@open-mercato/webhooks 0.6.7-develop.6726.1.983ae8a07e → 0.6.7-develop.6749.1.6b54c56dfe

package/dist/modules/webhooks/lib/inbound-dispatch.js

@@ -0,0 +1,105 @@
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { WebhookIngestionEntity } from "../data/entities.js";
+import { emitWebhooksEvent } from "../events.js";
+import { resolveWebhookHandlers } from "./inbound-registry.js";
+const MAX_HANDLER_RESULTS = 50;
+const MAX_ERROR_MESSAGE_LENGTH = 1024;
+function truncateError(message) {
+  return message.length > MAX_ERROR_MESSAGE_LENGTH ? `${message.slice(0, MAX_ERROR_MESSAGE_LENGTH)}\u2026` : message;
+}
+function moduleOfHandler(handlerId) {
+  const separatorIndex = handlerId.indexOf(":");
+  return separatorIndex > 0 ? handlerId.slice(0, separatorIndex) : handlerId;
+}
+async function processInboundDispatchJob(em, job, ctx) {
+  const startedAtMs = Date.now();
+  const ingestion = await findOneWithDecryption(
+    em,
+    WebhookIngestionEntity,
+    {
+      id: job.ingestionId,
+      tenantId: job.tenantId,
+      organizationId: job.organizationId
+    },
+    {}
+  );
+  if (!ingestion || ingestion.status === "processed") return;
+  ingestion.status = "processing";
+  await em.flush();
+  const handlers = resolveWebhookHandlers(job.sourceKey, job.eventType);
+  const payload = {
+    data: ingestion.payload,
+    eventType: job.eventType,
+    sourceKey: job.sourceKey,
+    headers: ingestion.headers ?? {},
+    ingestionId: job.ingestionId,
+    tenantId: job.tenantId,
+    organizationId: job.organizationId
+  };
+  const previousResults = Array.isArray(ingestion.handlerResults) ? ingestion.handlerResults : [];
+  const alreadySucceeded = new Map(
+    previousResults.filter((result) => result?.status === "success").map((result) => [result.handlerId, result])
+  );
+  const results = [];
+  let failedCount = 0;
+  for (const entry of handlers) {
+    const previousSuccess = alreadySucceeded.get(entry.meta.id);
+    if (previousSuccess) {
+      results.push(previousSuccess);
+      continue;
+    }
+    const handlerStartedMs = Date.now();
+    const handlerStartedAt = new Date(handlerStartedMs).toISOString();
+    try {
+      const mod = await entry.handler();
+      await mod.default(payload, ctx);
+      results.push({
+        handlerId: entry.meta.id,
+        module: moduleOfHandler(entry.meta.id),
+        status: "success",
+        durationMs: Date.now() - handlerStartedMs,
+        startedAt: handlerStartedAt
+      });
+    } catch (error) {
+      failedCount += 1;
+      const message = truncateError(error instanceof Error ? error.message : String(error));
+      results.push({
+        handlerId: entry.meta.id,
+        module: moduleOfHandler(entry.meta.id),
+        status: "failed",
+        errorMessage: message,
+        durationMs: Date.now() - handlerStartedMs,
+        startedAt: handlerStartedAt
+      });
+      await emitWebhooksEvent("webhooks.inbound.handler_failed", {
+        ingestionId: job.ingestionId,
+        sourceKey: job.sourceKey,
+        eventType: job.eventType,
+        handlerId: entry.meta.id,
+        errorMessage: message,
+        tenantId: job.tenantId,
+        organizationId: job.organizationId
+      });
+    }
+  }
+  ingestion.handlerCount = handlers.length;
+  ingestion.handlerResults = results.slice(0, MAX_HANDLER_RESULTS);
+  ingestion.status = failedCount > 0 ? "failed" : "processed";
+  ingestion.processedAt = /* @__PURE__ */ new Date();
+  ingestion.durationMs = Date.now() - startedAtMs;
+  ingestion.errorMessage = failedCount > 0 ? `${failedCount}/${handlers.length} handlers failed` : null;
+  await em.flush();
+  await emitWebhooksEvent("webhooks.inbound.processed", {
+    ingestionId: job.ingestionId,
