@open-mercato/webhooks 0.5.1-develop.2672.g2128128275 → 0.5.1-develop.2681.c559bb2bc3

package/dist/modules/webhooks/api/events/route.js

@@ -18,7 +18,7 @@ const eventsResponseSchema = z.object({
   total: z.number().int().nonnegative()
 });
 async function GET() {
-  const events = getDeclaredEvents().filter((event) => !event.id.startsWith("webhooks.")).sort((left, right) => left.id.localeCompare(right.id));
+  const events = getDeclaredEvents().filter((event) => !event.id.startsWith("webhooks.") && !event.excludeFromTriggers).sort((left, right) => left.id.localeCompare(right.id));
   return json({
     data: events,
     total: events.length

package/dist/modules/webhooks/api/events/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/webhooks/api/events/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getDeclaredEvents } from '@open-mercato/shared/modules/events'\nimport { json } from '../helpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['webhooks.view'] },\n}\n\nconst eventDefinitionSchema = z.object({\n  id: z.string(),\n  label: z.string(),\n  description: z.string().optional(),\n  category: z.enum(['crud', 'lifecycle', 'system', 'custom']).optional(),\n  module: z.string().optional(),\n  entity: z.string().optional(),\n  excludeFromTriggers: z.boolean().optional(),\n})\n\nconst eventsResponseSchema = z.object({\n  data: z.array(eventDefinitionSchema),\n  total: z.number().int().nonnegative(),\n})\n\nexport async function GET(): Promise<Response> {\n  const events = getDeclaredEvents()\n    .filter((event) => !event.id.startsWith('webhooks.'))\n    .sort((left, right) => left.id.localeCompare(right.id))\n\n  return json({\n    data: events,\n    total: events.length,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'List available webhook events',\n  description: 'Returns all declared platform events that can be subscribed to by webhook endpoints.',\n  methods: {\n    GET: {\n      summary: 'List webhook events',\n      description: 'Returns all declared non-webhook events, sorted by event id.',\n      responses: [{ status: 200, description: 'Available events', schema: eventsResponseSchema }],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,yBAAyB;AAClC,SAAS,YAAY;AAEd,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO;AAAA,EAChB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EAAE,KAAK,CAAC,QAAQ,aAAa,UAAU,QAAQ,CAAC,EAAE,SAAS;AAAA,EACrE,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,qBAAqB,EAAE,QAAQ,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,MAAM,qBAAqB;AAAA,EACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AACtC,CAAC;AAED,eAAsB,MAAyB;AAC7C,QAAM,SAAS,kBAAkB,EAC9B,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,WAAW,WAAW,CAAC,EACnD,KAAK,CAAC,MAAM,UAAU,KAAK,GAAG,cAAc,MAAM,EAAE,CAAC;AAExD,SAAO,KAAK;AAAA,IACV,MAAM;AAAA,IACN,OAAO,OAAO;AAAA,EAChB,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,qBAAqB,CAAC;AAAA,IAC5F;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getDeclaredEvents } from '@open-mercato/shared/modules/events'\nimport { json } from '../helpers'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['webhooks.view'] },\n}\n\nconst eventDefinitionSchema = z.object({\n  id: z.string(),\n  label: z.string(),\n  description: z.string().optional(),\n  category: z.enum(['crud', 'lifecycle', 'system', 'custom']).optional(),\n  module: z.string().optional(),\n  entity: z.string().optional(),\n  excludeFromTriggers: z.boolean().optional(),\n})\n\nconst eventsResponseSchema = z.object({\n  data: z.array(eventDefinitionSchema),\n  total: z.number().int().nonnegative(),\n})\n\nexport async function GET(): Promise<Response> {\n  const events = getDeclaredEvents()\n    .filter((event) => !event.id.startsWith('webhooks.') && !event.excludeFromTriggers)\n    .sort((left, right) => left.id.localeCompare(right.id))\n\n  return json({\n    data: events,\n    total: events.length,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'List available webhook events',\n  description: 'Returns all declared platform events that can be subscribed to by webhook endpoints.',\n  methods: {\n    GET: {\n      summary: 'List webhook events',\n      description: 'Returns all declared non-webhook events, sorted by event id.',\n      responses: [{ status: 200, description: 'Available events', schema: eventsResponseSchema }],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,yBAAyB;AAClC,SAAS,YAAY;AAEd,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO;AAAA,EAChB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,UAAU,EAAE,KAAK,CAAC,QAAQ,aAAa,UAAU,QAAQ,CAAC,EAAE,SAAS;AAAA,EACrE,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,qBAAqB,EAAE,QAAQ,EAAE,SAAS;AAC5C,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,MAAM,qBAAqB;AAAA,EACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AACtC,CAAC;AAED,eAAsB,MAAyB;AAC7C,QAAM,SAAS,kBAAkB,EAC9B,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,WAAW,WAAW,KAAK,CAAC,MAAM,mBAAmB,EACjF,KAAK,CAAC,MAAM,UAAU,KAAK,GAAG,cAAc,MAAM,EAAE,CAAC;AAExD,SAAO,KAAK;AAAA,IACV,MAAM;AAAA,IACN,OAAO,OAAO;AAAA,EAChB,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,qBAAqB,CAAC;AAAA,IAC5F;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/webhooks/subscribers/outbound-dispatch.js

