.startsWith(RESERVED_HEADER_PREFIX) || RESERVED_HEADER_NAMES.has(normalized)\n}\n\nexport function sanitizeWebhookCustomHeaders(\n  customHeaders: Record<string, string> | null | undefined,\n): Record<string, string> {\n  if (!customHeaders) return {}\n  return Object.fromEntries(\n    Object.entries(customHeaders).filter(([name]) => !isReservedWebhookCustomHeader(name)),\n  )\n}\n\nexport const WEBHOOK_REDACTED_HEADER_VALUE = '\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022'\n\nconst CREDENTIAL_HEADER_NAME_PATTERN = /(auth|token|secret|pass|pwd|key|credential|sig|hmac|session|cookie|jwt|bearer|private)/i\nconst CREDENTIAL_HEADER_VALUE_PATTERN = /^(?:(?:bearer|basic|digest|token)\\s|eyJ|sk_(?:live|test)_|rk_(?:live|test)_|gh[pousr]_|github_pat_|xox[abpr]-|glpat-)/i\n\nexport function isCredentialWebhookHeader(name: string, value?: string | null): boolean {\n  if (CREDENTIAL_HEADER_NAME_PATTERN.test(name.trim())) return true\n  return typeof value === 'string' && CREDENTIAL_HEADER_VALUE_PATTERN.test(value.trim())\n}\n\nexport function redactWebhookCustomHeaders(\n  customHeaders: Record<string, string> | null | undefined,\n): Record<string, string> | null {\n  if (!customHeaders) return null\n  return Object.fromEntries(\n    Object.entries(customHeaders).map(([name, value]) => [\n      name,\n      isCredentialWebhookHeader(name, value) ? WEBHOOK_REDACTED_HEADER_VALUE : value,\n    ]),\n  )\n}\n\nexport type ResolvedWebhookCustomHeaders =\n  | { ok: true; headers: Record<string, string>; keptStoredValues: string[] }\n  | { ok: false; header: string }\n\nfunction findStoredHeaderValue(name: string, stored: Record<string, string>): string | null {\n  if (Object.prototype.hasOwnProperty.call(stored, name)) return stored[name]\n  const normalized = name.trim().toLowerCase()\n  const matches = Object.keys(stored).filter((storedName) => storedName.trim().toLowerCase() === normalized)\n  return matches.length === 1 ? stored[matches[0]] : null\n}\n\nexport function resolveRedactedWebhookCustomHeaders(\n  next: Record<string, string>,\n  stored: Record<string, string> | null | undefined,\n): ResolvedWebhookCustomHeaders {\n  const headers: Record<string, string> = {}\n  const keptStoredValues: string[] = []\n  for (const [name, value] of Object.entries(next)) {\n    if (value !== WEBHOOK_REDACTED_HEADER_VALUE) {\n      headers[name] = value\n      continue\n    }\n    const storedValue = stored ? findStoredHeaderValue(name, stored) : null\n    if (storedValue === null || storedValue === WEBHOOK_REDACTED_HEADER_VALUE) return { ok: false, header: name }\n    headers[name] = storedValue\n    if (isCredentialWebhookHeader(name, storedValue)) keptStoredValues.push(name)\n  }\n  return { ok: true, headers, keptStoredValues }\n}\n\nexport type WebhookCustomHeadersUpdate =\n  | { ok: true; customHeaders: Record<string, string> | null | undefined }\n  | { ok: false; reason: 'redactedHeaderWithoutValue' | 'credentialHeadersRequireReentry'; header: string }\n\nexport function planWebhookCustomHeadersUpdate(input: {\n  current: { url: string; customHeaders?: Record<string, string> | null }\n  next: { url?: string; customHeaders?: Record<string, string> | null }\n  canRevealCredentials: boolean\n}): WebhookCustomHeadersUpdate {\n  const { current, next, canRevealCredentials } = input\n  let customHeaders: Record<string, string> | null | undefined = next.customHeaders\n  let keptCredentialHeaders: string[] = []\n\n  if (next.customHeaders === undefined) {\n    keptCredentialHeaders = Object.entries(current.customHeaders ?? {})\n      .filter(([name, value]) => isCredentialWebhookHeader(name, value))\n      .map(([name]) => name)\n  } else if (next.customHeaders !== null) {\n    const resolved = resolveRedactedWebhookCustomHeaders(next.customHeaders, current.customHeaders)\n    if (!resolved.ok) return { ok: false, reason: 'redactedHeaderWithoutValue', header: resolved.header }\n    customHeaders = resolved.headers\n    keptCredentialHeaders = resolved.keptStoredValues\n  }\n\n  const urlChanged = next.url !== undefined && next.url !== current.url\n  if (!canRevealCredentials && urlChanged && keptCredentialHeaders.length > 0) {\n    return { ok: false, reason: 'credentialHeadersRequireReentry', header: keptCredentialHeaders[0] }\n  }\n\n  return { ok: true, customHeaders }\n}\n"],
+  "mappings": "AAAA,MAAM,yBAAyB;AAC/B,MAAM,wBAAwB,oBAAI,IAAI,CAAC,cAAc,CAAC;AAE/C,SAAS,8BAA8B,MAAuB;AACnE,QAAM,aAAa,KAAK,KAAK,EAAE,YAAY;AAC3C,SAAO,WAAW,WAAW,sBAAsB,KAAK,sBAAsB,IAAI,UAAU;AAC9F;AAEO,SAAS,6BACd,eACwB;AACxB,MAAI,CAAC,cAAe,QAAO,CAAC;AAC5B,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,8BAA8B,IAAI,CAAC;AAAA,EACvF;AACF;AAEO,MAAM,gCAAgC;AAE7C,MAAM,iCAAiC;AACvC,MAAM,kCAAkC;AAEjC,SAAS,0BAA0B,MAAc,OAAgC;AACtF,MAAI,+BAA+B,KAAK,KAAK,KAAK,CAAC,EAAG,QAAO;AAC7D,SAAO,OAAO,UAAU,YAAY,gCAAgC,KAAK,MAAM,KAAK,CAAC;AACvF;AAEO,SAAS,2BACd,eAC+B;AAC/B,MAAI,CAAC,cAAe,QAAO;AAC3B,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,aAAa,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;AAAA,MACnD;AAAA,MACA,0BAA0B,MAAM,KAAK,IAAI,gCAAgC;AAAA,IAC3E,CAAC;AAAA,EACH;AACF;AAMA,SAAS,sBAAsB,MAAc,QAA+C;AAC1F,MAAI,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,EAAG,QAAO,OAAO,IAAI;AAC1E,QAAM,aAAa,KAAK,KAAK,EAAE,YAAY;AAC3C,QAAM,UAAU,OAAO,KAAK,MAAM,EAAE,OAAO,CAAC,eAAe,WAAW,KAAK,EAAE,YAAY,MAAM,UAAU;AACzG,SAAO,QAAQ,WAAW,IAAI,OAAO,QAAQ,CAAC,CAAC,IAAI;AACrD;AAEO,SAAS,oCACd,MACA,QAC8B;AAC9B,QAAM,UAAkC,CAAC;AACzC,QAAM,mBAA6B,CAAC;AACpC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAChD,QAAI,UAAU,+BAA+B;AAC3C,cAAQ,IAAI,IAAI;AAChB;AAAA,IACF;AACA,UAAM,cAAc,SAAS,sBAAsB,MAAM,MAAM,IAAI;AACnE,QAAI,gBAAgB,QAAQ,gBAAgB,8BAA+B,QAAO,EAAE,IAAI,OAAO,QAAQ,KAAK;AAC5G,YAAQ,IAAI,IAAI;AAChB,QAAI,0BAA0B,MAAM,WAAW,EAAG,kBAAiB,KAAK,IAAI;AAAA,EAC9E;AACA,SAAO,EAAE,IAAI,MAAM,SAAS,iBAAiB;AAC/C;AAMO,SAAS,+BAA+B,OAIhB;AAC7B,QAAM,EAAE,SAAS,MAAM,qBAAqB,IAAI;AAChD,MAAI,gBAA2D,KAAK;AACpE,MAAI,wBAAkC,CAAC;AAEvC,MAAI,KAAK,kBAAkB,QAAW;AACpC,4BAAwB,OAAO,QAAQ,QAAQ,iBAAiB,CAAC,CAAC,EAC/D,OAAO,CAAC,CAAC,MAAM,KAAK,MAAM,0BAA0B,MAAM,KAAK,CAAC,EAChE,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI;AAAA,EACzB,WAAW,KAAK,kBAAkB,MAAM;AACtC,UAAM,WAAW,oCAAoC,KAAK,eAAe,QAAQ,aAAa;AAC9F,QAAI,CAAC,SAAS,GAAI,QAAO,EAAE,IAAI,OAAO,QAAQ,8BAA8B,QAAQ,SAAS,OAAO;AACpG,oBAAgB,SAAS;AACzB,4BAAwB,SAAS;AAAA,EACnC;AAEA,QAAM,aAAa,KAAK,QAAQ,UAAa,KAAK,QAAQ,QAAQ;AAClE,MAAI,CAAC,wBAAwB,cAAc,sBAAsB,SAAS,GAAG;AAC3E,WAAO,EAAE,IAAI,OAAO,QAAQ,mCAAmC,QAAQ,sBAAsB,CAAC,EAAE;AAAA,EAClG;AAEA,SAAO,EAAE,IAAI,MAAM,cAAc;AACnC;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/webhooks",
-  "version": "0.10.1-develop.7618.1.ba9531c18e",
+  "version": "0.10.1-develop.7619.1.97f9a4bda8",
   "license": "MIT",
   "description": "Webhooks module for Open Mercato — Standard Webhooks compliant outbound/inbound delivery",
   "type": "module",
@@ -70,20 +70,20 @@
     }
   },
   "dependencies": {
-    "@open-mercato/cache": "0.10.1-develop.7618.1.ba9531c18e",
-    "@open-mercato/core": "0.10.1-develop.7618.1.ba9531c18e",
-    "@open-mercato/queue": "0.10.1-develop.7618.1.ba9531c18e",
-    "@open-mercato/ui": "0.10.1-develop.7618.1.ba9531c18e",
+    "@open-mercato/cache": "0.10.1-develop.7619.1.97f9a4bda8",
+    "@open-mercato/core": "0.10.1-develop.7619.1.97f9a4bda8",
+    "@open-mercato/queue": "0.10.1-develop.7619.1.97f9a4bda8",
+    "@open-mercato/ui": "0.10.1-develop.7619.1.97f9a4bda8",
     "svix": "^1.99.1"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/shared": "0.10.1-develop.7618.1.ba9531c18e",
+    "@open-mercato/shared": "0.10.1-develop.7619.1.97f9a4bda8",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.10.1-develop.7618.1.ba9531c18e",
+    "@open-mercato/shared": "0.10.1-develop.7619.1.97f9a4bda8",
     "@types/jest": "^30.0.0",
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.5",

package/src/modules/webhooks/__integration__/TC-WEBHOOK-013.spec.ts

@@ -0,0 +1,231 @@
+import { expect, test, type Page } from '@playwright/test';
+import { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api';
+import { getTokenScope } from '@open-mercato/core/helpers/integration/generalFixtures';
+import {
+  cleanupWebhooksUser,
+  createWebhookFixture,
+  deleteWebhookIfExists,
+  provisionWebhooksUser,
+  type ProvisionedWebhooksUser,
+} from './helpers/fixtures';
+
+/**
+ * TC-WEBHOOK-013: credential-like custom header values are hidden from callers without webhooks.secrets
+ * Source: https://github.com/open-mercato/open-mercato/issues/7237
+ *
+ * A viewer (webhooks.view) and a manager without webhooks.secrets receive `••••••••` for
+ * credential-like custom headers, while ordinary headers stay readable and an admin
+ * (webhooks.*) still receives the stored values. Echoing the marker back keeps the stored
+ * value, a marker without a stored value is refused, and a manager without webhooks.secrets
+ * cannot keep hidden values while changing the webhook URL.