+    sourceKey: job.sourceKey,
+    eventType: job.eventType,
+    handlerCount: handlers.length,
+    failedCount,
+    tenantId: job.tenantId,
+    organizationId: job.organizationId
+  });
+}
+export {
+  processInboundDispatchJob
+};
+//# sourceMappingURL=inbound-dispatch.js.map

package/dist/modules/webhooks/lib/inbound-dispatch.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/webhooks/lib/inbound-dispatch.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type {\n  WebhookHandlerContext,\n  WebhookHandlerPayload,\n  WebhookHandlerResult,\n} from '@open-mercato/shared/lib/webhooks'\nimport { WebhookIngestionEntity } from '../data/entities'\nimport { emitWebhooksEvent } from '../events'\nimport { resolveWebhookHandlers } from './inbound-registry'\n\nconst MAX_HANDLER_RESULTS = 50\nconst MAX_ERROR_MESSAGE_LENGTH = 1024\n\nexport type InboundDispatchJob = {\n  ingestionId: string\n  sourceKey: string\n  eventType: string\n  tenantId: string\n  organizationId: string\n}\n\nfunction truncateError(message: string): string {\n  return message.length > MAX_ERROR_MESSAGE_LENGTH\n    ? `${message.slice(0, MAX_ERROR_MESSAGE_LENGTH)}\u2026`\n    : message\n}\n\nfunction moduleOfHandler(handlerId: string): string {\n  const separatorIndex = handlerId.indexOf(':')\n  return separatorIndex > 0 ? handlerId.slice(0, separatorIndex) : handlerId\n}\n\n/**\n * Process a queued inbound-dispatch job: load the ingestion, run every matching\n * handler independently (a failing handler never blocks the others), record\n * per-handler results, and emit lifecycle events. The payload and headers are\n * read from the (decrypted) ingestion row rather than carried on the job, so the\n * queue never stores the raw webhook body. Idempotent \u2014 a job whose ingestion is\n * already `processed` returns early, and a retry after a partial failure re-runs\n * only the handlers that have not already succeeded.\n */\nexport async function processInboundDispatchJob(\n  em: EntityManager,\n  job: InboundDispatchJob,\n  ctx: WebhookHandlerContext,\n): Promise<void> {\n  const startedAtMs = Date.now()\n  const ingestion = await findOneWithDecryption(\n    em,\n    WebhookIngestionEntity,\n    {\n      id: job.ingestionId,\n      tenantId: job.tenantId,\n      organizationId: job.organizationId,\n    },\n    {},\n  )\n\n  if (!ingestion || ingestion.status === 'processed') return\n\n  ingestion.status = 'processing'\n  await em.flush()\n\n  const handlers = resolveWebhookHandlers(job.sourceKey, job.eventType)\n  const payload: WebhookHandlerPayload = {\n    data: ingestion.payload,\n    eventType: job.eventType,\n    sourceKey: job.sourceKey,\n    headers: ingestion.headers ?? {},\n    ingestionId: job.ingestionId,\n    tenantId: job.tenantId,\n    organizationId: job.organizationId,\n  }\n\n  const previousResults = Array.isArray(ingestion.handlerResults) ? ingestion.handlerResults : []\n  const alreadySucceeded = new Map(\n    previousResults\n      .filter((result) => result?.status === 'success')\n      .map((result) => [result.handlerId, result]),\n  )\n\n  const results: WebhookHandlerResult[] = []\n  let failedCount = 0\n\n  for (const entry of handlers) {\n    const previousSuccess = alreadySucceeded.get(entry.meta.id)\n    if (previousSuccess) {\n      results.push(previousSuccess)\n      continue\n    }\n\n    const handlerStartedMs = Date.now()\n    const handlerStartedAt = new Date(handlerStartedMs).toISOString()\n    try {\n      const mod = await entry.handler()\n      await mod.default(payload, ctx)\n      results.push({\n        handlerId: entry.meta.id,\n        module: moduleOfHandler(entry.meta.id),\n        status: 'success',\n        durationMs: Date.now() - handlerStartedMs,\n        startedAt: handlerStartedAt,\n      })\n    } catch (error) {\n      failedCount += 1\n      const message = truncateError(error instanceof Error ? error.message : String(error))\n      results.push({\n        handlerId: entry.meta.id,\n        module: moduleOfHandler(entry.meta.id),\n        status: 'failed',\n        errorMessage: message,\n        durationMs: Date.now() - handlerStartedMs,\n        startedAt: handlerStartedAt,\n      })\n      await emitWebhooksEvent('webhooks.inbound.handler_failed', {\n        ingestionId: job.ingestionId,\n        sourceKey: job.sourceKey,\n        eventType: job.eventType,\n        handlerId: entry.meta.id,\n        errorMessage: message,\n        tenantId: job.tenantId,\n        organizationId: job.organizationId,\n      })\n    }\n  }\n\n  ingestion.handlerCount = handlers.length\n  ingestion.handlerResults = results.slice(0, MAX_HANDLER_RESULTS)\n  ingestion.status = failedCount > 0 ? 'failed' : 'processed'\n  ingestion.processedAt = new Date()\n  ingestion.durationMs = Date.now() - startedAtMs\n  ingestion.errorMessage = failedCount > 0\n    ? `${failedCount}/${handlers.length} handlers failed`\n    : null\n  await em.flush()\n\n  await emitWebhooksEvent('webhooks.inbound.processed', {\n    ingestionId: job.ingestionId,\n    sourceKey: job.sourceKey,\n    eventType: job.eventType,\n    handlerCount: handlers.length,\n    failedCount,\n    tenantId: job.tenantId,\n    organizationId: job.organizationId,\n  })\n}\n"],
+  "mappings": "AACA,SAAS,6BAA6B;AAMtC,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAClC,SAAS,8BAA8B;AAEvC,MAAM,sBAAsB;AAC5B,MAAM,2BAA2B;AAUjC,SAAS,cAAc,SAAyB;AAC9C,SAAO,QAAQ,SAAS,2BACpB,GAAG,QAAQ,MAAM,GAAG,wBAAwB,CAAC,WAC7C;AACN;AAEA,SAAS,gBAAgB,WAA2B;AAClD,QAAM,iBAAiB,UAAU,QAAQ,GAAG;AAC5C,SAAO,iBAAiB,IAAI,UAAU,MAAM,GAAG,cAAc,IAAI;AACnE;AAWA,eAAsB,0BACpB,IACA,KACA,KACe;AACf,QAAM,cAAc,KAAK,IAAI;AAC7B,QAAM,YAAY,MAAM;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,IAAI;AAAA,MACR,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB;AAAA,IACA,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,aAAa,UAAU,WAAW,YAAa;AAEpD,YAAU,SAAS;AACnB,QAAM,GAAG,MAAM;AAEf,QAAM,WAAW,uBAAuB,IAAI,WAAW,IAAI,SAAS;AACpE,QAAM,UAAiC;AAAA,IACrC,MAAM,UAAU;AAAA,IAChB,WAAW,IAAI;AAAA,IACf,WAAW,IAAI;AAAA,IACf,SAAS,UAAU,WAAW,CAAC;AAAA,IAC/B,aAAa,IAAI;AAAA,IACjB,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,EACtB;AAEA,QAAM,kBAAkB,MAAM,QAAQ,UAAU,cAAc,IAAI,UAAU,iBAAiB,CAAC;AAC9F,QAAM,mBAAmB,IAAI;AAAA,IAC3B,gBACG,OAAO,CAAC,WAAW,QAAQ,WAAW,SAAS,EAC/C,IAAI,CAAC,WAAW,CAAC,OAAO,WAAW,MAAM,CAAC;AAAA,EAC/C;AAEA,QAAM,UAAkC,CAAC;AACzC,MAAI,cAAc;AAElB,aAAW,SAAS,UAAU;AAC5B,UAAM,kBAAkB,iBAAiB,IAAI,MAAM,KAAK,EAAE;AAC1D,QAAI,iBAAiB;AACnB,cAAQ,KAAK,eAAe;AAC5B;AAAA,IACF;AAEA,UAAM,mBAAmB,KAAK,IAAI;AAClC,UAAM,mBAAmB,IAAI,KAAK,gBAAgB,EAAE,YAAY;AAChE,QAAI;AACF,YAAM,MAAM,MAAM,MAAM,QAAQ;AAChC,YAAM,IAAI,QAAQ,SAAS,GAAG;AAC9B,cAAQ,KAAK;AAAA,QACX,WAAW,MAAM,KAAK;AAAA,QACtB,QAAQ,gBAAgB,MAAM,KAAK,EAAE;AAAA,QACrC,QAAQ;AAAA,QACR,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,WAAW;AAAA,MACb,CAAC;AAAA,IACH,SAAS,OAAO;AACd,qBAAe;AACf,YAAM,UAAU,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACpF,cAAQ,KAAK;AAAA,QACX,WAAW,MAAM,KAAK;AAAA,QACtB,QAAQ,gBAAgB,MAAM,KAAK,EAAE;AAAA,QACrC,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,WAAW;AAAA,MACb,CAAC;AACD,YAAM,kBAAkB,mCAAmC;AAAA,QACzD,aAAa,IAAI;AAAA,QACjB,WAAW,IAAI;AAAA,QACf,WAAW,IAAI;AAAA,QACf,WAAW,MAAM,KAAK;AAAA,QACtB,cAAc;AAAA,QACd,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,YAAU,eAAe,SAAS;AAClC,YAAU,iBAAiB,QAAQ,MAAM,GAAG,mBAAmB;AAC/D,YAAU,SAAS,cAAc,IAAI,WAAW;AAChD,YAAU,cAAc,oBAAI,KAAK;AACjC,YAAU,aAAa,KAAK,IAAI,IAAI;AACpC,YAAU,eAAe,cAAc,IACnC,GAAG,WAAW,IAAI,SAAS,MAAM,qBACjC;AACJ,QAAM,GAAG,MAAM;AAEf,QAAM,kBAAkB,8BAA8B;AAAA,IACpD,aAAa,IAAI;AAAA,IACjB,WAAW,IAAI;AAAA,IACf,WAAW,IAAI;AAAA,IACf,cAAc,SAAS;AAAA,IACvB;AAAA,IACA,UAAU,IAAI;AAAA,IACd,gBAAgB,IAAI;AAAA,EACtB,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/webhooks/lib/inbound-registry.js