@@ -1,6 +1,7 @@
 import { WebhookDeliveryEntity, WebhookEntity } from "../data/entities.js";
 import { findWithDecryption, findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { matchAnyWebhookEventPattern } from "@open-mercato/shared/lib/events/patterns";
+import { getDeclaredEvents } from "@open-mercato/shared/modules/events";
 import { createWebhookDelivery } from "../lib/delivery.js";
 import { enqueueWebhookDelivery } from "../lib/queue.js";
 import { isWebhookIntegrationEnabled } from "../lib/integration-state.js";
@@ -9,9 +10,15 @@ const metadata = {
   persistent: true,
   id: "webhooks:outbound-dispatch"
 };
+function shouldSkipOutboundDispatch(eventId) {
+  if (eventId.startsWith("webhooks.") || eventId.startsWith("application.")) return true;
+  const declaredEvent = getDeclaredEvents().find((event) => event.id === eventId);
+  return declaredEvent?.excludeFromTriggers === true;
+}
 async function handler(payload, ctx) {
   const eventId = ctx.eventId ?? ctx.eventName ?? payload.eventId ?? payload.type;
   if (!eventId) return;
+  if (shouldSkipOutboundDispatch(eventId)) return;
   const tenantId = payload.tenantId;
   const organizationId = payload.organizationId;
   if (!tenantId) return;