+ */
+
+const REDACTED = '••••••••';
+const DESTINATION_TOKEN = 'Bearer tc-webhook-013-destination-token';
+
+type WebhookDetail = { name: string; url: string; customHeaders: Record<string, string> | null };
+
+async function readDetail(request: Parameters<typeof apiRequest>[0], token: string, id: string): Promise<WebhookDetail> {
+  const response = await apiRequest(request, 'GET', `/api/webhooks/${id}`, { token });
+  expect(response.status()).toBe(200);
+  return (await response.json()) as WebhookDetail;
+}
+
+async function loginWithCredentials(page: Page, email: string, password: string): Promise<void> {
+  const baseUrl = process.env.BASE_URL || 'http://localhost:3000';
+  await page.context().addCookies([
+    { name: 'om_demo_notice_ack', value: 'ack', url: baseUrl, sameSite: 'Lax' },
+    { name: 'om_cookie_notice_ack', value: 'ack', url: baseUrl, sameSite: 'Lax' },
+    { name: 'om_feedback_suppress', value: '1', url: baseUrl, sameSite: 'Lax' },
+  ]);
+  await page.goto('/login');
+  await page.waitForSelector('form[data-auth-ready="1"]', { state: 'visible', timeout: 30_000 });
+  await page.getByLabel('Email').fill(email);
+  const passwordInput = page.getByLabel('Password', { exact: true });
+  await passwordInput.fill(password);
+  await passwordInput.press('Enter');
+  await expect(page).toHaveURL(/\/backend(?:\/.*)?$/, { timeout: 30_000 });
+}
+
+test.describe('TC-WEBHOOK-013: credential custom headers are hidden without webhooks.secrets', () => {
+  test('redacts on read, keeps stored values on write, and refuses unsafe writes', async ({ request }) => {
+    test.setTimeout(60_000);
+    const adminToken = await getAuthToken(request);
+    const scope = getTokenScope(adminToken);
+
+    let webhookId: string | null = null;
+    let viewer: ProvisionedWebhooksUser | null = null;
+    let manager: ProvisionedWebhooksUser | null = null;
+
+    try {
+      viewer = await provisionWebhooksUser(request, adminToken, {
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        features: ['webhooks.view'],
+        slug: 'cred-viewer',
+      });
+      manager = await provisionWebhooksUser(request, adminToken, {
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        features: ['webhooks.view', 'webhooks.manage'],
+        slug: 'cred-manager',
+      });
+
+      const created = await createWebhookFixture(request, adminToken, {
+        name: `Webhook credential headers ${Date.now()}`,
+        url: 'https://example.com/tc-webhook-013',
+        subscribedEvents: ['catalog.product.created'],
+        customHeaders: { Authorization: DESTINATION_TOKEN, 'x-api-key': 'tc-013-api-key', 'x-source': 'qa' },
+      });
+      webhookId = created.id;
+
+      const viewerDetail = await readDetail(request, viewer.token, created.id);
+      expect(viewerDetail.customHeaders).toEqual({ Authorization: REDACTED, 'x-api-key': REDACTED, 'x-source': 'qa' });
+
+      const aliasResponse = await apiRequest(request, 'GET', `/api/webhooks/webhooks/${created.id}`, { token: viewer.token });
+      expect(aliasResponse.status()).toBe(200);
+      expect(((await aliasResponse.json()) as WebhookDetail).customHeaders?.Authorization).toBe(REDACTED);
+
+      const managerDetail = await readDetail(request, manager.token, created.id);
+      expect(managerDetail.customHeaders?.Authorization).toBe(REDACTED);
+
+      const adminDetail = await readDetail(request, adminToken, created.id);
+      expect(adminDetail.customHeaders).toEqual({ Authorization: DESTINATION_TOKEN, 'x-api-key': 'tc-013-api-key', 'x-source': 'qa' });
+
+      const renamed = `Webhook credential headers renamed ${Date.now()}`;
+      const echoUpdate = await apiRequest(request, 'PUT', `/api/webhooks/${created.id}`, {
+        token: manager.token,
+        data: { name: renamed, customHeaders: { ...managerDetail.customHeaders, 'x-source': 'erp' } },
+      });
+      expect(echoUpdate.status()).toBe(200);
+      expect(((await echoUpdate.json()) as WebhookDetail).customHeaders?.Authorization).toBe(REDACTED);
+
+      const afterEcho = await readDetail(request, adminToken, created.id);
+      expect(afterEcho.name).toBe(renamed);
+      expect(afterEcho.customHeaders).toEqual({ Authorization: DESTINATION_TOKEN, 'x-api-key': 'tc-013-api-key', 'x-source': 'erp' });
+
+      const orphanMarker = await apiRequest(request, 'PUT', `/api/webhooks/${created.id}`, {
+        token: manager.token,
+        data: { customHeaders: { 'x-new-token': REDACTED } },
+      });
+      expect(orphanMarker.status()).toBe(400);
+      expect(((await orphanMarker.json()) as { error: string }).error).toContain('x-new-token');
+
