@open-mercato/webhooks 0.6.5-develop.4790.1.bffb4fd44b → 0.6.5-develop.4861.1.59f6de1891

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:webhooks] found 66 entry points
+[build:webhooks] found 67 entry points
 [build:webhooks] built successfully

package/dist/modules/webhooks/__integration__/TC-WH-CRUDFORM-001.spec.js

@@ -0,0 +1,95 @@
+import { expect, test } from "@playwright/test";
+import { apiRequest, getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+import {
+  runCrudFormRoundTrip,
+  skipIfCrudFormExtensionTestsDisabled
+} from "@open-mercato/core/helpers/integration/crudFormPersistence";
+const WEBHOOKS_PATH = "/api/webhooks";
+async function readWebhookById(request, token, id) {
+  const response = await apiRequest(request, "GET", `${WEBHOOKS_PATH}/${encodeURIComponent(id)}`, { token });
+  if (response.status() === 404) return null;
+  expect(response.status(), `read-back webhook failed: ${response.status()}`).toBe(200);
+  const body = await readJsonSafe(response);
+  return body && body.id === id ? body : null;
+}
+test.describe("TC-WH-CRUDFORM-001: Webhook CrudForm persists scalars, events multiselect + headers JSON", () => {
+  test.beforeAll(() => {
+    skipIfCrudFormExtensionTestsDisabled();
+  });
+  test("round-trips scalars, subscribedEvents array, and customHeaders JSON on create and update", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    const stamp = Date.now();
+    const createEvents = ["catalog.product.created", "catalog.product.updated"];
+    const updateEvents = ["sales.quote.created", "catalog.product.deleted", "sales.order.placed"];
+    const createHeaders = { "X-Source": "om-qa", "X-Trace": `crudform-${stamp}` };
+    const updateHeaders = { "X-Env": "integration", "X-Rotated": "true" };
+    await runCrudFormRoundTrip({
+      request,
+      token,
+      collectionPath: WEBHOOKS_PATH,
+      recordPath: (id) => `${WEBHOOKS_PATH}/${encodeURIComponent(id)}`,
+      readById: (id) => readWebhookById(request, token, id),
+      create: {
+        payload: {
+          name: `QA CRUDFORM Webhook ${stamp}`,
+          description: "Original webhook description",
+          url: `https://example.com/hooks/crudform-${stamp}`,
+          subscribedEvents: createEvents,
+          httpMethod: "POST",
+          maxRetries: 3,
+          timeoutMs: 5e3,
+          rateLimitPerMinute: 0,
+          autoDisableThreshold: 5,
+          customHeaders: createHeaders
+        }
+      },
+      expectAfterCreate: {
+        scalars: {
+          name: `QA CRUDFORM Webhook ${stamp}`,
+          description: "Original webhook description",
+          url: `https://example.com/hooks/crudform-${stamp}`,
+          subscribedEvents: createEvents,
+          httpMethod: "POST",
+          isActive: true,
+          maxRetries: 3,
+          timeoutMs: 5e3,
+          rateLimitPerMinute: 0,
+          autoDisableThreshold: 5,
+          customHeaders: createHeaders
+        }
+      },
+      update: {
+        payload: () => ({
+          name: `QA CRUDFORM Webhook ${stamp} EDITED`,
+          description: "Updated webhook description",
+          url: `https://example.com/hooks/crudform-${stamp}-edited`,
+          subscribedEvents: updateEvents,
+          httpMethod: "PUT",
+          isActive: false,
+          maxRetries: 7,
+          timeoutMs: 2e4,
+          rateLimitPerMinute: 120,
+          autoDisableThreshold: 25,
+          customHeaders: updateHeaders
+        })
+      },
+      expectAfterUpdate: {
+        scalars: {
+          name: `QA CRUDFORM Webhook ${stamp} EDITED`,
+          description: "Updated webhook description",
