@open-mercato/webhooks 0.6.3-develop.3810.1.ad92c339f5 → 0.6.3-develop.3811.1.be22750402

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/AGENTS.md +22 -1
  2. package/package.json +6 -6
package/AGENTS.md CHANGED
@@ -2,7 +2,7 @@
2
2
 
3
3
  Use `@open-mercato/webhooks` for Standard Webhooks delivery, inbound verification, and webhook marketplace/admin flows.
4
4
 
5
- ## MUST Rules
5
+ ## Always
6
6
 
7
7
  1. **MUST use the shared webhook primitives** — import signing, verification, and secret helpers from `@open-mercato/shared/lib/webhooks`
8
8
  2. **MUST enqueue outbound deliveries** — never send webhook HTTP requests directly from subscribers or API routes unless the endpoint is the explicit synchronous test route
@@ -13,6 +13,27 @@ Use `@open-mercato/webhooks` for Standard Webhooks delivery, inbound verificatio
13
13
  7. **MUST wire backend UI writes through shared CRUD helpers or guarded mutations** — do not add ad hoc fetch logic for create, update, retry, rotate, or test actions
14
14
  8. **MUST treat inbound adapters as provider-owned** — register `WebhookEndpointAdapter` in the provider module; do not hardcode provider behavior in the webhooks package
15
15
 
16
+ ## Ask First
17
+
18
+ - Ask before changing webhook signing, verification, canonical route contracts, or compatibility aliases.
19
+ - Ask before moving provider-specific inbound behavior into the shared webhooks package.
20
+ - Ask before changing retry, deduplication, or delivery lifecycle event semantics.
21
+
22
+ ## Never
23
+
24
+ - Never send webhook HTTP requests directly from subscribers or API routes unless the endpoint is the explicit synchronous test route.
25
+ - Never read encrypted webhook secrets with raw ORM helpers.
26
+ - Never add ad hoc backend `fetch` logic for create, update, retry, rotate, or test actions.
27
+ - Never hardcode provider-specific inbound behavior in this package.
28
+
29
+ ## Validation Commands
30
+
31
+ ```bash
32
+ yarn generate
33
+ yarn workspace @open-mercato/webhooks test
34
+ yarn workspace @open-mercato/webhooks build
35
+ ```
36
+
16
37
  ## When You Need Outbound Webhooks
17
38
 
18
39
  1. Declare or reuse the source event in the emitting module's `events.ts`
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@open-mercato/webhooks",
3
- "version": "0.6.3-develop.3810.1.ad92c339f5",
3
+ "version": "0.6.3-develop.3811.1.be22750402",
4
4
  "description": "Webhooks module for Open Mercato — Standard Webhooks compliant outbound/inbound delivery",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
@@ -69,19 +69,19 @@
69
69
  }
70
70
  },
71
71
  "dependencies": {
72
- "@open-mercato/core": "0.6.3-develop.3810.1.ad92c339f5",
73
- "@open-mercato/queue": "0.6.3-develop.3810.1.ad92c339f5",
74
- "@open-mercato/ui": "0.6.3-develop.3810.1.ad92c339f5",
72
+ "@open-mercato/core": "0.6.3-develop.3811.1.be22750402",
73
+ "@open-mercato/queue": "0.6.3-develop.3811.1.be22750402",
74
+ "@open-mercato/ui": "0.6.3-develop.3811.1.be22750402",
75
75
  "svix": "^1.92.2"
76
76
  },
77
77
  "peerDependencies": {
78
78
  "@mikro-orm/postgresql": "^7.0.14",
79
- "@open-mercato/shared": "0.6.3-develop.3810.1.ad92c339f5",
79
+ "@open-mercato/shared": "0.6.3-develop.3811.1.be22750402",
80
80
  "react": "^19.0.0",
81
81
  "react-dom": "^19.0.0"
82
82
  },
83
83
  "devDependencies": {
84
- "@open-mercato/shared": "0.6.3-develop.3810.1.ad92c339f5",
84
+ "@open-mercato/shared": "0.6.3-develop.3811.1.be22750402",
85
85
  "@types/jest": "^30.0.0",
86
86
  "@types/react": "^19.2.15",
87
87
  "@types/react-dom": "^19.2.3",