+      const moveWithHidden = await apiRequest(request, 'PUT', `/api/webhooks/${created.id}`, {
+        token: manager.token,
+        data: { url: 'https://other.example.net/tc-webhook-013' },
+      });
+      expect(moveWithHidden.status()).toBe(400);
+
+      const moveEchoingMarker = await apiRequest(request, 'PUT', `/api/webhooks/webhooks/${created.id}`, {
+        token: manager.token,
+        data: { url: 'https://other.example.net/tc-webhook-013', customHeaders: managerDetail.customHeaders },
+      });
+      expect(moveEchoingMarker.status()).toBe(400);
+
+      const samePathMove = await apiRequest(request, 'PUT', `/api/webhooks/${created.id}`, {
+        token: manager.token,
+        data: { url: 'https://example.com/tc-webhook-013-other-bin', customHeaders: managerDetail.customHeaders },
+      });
+      expect(samePathMove.status()).toBe(400);
+
+      const unchanged = await readDetail(request, adminToken, created.id);
+      expect(unchanged.url).toBe('https://example.com/tc-webhook-013');
+      expect(unchanged.customHeaders).toEqual(afterEcho.customHeaders);
+
+      const moveReentered = await apiRequest(request, 'PUT', `/api/webhooks/${created.id}`, {
+        token: manager.token,
+        data: {
+          url: 'https://other.example.net/tc-webhook-013',
+          customHeaders: { Authorization: 'Bearer re-entered', 'x-source': 'erp' },
+        },
+      });
+      expect(moveReentered.status()).toBe(200);
+
+      const adminMove = await apiRequest(request, 'PUT', `/api/webhooks/${created.id}`, {
+        token: adminToken,
+        data: { url: 'https://example.com/tc-webhook-013', customHeaders: { Authorization: REDACTED, 'x-source': 'erp' } },
+      });
+      expect(adminMove.status()).toBe(200);
+      expect(((await adminMove.json()) as WebhookDetail).customHeaders).toEqual({ Authorization: 'Bearer re-entered', 'x-source': 'erp' });
+    } finally {
+      await deleteWebhookIfExists(request, adminToken, webhookId);
+      await cleanupWebhooksUser(request, adminToken, viewer);
+      await cleanupWebhooksUser(request, adminToken, manager);
+    }
+  });
+
+  test('shows hidden values in the UI and keeps them when a manager saves the edit form', async ({ browser, request }) => {
+    test.setTimeout(120_000);
+    const adminToken = await getAuthToken(request);
+    const scope = getTokenScope(adminToken);
+
+    let webhookId: string | null = null;
+    let viewer: ProvisionedWebhooksUser | null = null;
+    let manager: ProvisionedWebhooksUser | null = null;
+
+    try {
+      viewer = await provisionWebhooksUser(request, adminToken, {
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        features: ['webhooks.view'],
+        slug: 'cred-ui-viewer',
+      });
+      manager = await provisionWebhooksUser(request, adminToken, {
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationId,
+        features: ['webhooks.view', 'webhooks.manage'],
+        slug: 'cred-ui-manager',
+      });
+
+      const created = await createWebhookFixture(request, adminToken, {
+        name: `Webhook credential UI ${Date.now()}`,
+        url: 'https://example.com/tc-webhook-013-ui',
+        subscribedEvents: ['catalog.product.created'],
+        customHeaders: { Authorization: DESTINATION_TOKEN, 'x-source': 'qa' },
+      });
+      webhookId = created.id;
+
+      const viewerContext = await browser.newContext();
+      try {
+        const viewerPage = await viewerContext.newPage();
+        await loginWithCredentials(viewerPage, viewer.email, viewer.password);
+        await viewerPage.goto(`/backend/webhooks/${created.id}`);
+        const headersCard = viewerPage.locator('pre').filter({ hasText: '"x-source": "qa"' });
+        await expect(headersCard).toContainText(`"Authorization": "${REDACTED}"`);
+        await expect(viewerPage.getByText(DESTINATION_TOKEN)).toHaveCount(0);
+      } finally {
+        await viewerContext.close();
+      }
+
+      const renamed = `Webhook credential UI renamed ${Date.now()}`;
+      const managerContext = await browser.newContext();
+      try {
+        const managerPage = await managerContext.newPage();
+        await loginWithCredentials(managerPage, manager.email, manager.password);
+        await managerPage.goto(`/backend/webhooks/${created.id}`);
+        await expect(managerPage.locator('pre').filter({ hasText: '"x-source": "qa"' })).toContainText(REDACTED);
+        await managerPage.getByRole('button', { name: 'Actions' }).hover();
+        await managerPage.getByRole('menuitem', { name: 'Edit' }).click();
+        await expect(managerPage.getByText(`Hidden values (${REDACTED}) are kept when you save`)).toBeVisible();