+          url: `https://example.com/hooks/crudform-${stamp}-edited`,
+          subscribedEvents: updateEvents,
+          httpMethod: "PUT",
+          isActive: false,
+          maxRetries: 7,
+          timeoutMs: 2e4,
+          rateLimitPerMinute: 120,
+          autoDisableThreshold: 25,
+          customHeaders: updateHeaders
+        }
+      }
+    });
+  });
+});
+//# sourceMappingURL=TC-WH-CRUDFORM-001.spec.js.map

package/dist/modules/webhooks/__integration__/TC-WH-CRUDFORM-001.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/webhooks/__integration__/TC-WH-CRUDFORM-001.spec.ts"],
+  "sourcesContent": ["import { expect, test, type APIRequestContext } from '@playwright/test';\nimport { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api';\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures';\nimport {\n  runCrudFormRoundTrip,\n  skipIfCrudFormExtensionTestsDisabled,\n  type CrudRecord,\n} from '@open-mercato/core/helpers/integration/crudFormPersistence';\n\n/**\n * TC-WH-CRUDFORM-001: Webhook CrudForm persists scalars, the events multiselect, and the\n * custom-headers JSON object (#2466, Tier B \u2014 hand-written / non-makeCrud saves).\n *\n * Webhooks is the first hand-written surface in the sweep. The backend CrudForm\n * (`backend/webhooks`) submits through the canonical, hand-written routes \u2014 `POST /api/webhooks`,\n * `PUT /api/webhooks/:id`, `DELETE /api/webhooks/:id` \u2014 NOT the makeCrud `/api/webhooks/webhooks`\n * alias, so this spec drives those exact endpoints via the harness `recordPath` seam to prove the\n * real form-submit path persists every field.\n *\n * Verified contract:\n * - Responses are camelCase (hand-written serializer), so scalar assertions use camelCase keys.\n * - `subscribedEvents` is a multiselect string[] (the form `tags` field); `customHeaders` is a JSON\n *   object (the form `JsonBuilder`). Both round-trip through deep equality.\n * - `PUT /api/webhooks/:id` is a partial patch; the spec sends the full field set on update.\n * - Read-back uses the detail GET `/api/webhooks/:id` \u2014 the list GET omits `customHeaders` and has no\n *   `id` filter. Cleanup soft-deletes via `DELETE /api/webhooks/:id` in the harness `finally`.\n * - The webhook entity has no custom fields, so the rich coverage here is the multiselect + JSON.\n * - Self-contained: a single webhook fixture, created and deleted within the round-trip.\n *\n * Gated by `OM_INTEGRATION_CRUDFORM_EXTENSION_TESTS_DISABLED` (default off \u2192 runs).\n */\nconst WEBHOOKS_PATH = '/api/webhooks';\n\nasync function readWebhookById(\n  request: APIRequestContext,\n  token: string,\n  id: string,\n): Promise<CrudRecord | null> {\n  const response = await apiRequest(request, 'GET', `${WEBHOOKS_PATH}/${encodeURIComponent(id)}`, { token });\n  if (response.status() === 404) return null;\n  expect(response.status(), `read-back webhook failed: ${response.status()}`).toBe(200);\n  const body = await readJsonSafe<CrudRecord>(response);\n  return body && body.id === id ? body : null;\n}\n\ntest.describe('TC-WH-CRUDFORM-001: Webhook CrudForm persists scalars, events multiselect + headers JSON', () => {\n  test.beforeAll(() => {\n    skipIfCrudFormExtensionTestsDisabled();\n  });\n\n  test('round-trips scalars, subscribedEvents array, and customHeaders JSON on create and update', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin');\n    const stamp = Date.now();\n    const createEvents = ['catalog.product.created', 'catalog.product.updated'];\n    const updateEvents = ['sales.quote.created', 'catalog.product.deleted', 'sales.order.placed'];\n    const createHeaders = { 'X-Source': 'om-qa', 