package/dist/modules/webhooks/subscribers/outbound-dispatch.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/webhooks/subscribers/outbound-dispatch.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { SubscriberContext } from '@open-mercato/events/types'\nimport { WebhookDeliveryEntity, WebhookEntity } from '../data/entities'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { matchAnyWebhookEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport { createWebhookDelivery } from '../lib/delivery'\nimport { enqueueWebhookDelivery } from '../lib/queue'\nimport { isWebhookIntegrationEnabled } from '../lib/integration-state'\n\nexport const metadata = {\n  event: '*',\n  persistent: true,\n  id: 'webhooks:outbound-dispatch',\n}\n\nexport default async function handler(\n  payload: Record<string, unknown>,\n  ctx: (SubscriberContext & { eventId?: string }) | { container?: { resolve: <T = unknown>(name: string) => T }; eventId?: string; eventName?: string; resolve?: <T = unknown>(name: string) => T },\n) {\n  const eventId = ctx.eventId ?? ctx.eventName ?? (payload.eventId as string) ?? (payload.type as string)\n  if (!eventId) return\n\n  const tenantId = payload.tenantId as string | undefined\n  const organizationId = payload.organizationId as string | undefined\n  if (!tenantId) return\n\n  if (eventId.startsWith('webhooks.')) return\n  if (eventId.startsWith('query_index.')) return\n\n  const resolve = ('resolve' in ctx && typeof ctx.resolve === 'function')\n    ? ctx.resolve\n    : ('container' in ctx && ctx.container && typeof ctx.container.resolve === 'function')\n      ? ctx.container.resolve.bind(ctx.container)\n      : null\n\n  if (!resolve) return\n\n  const em = (resolve('em') as EntityManager).fork()\n\n  const webhooks = await findWithDecryption(\n    em,\n    WebhookEntity,\n    {\n      isActive: true,\n      deletedAt: null,\n      tenantId,\n      ...(organizationId ? { organizationId } : {}),\n    },\n    {},\n    { tenantId, organizationId: organizationId ?? '' },\n  )\n\n  if (!webhooks.length) return\n\n  const matchingWebhooks = webhooks.filter((webhook) =>\n    matchAnyWebhookEventPattern(eventId, webhook.subscribedEvents),\n  )\n\n  if (!matchingWebhooks.length) return\n\n  for (const webhook of matchingWebhooks) {\n    const integrationEnabled = await isWebhookIntegrationEnabled(em, {\n      tenantId: webhook.tenantId,\n      organizationId: webhook.organizationId,\n    })\n\n    if (!integrationEnabled) continue\n\n    let createdDeliveryId: string | null = null\n    try {\n      const delivery = await createWebhookDelivery({\n        em,\n        webhook,\n        eventId,\n        payload,\n      })\n      createdDeliveryId = delivery.id\n\n      await enqueueWebhookDelivery({\n        deliveryId: delivery.id,\n        tenantId: delivery.tenantId,\n        organizationId: delivery.organizationId,\n      })\n    } catch (error) {\n      if (createdDeliveryId) {\n        const failedDelivery = await findOneWithDecryption(em, WebhookDeliveryEntity, { id: createdDeliveryId, tenantId: webhook.tenantId, organizationId: webhook.organizationId }, undefined, { tenantId: webhook.tenantId, organizationId: webhook.organizationId })\n        if (failedDelivery) {\n          failedDelivery.status = 'failed'\n          failedDelivery.errorMessage = error instanceof Error ? `Queue enqueue failed: ${error.message}` : 'Queue enqueue failed'\n          failedDelivery.nextRetryAt = null\n          await em.flush()\n        }\n      }\n      console.error('[webhooks] Failed to enqueue outbound delivery', {\n        webhookId: webhook.id,\n        eventId,\n        tenantId,\n        organizationId: organizationId ?? webhook.organizationId,\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,uBAAuB,qBAAqB;AACrD,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,mCAAmC;AAC5C,SAAS,6BAA6B;AACtC,SAAS,8BAA8B;AACvC,SAAS,mCAAmC;AAErC,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,eAAO,QACL,SACA,KACA;AACA,QAAM,UAAU,IAAI,WAAW,IAAI,aAAc,QAAQ,WAAuB,QAAQ;AACxF,MAAI,CAAC,QAAS;AAEd,QAAM,WAAW,QAAQ;AACzB,QAAM,iBAAiB,QAAQ;AAC/B,MAAI,CAAC,SAAU;AAEf,MAAI,QAAQ,WAAW,WAAW,EAAG;AACrC,MAAI,QAAQ,WAAW,cAAc,EAAG;AAExC,QAAM,UAAW,aAAa,OAAO,OAAO,IAAI,YAAY,aACxD,IAAI,UACH,eAAe,OAAO,IAAI,aAAa,OAAO,IAAI,UAAU,YAAY,aACvE,IAAI,UAAU,QAAQ,KAAK,IAAI,SAAS,IACxC;AAEN,MAAI,CAAC,QAAS;AAEd,QAAM,KAAM,QAAQ,IAAI,EAAoB,KAAK;AAEjD,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,WAAW;AAAA,MACX;AAAA,MACA,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,IAC7C;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,gBAAgB,kBAAkB,GAAG;AAAA,EACnD;AAEA,MAAI,CAAC,SAAS,OAAQ;AAEtB,QAAM,mBAAmB,SAAS;AAAA,IAAO,CAAC,YACxC,4BAA4B,SAAS,QAAQ,gBAAgB;AAAA,EAC/D;AAEA,MAAI,CAAC,iBAAiB,OAAQ;AAE9B,aAAW,WAAW,kBAAkB;AACtC,UAAM,qBAAqB,MAAM,4BAA4B,IAAI;AAAA,MAC/D,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AAED,QAAI,CAAC,mBAAoB;AAEzB,QAAI,oBAAmC;AACvC,QAAI;AACF,YAAM,WAAW,MAAM,sBAAsB;AAAA,QAC3C;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,0BAAoB,SAAS;AAE7B,YAAM,uBAAuB;AAAA,QAC3B,YAAY,SAAS;AAAA,QACrB,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,mBAAmB;AACrB,cAAM,iBAAiB,MAAM,sBAAsB,IAAI,uBAAuB,EAAE,IAAI,mBAAmB,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe,GAAG,QAAW,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe,CAAC;AAC9P,YAAI,gBAAgB;AAClB,yBAAe,SAAS;AACxB,yBAAe,eAAe,iBAAiB,QAAQ,yBAAyB,MAAM,OAAO,KAAK;AAClG,yBAAe,cAAc;AAC7B,gBAAM,GAAG,MAAM;AAAA,QACjB;AAAA,MACF;AACA,cAAQ,MAAM,kDAAkD;AAAA,QAC9D,WAAW,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,QACA,gBAAgB,kBAAkB,QAAQ;AAAA,QAC1C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { SubscriberContext } from '@open-mercato/events/types'\nimport { WebhookDeliveryEntity, WebhookEntity } from '../data/entities'\nimport { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { matchAnyWebhookEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport { getDeclaredEvents } from '@open-mercato/shared/modules/events'\nimport { createWebhookDelivery } from '../lib/delivery'\nimport { enqueueWebhookDelivery } from '../lib/queue'\nimport { isWebhookIntegrationEnabled } from '../lib/integration-state'\n\nexport const metadata = {\n  event: '*',\n  persistent: true,\n  id: 'webhooks:outbound-dispatch',\n}\n\nfunction shouldSkipOutboundDispatch(eventId: string): boolean {\n  if (eventId.startsWith('webhooks.') || eventId.startsWith('application.')) return true\n\n  const declaredEvent = getDeclaredEvents().find((event) => event.id === eventId)\n  return declaredEvent?.excludeFromTriggers === true\n}\n\nexport default async function handler(\n  payload: Record<string, unknown>,\n  ctx: (SubscriberContext & { eventId?: string }) | { container?: { resolve: <T = unknown>(name: string) => T }; eventId?: string; eventName?: string; resolve?: <T = unknown>(name: string) => T },\n) {\n  const eventId = ctx.eventId ?? ctx.eventName ?? (payload.eventId as string) ?? (payload.type as string)\n  if (!eventId) return\n  if (shouldSkipOutboundDispatch(eventId)) return\n\n  const tenantId = payload.tenantId as string | undefined\n  const organizationId = payload.organizationId as string | undefined\n  if (!tenantId) return\n\n  if (eventId.startsWith('webhooks.')) return\n  if (eventId.startsWith('query_index.')) return\n\n\n  const resolve = ('resolve' in ctx && typeof ctx.resolve === 'function')\n    ? ctx.resolve\n    : ('container' in ctx && ctx.container && typeof ctx.container.resolve === 'function')\n      ? ctx.container.resolve.bind(ctx.container)\n      : null\n\n  if (!resolve) return\n\n  const em = (resolve('em') as EntityManager).fork()\n\n  const webhooks = await findWithDecryption(\n    em,\n    WebhookEntity,\n    {\n      isActive: true,\n      deletedAt: null,\n      tenantId,\n      ...(organizationId ? { organizationId } : {}),\n    },\n    {},\n    { tenantId, organizationId: organizationId ?? '' },\n  )\n\n  if (!webhooks.length) return\n\n  const matchingWebhooks = webhooks.filter((webhook) =>\n    matchAnyWebhookEventPattern(eventId, webhook.subscribedEvents),\n  )\n\n  if (!matchingWebhooks.length) return\n\n  for (const webhook of matchingWebhooks) {\n    const integrationEnabled = await isWebhookIntegrationEnabled(em, {\n      tenantId: webhook.tenantId,\n      organizationId: webhook.organizationId,\n    })\n\n    if (!integrationEnabled) continue\n\n    let createdDeliveryId: string | null = null\n    try {\n      const delivery = await createWebhookDelivery({\n        em,\n        webhook,\n        eventId,\n        payload,\n      })\n      createdDeliveryId = delivery.id\n\n      await enqueueWebhookDelivery({\n        deliveryId: delivery.id,\n        tenantId: delivery.tenantId,\n        organizationId: delivery.organizationId,\n      })\n    } catch (error) {\n      if (createdDeliveryId) {\n        const failedDelivery = await findOneWithDecryption(em, WebhookDeliveryEntity, { id: createdDeliveryId, tenantId: webhook.tenantId, organizationId: webhook.organizationId }, undefined, { tenantId: webhook.tenantId, organizationId: webhook.organizationId })\n        if (failedDelivery) {\n          failedDelivery.status = 'failed'\n          failedDelivery.errorMessage = error instanceof Error ? `Queue enqueue failed: ${error.message}` : 'Queue enqueue failed'\n          failedDelivery.nextRetryAt = null\n          await em.flush()\n        }\n      }\n      console.error('[webhooks] Failed to enqueue outbound delivery', {\n        webhookId: webhook.id,\n        eventId,\n        tenantId,\n        organizationId: organizationId ?? webhook.organizationId,\n        error: error instanceof Error ? error.message : String(error),\n      })\n    }\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,uBAAuB,qBAAqB;AACrD,SAAS,oBAAoB,6BAA6B;AAC1D,SAAS,mCAAmC;AAC5C,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AACtC,SAAS,8BAA8B;AACvC,SAAS,mCAAmC;AAErC,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAEA,SAAS,2BAA2B,SAA0B;AAC5D,MAAI,QAAQ,WAAW,WAAW,KAAK,QAAQ,WAAW,cAAc,EAAG,QAAO;AAElF,QAAM,gBAAgB,kBAAkB,EAAE,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO;AAC9E,SAAO,eAAe,wBAAwB;AAChD;AAEA,eAAO,QACL,SACA,KACA;AACA,QAAM,UAAU,IAAI,WAAW,IAAI,aAAc,QAAQ,WAAuB,QAAQ;AACxF,MAAI,CAAC,QAAS;AACd,MAAI,2BAA2B,OAAO,EAAG;AAEzC,QAAM,WAAW,QAAQ;AACzB,QAAM,iBAAiB,QAAQ;AAC/B,MAAI,CAAC,SAAU;AAEf,MAAI,QAAQ,WAAW,WAAW,EAAG;AACrC,MAAI,QAAQ,WAAW,cAAc,EAAG;AAGxC,QAAM,UAAW,aAAa,OAAO,OAAO,IAAI,YAAY,aACxD,IAAI,UACH,eAAe,OAAO,IAAI,aAAa,OAAO,IAAI,UAAU,YAAY,aACvE,IAAI,UAAU,QAAQ,KAAK,IAAI,SAAS,IACxC;AAEN,MAAI,CAAC,QAAS;AAEd,QAAM,KAAM,QAAQ,IAAI,EAAoB,KAAK;AAEjD,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,MACE,UAAU;AAAA,MACV,WAAW;AAAA,MACX;AAAA,MACA,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,IAC7C;AAAA,IACA,CAAC;AAAA,IACD,EAAE,UAAU,gBAAgB,kBAAkB,GAAG;AAAA,EACnD;AAEA,MAAI,CAAC,SAAS,OAAQ;AAEtB,QAAM,mBAAmB,SAAS;AAAA,IAAO,CAAC,YACxC,4BAA4B,SAAS,QAAQ,gBAAgB;AAAA,EAC/D;AAEA,MAAI,CAAC,iBAAiB,OAAQ;AAE9B,aAAW,WAAW,kBAAkB;AACtC,UAAM,qBAAqB,MAAM,4BAA4B,IAAI;AAAA,MAC/D,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AAED,QAAI,CAAC,mBAAoB;AAEzB,QAAI,oBAAmC;AACvC,QAAI;AACF,YAAM,WAAW,MAAM,sBAAsB;AAAA,QAC3C;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,0BAAoB,SAAS;AAE7B,YAAM,uBAAuB;AAAA,QAC3B,YAAY,SAAS;AAAA,QACrB,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,MAC3B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,mBAAmB;AACrB,cAAM,iBAAiB,MAAM,sBAAsB,IAAI,uBAAuB,EAAE,IAAI,mBAAmB,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe,GAAG,QAAW,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe,CAAC;AAC9P,YAAI,gBAAgB;AAClB,yBAAe,SAAS;AACxB,yBAAe,eAAe,iBAAiB,QAAQ,yBAAyB,MAAM,OAAO,KAAK;AAClG,yBAAe,cAAc;AAC7B,gBAAM,GAAG,MAAM;AAAA,QACjB;AAAA,MACF;AACA,cAAQ,MAAM,kDAAkD;AAAA,QAC9D,WAAW,QAAQ;AAAA,QACnB;AAAA,QACA;AAAA,QACA,gBAAgB,kBAAkB,QAAQ;AAAA,QAC1C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAC9D,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/webhooks",
-  "version": "0.5.1-develop.2672.g2128128275",
+  "version": "0.5.1-develop.2681.c559bb2bc3",
   "description": "Webhooks module for Open Mercato — Standard Webhooks compliant outbound/inbound delivery",
   "type": "module",
   "main": "./dist/index.js",
@@ -69,18 +69,18 @@
     }
   },
   "dependencies": {
-    "@open-mercato/core": "0.5.1-develop.2672.g2128128275",
-    "@open-mercato/queue": "0.5.1-develop.2672.g2128128275",
-    "@open-mercato/ui": "0.5.1-develop.2672.g2128128275"
+    "@open-mercato/core": "0.5.1-develop.2681.c559bb2bc3",
+    "@open-mercato/queue": "0.5.1-develop.2681.c559bb2bc3",
+    "@open-mercato/ui": "0.5.1-develop.2681.c559bb2bc3"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^6.6.10",
-    "@open-mercato/shared": "0.5.1-develop.2672.g2128128275",
+    "@open-mercato/shared": "0.5.1-develop.2681.c559bb2bc3",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.5.1-develop.2672.g2128128275",
+    "@open-mercato/shared": "0.5.1-develop.2681.c559bb2bc3",
     "@types/jest": "^30.0.0",
     "esbuild": "^0.28.0",
     "glob": "^13.0.6",