+        await expect(managerPage.getByText(DESTINATION_TOKEN)).toHaveCount(0);
+        await expect(managerPage.getByPlaceholder('{"key": "value"}')).toHaveValue(new RegExp(`"Authorization": "${REDACTED}"`));
+        const nameInput = managerPage.getByPlaceholder('My Webhook');
+        await nameInput.fill(renamed);
+        await expect(nameInput).toHaveValue(renamed);
+        await managerPage.getByRole('button', { name: 'Save' }).first().click();
+        await expect(managerPage.locator('pre').filter({ hasText: '"x-source": "qa"' })).toBeVisible({ timeout: 15_000 });
+      } finally {
+        await managerContext.close();
+      }
+
+      const adminDetail = await readDetail(request, adminToken, created.id);
+      expect(adminDetail.name).toBe(renamed);
+      expect(adminDetail.customHeaders).toEqual({ Authorization: DESTINATION_TOKEN, 'x-source': 'qa' });
+    } finally {
+      await deleteWebhookIfExists(request, adminToken, webhookId);
+      await cleanupWebhooksUser(request, adminToken, viewer);
+      await cleanupWebhooksUser(request, adminToken, manager);
+    }
+  });
+});

package/src/modules/webhooks/api/helpers.ts

@@ -1,11 +1,14 @@
 import type { EntityManager } from '@mikro-orm/postgresql'
 import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
 import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import type { AuthContext } from '@open-mercato/shared/lib/auth/server'
+import type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'
 import { resolveSingleOrganizationIdOrDeny } from '@open-mercato/shared/lib/auth/organizationScope'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'
 import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
 import { WebhookDeliveryEntity, WebhookEntity } from '../data/entities'
+import { redactWebhookCustomHeaders, type WebhookCustomHeadersUpdate } from '../lib/custom-headers'
 
 export type WebhookRequestScope = {
   container: Awaited<ReturnType<typeof createRequestContainer>>
@@ -13,6 +16,7 @@ export type WebhookRequestScope = {
   tenantId: string
   organizationId: string | null
   allowedOrganizationIds: string[] | null
+  auth?: AuthContext
 }
 
 export function json(payload: unknown, init: ResponseInit = { status: 200 }): Response {
@@ -46,9 +50,23 @@ export async function resolveWebhookRequestScope(request: Request): Promise<Webh
     tenantId,
     organizationId,
     allowedOrganizationIds,
+    auth,
   }
 }
 
+export async function canRevealWebhookCredentialHeaders(
+  container: WebhookRequestScope['container'],
+  auth: AuthContext | undefined,
+  webhook: Pick<WebhookEntity, 'tenantId' | 'organizationId'>,
+): Promise<boolean> {
+  if (!auth?.sub) return false
+  const rbacService = container.resolve('rbacService') as RbacService
+  return rbacService.userHasAllFeatures(auth.sub, ['webhooks.secrets'], {
+    tenantId: webhook.tenantId,
+    organizationId: webhook.organizationId,
+  })
+}
+
 export async function findScopedWebhook(
   em: EntityManager,
   scope: Pick<WebhookRequestScope, 'tenantId' | 'organizationId' | 'allowedOrganizationIds'>,
@@ -91,6 +109,24 @@ export async function findScopedDelivery(
   return delivery
 }
 
+export async function translateWebhookCustomHeadersRejection(
+  rejection: Extract<WebhookCustomHeadersUpdate, { ok: false }>,
+): Promise<string> {
+  const { translate } = await resolveTranslations()
+  if (rejection.reason === 'credentialHeadersRequireReentry') {
+    return translate(
+      'webhooks.errors.credentialHeadersRequireReentry',
+      'Header "{header}" has a hidden value. Enter it again or remove it when you change the webhook URL.',
+      { header: rejection.header },
+    )
+  }
+  return translate(
+    'webhooks.errors.redactedHeaderWithoutValue',
+    'Header "{header}" has a hidden value but no saved value to keep. Enter the header value.',
+    { header: rejection.header },
+  )
+}
+
 export function serializeWebhookListItem(item: WebhookEntity) {
   return {
     id: item.id,
@@ -110,10 +146,15 @@ export function serializeWebhookListItem(item: WebhookEntity) {
   }
 }
 
-export function serializeWebhookDetail(item: WebhookEntity) {
+export function serializeWebhookDetail(
+  item: WebhookEntity,
+  options: { revealCredentialHeaders?: boolean } = {},
+) {
   return {
     ...serializeWebhookListItem(item),
-    customHeaders: item.customHeaders ?? null,
+    customHeaders: options.revealCredentialHeaders
+      ? item.customHeaders ?? null
+      : redactWebhookCustomHeaders(item.customHeaders),
     strategyConfig: item.strategyConfig ?? null,
     timeoutMs: item.timeoutMs,
     rateLimitPerMinute: item.rateLimitPerMinute,