'X-Trace': `crudform-${stamp}` };\n    const updateHeaders = { 'X-Env': 'integration', 'X-Rotated': 'true' };\n\n    await runCrudFormRoundTrip({\n      request,\n      token,\n      collectionPath: WEBHOOKS_PATH,\n      recordPath: (id) => `${WEBHOOKS_PATH}/${encodeURIComponent(id)}`,\n      readById: (id) => readWebhookById(request, token, id),\n      create: {\n        payload: {\n          name: `QA CRUDFORM Webhook ${stamp}`,\n          description: 'Original webhook description',\n          url: `https://example.com/hooks/crudform-${stamp}`,\n          subscribedEvents: createEvents,\n          httpMethod: 'POST',\n          maxRetries: 3,\n          timeoutMs: 5000,\n          rateLimitPerMinute: 0,\n          autoDisableThreshold: 5,\n          customHeaders: createHeaders,\n        },\n      },\n      expectAfterCreate: {\n        scalars: {\n          name: `QA CRUDFORM Webhook ${stamp}`,\n          description: 'Original webhook description',\n          url: `https://example.com/hooks/crudform-${stamp}`,\n          subscribedEvents: createEvents,\n          httpMethod: 'POST',\n          isActive: true,\n          maxRetries: 3,\n          timeoutMs: 5000,\n          rateLimitPerMinute: 0,\n          autoDisableThreshold: 5,\n          customHeaders: createHeaders,\n        },\n      },\n      update: {\n        payload: () => ({\n          name: `QA CRUDFORM Webhook ${stamp} EDITED`,\n          description: 'Updated webhook description',\n          url: `https://example.com/hooks/crudform-${stamp}-edited`,\n          subscribedEvents: updateEvents,\n          httpMethod: 'PUT',\n          isActive: false,\n          maxRetries: 7,\n          timeoutMs: 20000,\n          rateLimitPerMinute: 120,\n          autoDisableThreshold: 25,\n          customHeaders: updateHeaders,\n        }),\n      },\n      expectAfterUpdate: {\n        scalars: {\n          name: `QA CRUDFORM Webhook ${stamp} EDITED`,\n          description: 'Updated webhook description',\n          url: `https://example.com/hooks/crudform-${stamp}-edited`,\n          subscribedEvents: updateEvents,\n          httpMethod: 'PUT',\n          isActive: false,\n          maxRetries: 7,\n          timeoutMs: 20000,\n          rateLimitPerMinute: 120,\n          autoDisableThreshold: 25,\n          customHeaders: updateHeaders,\n        },\n      },\n    });\n  });\n});\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAoC;AACrD,SAAS,YAAY,oBAAoB;AACzC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAwBP,MAAM,gBAAgB;AAEtB,eAAe,gBACb,SACA,OACA,IAC4B;AAC5B,QAAM,WAAW,MAAM,WAAW,SAAS,OAAO,GAAG,aAAa,IAAI,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;AACzG,MAAI,SAAS,OAAO,MAAM,IAAK,QAAO;AACtC,SAAO,SAAS,OAAO,GAAG,6BAA6B,SAAS,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG;AACpF,QAAM,OAAO,MAAM,aAAyB,QAAQ;AACpD,SAAO,QAAQ,KAAK,OAAO,KAAK,OAAO;AACzC;AAEA,KAAK,SAAS,4FAA4F,MAAM;AAC9G,OAAK,UAAU,MAAM;AACnB,yCAAqC;AAAA,EACvC,CAAC;AAED,OAAK,4FAA4F,OAAO,EAAE,QAAQ,MAAM;AACtH,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,eAAe,CAAC,2BAA2B,yBAAyB;AAC1E,UAAM,eAAe,CAAC,uBAAuB,2BAA2B,oBAAoB;AAC5F,UAAM,gBAAgB,EAAE,YAAY,SAAS,WAAW,YAAY,KAAK,GAAG;AAC5E,UAAM,gBAAgB,EAAE,SAAS,eAAe,aAAa,OAAO;AAEpE,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,YAAY,CAAC,OAAO,GAAG,aAAa,IAAI,mBAAmB,EAAE,CAAC;AAAA,MAC9D,UAAU,CAAC,OAAO,gBAAgB,SAAS,OAAO,EAAE;AAAA,MACpD,QAAQ;AAAA,QACN,SAAS;AAAA,UACP,MAAM,uBAAuB,KAAK;AAAA,UAClC,aAAa;AAAA,UACb,KAAK,sCAAsC,KAAK;AAAA,UAChD,kBAAkB;AAAA,UAClB,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,oBAAoB;AAAA,UACpB,sBAAsB;AAAA,UACtB,eAAe;AAAA,QACjB;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,QACjB,SAAS;AAAA