package/src/modules/webhooks/api/events/__tests__/route.test.ts

@@ -0,0 +1,44 @@
+import { GET } from '../route'
+
+const getDeclaredEventsMock = jest.fn()
+
+jest.mock('@open-mercato/shared/modules/events', () => ({
+  getDeclaredEvents: () => getDeclaredEventsMock(),
+}))
+
+describe('webhooks events route', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+  })
+
+  it('filters webhook and trigger-excluded events from the response', async () => {
+    getDeclaredEventsMock.mockReturnValue([
+      {
+        id: 'catalog.product.created',
+        label: 'Product created',
+      },
+      {
+        id: 'sales.document.calculate.before',
+        label: 'Before document calculate',
+        excludeFromTriggers: true,
+      },
+      {
+        id: 'webhooks.delivery.succeeded',
+        label: 'Webhook delivery succeeded',
+      },
+    ])
+
+    const response = await GET()
+
+    expect(response.status).toBe(200)
+    await expect(response.json()).resolves.toEqual({
+      data: [
+        {
+          id: 'catalog.product.created',
+          label: 'Product created',
+        },
+      ],
+      total: 1,
+    })
+  })
+})

package/src/modules/webhooks/api/events/route.ts

@@ -24,7 +24,7 @@ const eventsResponseSchema = z.object({
 
 export async function GET(): Promise<Response> {
   const events = getDeclaredEvents()
-    .filter((event) => !event.id.startsWith('webhooks.'))
+    .filter((event) => !event.id.startsWith('webhooks.') && !event.excludeFromTriggers)
     .sort((left, right) => left.id.localeCompare(right.id))
 
   return json({

package/src/modules/webhooks/subscribers/__tests__/outbound-dispatch.test.ts

@@ -5,6 +5,9 @@ jest.mock('@open-mercato/shared/lib/encryption/find', () => ({
   findWithDecryption: jest.fn(),
   findOneWithDecryption: jest.fn(),
 }))
+jest.mock('@open-mercato/shared/modules/events', () => ({
+  getDeclaredEvents: jest.fn(),
+}))
 
 jest.mock('../../lib/delivery', () => ({
   createWebhookDelivery: jest.fn(),
@@ -18,6 +21,7 @@ jest.mock('../../lib/integration-state', () => ({
 }))
 
 import { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { getDeclaredEvents } from '@open-mercato/shared/modules/events'
 import { createWebhookDelivery } from '../../lib/delivery'
 import { enqueueWebhookDelivery } from '../../lib/queue'
 import { isWebhookIntegrationEnabled } from '../../lib/integration-state'
@@ -27,6 +31,10 @@ describe('webhooks outbound dispatch subscriber', () => {
     jest.clearAllMocks()
   })
 