,UACP,MAAM,uBAAuB,KAAK;AAAA,UAClC,aAAa;AAAA,UACb,KAAK,sCAAsC,KAAK;AAAA,UAChD,kBAAkB;AAAA,UAClB,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,oBAAoB;AAAA,UACpB,sBAAsB;AAAA,UACtB,eAAe;AAAA,QACjB;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN,SAAS,OAAO;AAAA,UACd,MAAM,uBAAuB,KAAK;AAAA,UAClC,aAAa;AAAA,UACb,KAAK,sCAAsC,KAAK;AAAA,UAChD,kBAAkB;AAAA,UAClB,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,oBAAoB;AAAA,UACpB,sBAAsB;AAAA,UACtB,eAAe;AAAA,QACjB;AAAA,MACF;AAAA,MACA,mBAAmB;AAAA,QACjB,SAAS;AAAA,UACP,MAAM,uBAAuB,KAAK;AAAA,UAClC,aAAa;AAAA,UACb,KAAK,sCAAsC,KAAK;AAAA,UAChD,kBAAkB;AAAA,UAClB,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,oBAAoB;AAAA,UACpB,sBAAsB;AAAA,UACtB,eAAe;AAAA,QACjB;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH,CAAC;",
+  "names": []
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/webhooks",
-  "version": "0.6.5-develop.4790.1.bffb4fd44b",
+  "version": "0.6.5-develop.4861.1.59f6de1891",
   "description": "Webhooks module for Open Mercato — Standard Webhooks compliant outbound/inbound delivery",
   "type": "module",
   "main": "./dist/index.js",
@@ -69,19 +69,19 @@
     }
   },
   "dependencies": {
-    "@open-mercato/core": "0.6.5-develop.4790.1.bffb4fd44b",
-    "@open-mercato/queue": "0.6.5-develop.4790.1.bffb4fd44b",
-    "@open-mercato/ui": "0.6.5-develop.4790.1.bffb4fd44b",
+    "@open-mercato/core": "0.6.5-develop.4861.1.59f6de1891",
+    "@open-mercato/queue": "0.6.5-develop.4861.1.59f6de1891",
+    "@open-mercato/ui": "0.6.5-develop.4861.1.59f6de1891",
     "svix": "^1.95.1"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/shared": "0.6.5-develop.4790.1.bffb4fd44b",
+    "@open-mercato/shared": "0.6.5-develop.4861.1.59f6de1891",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.6.5-develop.4790.1.bffb4fd44b",
+    "@open-mercato/shared": "0.6.5-develop.4861.1.59f6de1891",
     "@types/jest": "^30.0.0",
     "@types/react": "^19.2.16",
     "@types/react-dom": "^19.2.3",

package/src/modules/webhooks/__integration__/TC-WH-CRUDFORM-001.spec.ts

@@ -0,0 +1,126 @@
+import { expect, test, type APIRequestContext } from '@playwright/test';
+import { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api';
+import { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures';
+import {
+  runCrudFormRoundTrip,
+  skipIfCrudFormExtensionTestsDisabled,
+  type CrudRecord,
+} from '@open-mercato/core/helpers/integration/crudFormPersistence';
+
+/**
+ * TC-WH-CRUDFORM-001: Webhook CrudForm persists scalars, the events multiselect, and the
+ * custom-headers JSON object (#2466, Tier B — hand-written / non-makeCrud saves).
+ *
+ * Webhooks is the first hand-written surface in the sweep. The backend CrudForm
+ * (`backend/webhooks`) submits through the canonical, hand-written routes — `POST /api/webhooks`,
+ * `PUT /api/webhooks/:id`, `DELETE /api/webhooks/:id` — NOT the makeCrud `/api/webhooks/webhooks`
+ * alias, so this spec drives those exact endpoints via the harness `recordPath` seam to prove the
+ * real form-submit path persists every field.
+ *
+ * Verified contract:
+ * - Responses are camelCase (hand-written serializer), so scalar assertions use camelCase keys.
+ * - `subscribedEvents` is a multiselect string[] (the form `tags` field); `customHeaders` is a JSON
+ *   object (the form `JsonBuilder`). Both round-trip through deep equality.
+ * - `PUT /api/webhooks/:id` is a partial patch; the spec sends the full field set on update.
+ * - Read-back uses the detail GET `/api/webhooks/:id` — the list GET omits `customHeaders` and has no
+ *   `id` filter. Cleanup soft-deletes via `DELETE /api/webhooks/:id` in the harness `finally`.