+  beforeEach(() => {
+    ;(getDeclaredEvents as jest.Mock).mockReturnValue([])
+  })
+
   it('uses the event bus eventName for wildcard subscribers and schedules matching webhook deliveries', async () => {
     const em = {
       fork: jest.fn(function fork() {
@@ -160,6 +168,50 @@ describe('webhooks outbound dispatch subscriber', () => {
     expect(findWithDecryption).toHaveBeenCalled()
   })
 
+  it('skips application lifecycle events before resolving the entity manager', async () => {
+    const resolve = jest.fn()
+
+    await expect(handler(
+      {
+        tenantId: 'tenant-1',
+        organizationId: 'org-1',
+      },
+      {
+        eventName: 'application.request.auth_resolved',
+        resolve,
+      },
+    )).resolves.toBeUndefined()
+
+    expect(resolve).not.toHaveBeenCalled()
+    expect(findWithDecryption).not.toHaveBeenCalled()
+  })
+
+  it('skips declared events that are excluded from triggers before hitting the database', async () => {
+    ;(getDeclaredEvents as jest.Mock).mockReturnValue([
+      {
+        id: 'sales.document.calculate.before',
+        label: 'Before document calculate',
+        excludeFromTriggers: true,
+      },
+    ])
+
+    const resolve = jest.fn()
+
+    await expect(handler(
+      {
+        tenantId: 'tenant-1',
+        organizationId: 'org-1',
+      },
+      {
+        eventName: 'sales.document.calculate.before',
+        resolve,
+      },
+    )).resolves.toBeUndefined()
+
+    expect(resolve).not.toHaveBeenCalled()
+    expect(findWithDecryption).not.toHaveBeenCalled()
+  })
+
   it('skips processing for internal query_index events', async () => {
     ;(findWithDecryption as jest.Mock).mockResolvedValue([])
 

package/src/modules/webhooks/subscribers/outbound-dispatch.ts

@@ -3,6 +3,7 @@ import type { SubscriberContext } from '@open-mercato/events/types'
 import { WebhookDeliveryEntity, WebhookEntity } from '../data/entities'
 import { findWithDecryption, findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
 import { matchAnyWebhookEventPattern } from '@open-mercato/shared/lib/events/patterns'
+import { getDeclaredEvents } from '@open-mercato/shared/modules/events'
 import { createWebhookDelivery } from '../lib/delivery'
 import { enqueueWebhookDelivery } from '../lib/queue'
 import { isWebhookIntegrationEnabled } from '../lib/integration-state'
@@ -13,12 +14,20 @@ export const metadata = {
   id: 'webhooks:outbound-dispatch',
 }
 
+function shouldSkipOutboundDispatch(eventId: string): boolean {
+  if (eventId.startsWith('webhooks.') || eventId.startsWith('application.')) return true
+
+  const declaredEvent = getDeclaredEvents().find((event) => event.id === eventId)
+  return declaredEvent?.excludeFromTriggers === true
+}
+
 export default async function handler(
   payload: Record<string, unknown>,
   ctx: (SubscriberContext & { eventId?: string }) | { container?: { resolve: <T = unknown>(name: string) => T }; eventId?: string; eventName?: string; resolve?: <T = unknown>(name: string) => T },
 ) {
   const eventId = ctx.eventId ?? ctx.eventName ?? (payload.eventId as string) ?? (payload.type as string)
   if (!eventId) return
+  if (shouldSkipOutboundDispatch(eventId)) return
 
   const tenantId = payload.tenantId as string | undefined
   const organizationId = payload.organizationId as string | undefined
@@ -27,6 +36,7 @@ export default async function handler(
   if (eventId.startsWith('webhooks.')) return
   if (eventId.startsWith('query_index.')) return
 
+
   const resolve = ('resolve' in ctx && typeof ctx.resolve === 'function')
     ? ctx.resolve
     : ('container' in ctx && ctx.container && typeof ctx.container.resolve === 'function')