+ * - The webhook entity has no custom fields, so the rich coverage here is the multiselect + JSON.
+ * - Self-contained: a single webhook fixture, created and deleted within the round-trip.
+ *
+ * Gated by `OM_INTEGRATION_CRUDFORM_EXTENSION_TESTS_DISABLED` (default off → runs).
+ */
+const WEBHOOKS_PATH = '/api/webhooks';
+
+async function readWebhookById(
+  request: APIRequestContext,
+  token: string,
+  id: string,
+): Promise<CrudRecord | null> {
+  const response = await apiRequest(request, 'GET', `${WEBHOOKS_PATH}/${encodeURIComponent(id)}`, { token });
+  if (response.status() === 404) return null;
+  expect(response.status(), `read-back webhook failed: ${response.status()}`).toBe(200);
+  const body = await readJsonSafe<CrudRecord>(response);
+  return body && body.id === id ? body : null;
+}
+
+test.describe('TC-WH-CRUDFORM-001: Webhook CrudForm persists scalars, events multiselect + headers JSON', () => {
+  test.beforeAll(() => {
+    skipIfCrudFormExtensionTestsDisabled();
+  });
+
+  test('round-trips scalars, subscribedEvents array, and customHeaders JSON on create and update', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin');
+    const stamp = Date.now();
+    const createEvents = ['catalog.product.created', 'catalog.product.updated'];
+    const updateEvents = ['sales.quote.created', 'catalog.product.deleted', 'sales.order.placed'];
+    const createHeaders = { 'X-Source': 'om-qa', 'X-Trace': `crudform-${stamp}` };
+    const updateHeaders = { 'X-Env': 'integration', 'X-Rotated': 'true' };
+
+    await runCrudFormRoundTrip({
+      request,
+      token,
+      collectionPath: WEBHOOKS_PATH,
+      recordPath: (id) => `${WEBHOOKS_PATH}/${encodeURIComponent(id)}`,
+      readById: (id) => readWebhookById(request, token, id),
+      create: {
+        payload: {
+          name: `QA CRUDFORM Webhook ${stamp}`,
+          description: 'Original webhook description',
+          url: `https://example.com/hooks/crudform-${stamp}`,
+          subscribedEvents: createEvents,
+          httpMethod: 'POST',
+          maxRetries: 3,
+          timeoutMs: 5000,
+          rateLimitPerMinute: 0,
+          autoDisableThreshold: 5,
+          customHeaders: createHeaders,
+        },
+      },
+      expectAfterCreate: {
+        scalars: {
+          name: `QA CRUDFORM Webhook ${stamp}`,
+          description: 'Original webhook description',
+          url: `https://example.com/hooks/crudform-${stamp}`,
+          subscribedEvents: createEvents,
+          httpMethod: 'POST',
+          isActive: true,
+          maxRetries: 3,
+          timeoutMs: 5000,
+          rateLimitPerMinute: 0,
+          autoDisableThreshold: 5,
+          customHeaders: createHeaders,
+        },
+      },
+      update: {
+        payload: () => ({
+          name: `QA CRUDFORM Webhook ${stamp} EDITED`,
+          description: 'Updated webhook description',
+          url: `https://example.com/hooks/crudform-${stamp}-edited`,
+          subscribedEvents: updateEvents,
+          httpMethod: 'PUT',
+          isActive: false,
+          maxRetries: 7,
+          timeoutMs: 20000,
+          rateLimitPerMinute: 120,
+          autoDisableThreshold: 25,
+          customHeaders: updateHeaders,
+        }),
+      },
+      expectAfterUpdate: {
+        scalars: {
+          name: `QA CRUDFORM Webhook ${stamp} EDITED`,
+          description: 'Updated webhook description',
+          url: `https://example.com/hooks/crudform-${stamp}-edited`,
+          subscribedEvents: updateEvents,
+          httpMethod: 'PUT',
+          isActive: false,
+          maxRetries: 7,
+          timeoutMs: 20000,
+          rateLimitPerMinute: 120,
+          autoDisableThreshold: 25,
+          customHeaders: updateHeaders,
+        },
+      },
+    });
+  });
+});