@@ -0,0 +1,76 @@
+import { matchWebhookEventPattern } from "@open-mercato/shared/lib/events/patterns";
+const WEBHOOK_SOURCES_KEY = "__openMercatoWebhookSources__";
+const WEBHOOK_HANDLERS_KEY = "__openMercatoWebhookHandlers__";
+function getSourceRegistry() {
+  const globalState = globalThis;
+  if (!globalState[WEBHOOK_SOURCES_KEY]) {
+    globalState[WEBHOOK_SOURCES_KEY] = /* @__PURE__ */ new Map();
+  }
+  return globalState[WEBHOOK_SOURCES_KEY];
+}
+function getHandlerRegistry() {
+  const globalState = globalThis;
+  if (!globalState[WEBHOOK_HANDLERS_KEY]) {
+    globalState[WEBHOOK_HANDLERS_KEY] = [];
+  }
+  return globalState[WEBHOOK_HANDLERS_KEY];
+}
+function registerWebhookSource(config) {
+  const registry = getSourceRegistry();
+  registry.set(config.key, config);
+  return () => {
+    if (registry.get(config.key) === config) registry.delete(config.key);
+  };
+}
+function setWebhookSources(configs) {
+  const registry = getSourceRegistry();
+  registry.clear();
+  for (const config of configs) registry.set(config.key, config);
+}
+function getWebhookSource(sourceKey) {
+  return getSourceRegistry().get(sourceKey);
+}
+function listWebhookSources() {
+  return Array.from(getSourceRegistry().values());
+}
+function clearWebhookSources() {
+  getSourceRegistry().clear();
+}
+function registerWebhookHandler(entry) {
+  const registry = getHandlerRegistry();
+  registry.push(entry);
+  return () => {
+    const index = registry.indexOf(entry);
+    if (index >= 0) registry.splice(index, 1);
+  };
+}
+function setWebhookHandlers(entries) {
+  const registry = getHandlerRegistry();
+  registry.length = 0;
+  registry.push(...entries);
+}
+function listWebhookHandlers() {
+  return [...getHandlerRegistry()];
+}
+function clearWebhookHandlers() {
+  getHandlerRegistry().length = 0;
+}
+function resolveWebhookHandlers(sourceKey, eventType) {
+  return getHandlerRegistry().filter((entry) => {
+    if (entry.meta.source !== sourceKey) return false;
+    return matchWebhookEventPattern(eventType, entry.meta.event);
+  });
+}
+export {
+  clearWebhookHandlers,
+  clearWebhookSources,
+  getWebhookSource,
+  listWebhookHandlers,
+  listWebhookSources,
+  registerWebhookHandler,
+  registerWebhookSource,
+  resolveWebhookHandlers,
+  setWebhookHandlers,
+  setWebhookSources
+};
+//# sourceMappingURL=inbound-registry.js.map

package/dist/modules/webhooks/lib/inbound-registry.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/webhooks/lib/inbound-registry.ts"],
+  "sourcesContent": ["import { matchWebhookEventPattern } from '@open-mercato/shared/lib/events/patterns'\nimport type {\n  WebhookHandlerRegistryEntry,\n  WebhookSourceConfig,\n} from '@open-mercato/shared/lib/webhooks'\n\nconst WEBHOOK_SOURCES_KEY = '__openMercatoWebhookSources__'\nconst WEBHOOK_HANDLERS_KEY = '__openMercatoWebhookHandlers__'\n\ntype GlobalState = typeof globalThis & {\n  [WEBHOOK_SOURCES_KEY]?: Map<string, WebhookSourceConfig>\n  [WEBHOOK_HANDLERS_KEY]?: WebhookHandlerRegistryEntry[]\n}\n\nfunction getSourceRegistry(): Map<string, WebhookSourceConfig> {\n  const globalState = globalThis as GlobalState\n  if (!globalState[WEBHOOK_SOURCES_KEY]) {\n    globalState[WEBHOOK_SOURCES_KEY] = new Map<string, WebhookSourceConfig>()\n  }\n  return globalState[WEBHOOK_SOURCES_KEY]\n}\n\nfunction getHandlerRegistry(): WebhookHandlerRegistryEntry[] {\n  const globalState = globalThis as GlobalState\n  if (!globalState[WEBHOOK_HANDLERS_KEY]) {\n    globalState[WEBHOOK_HANDLERS_KEY] = []\n  }\n  return globalState[WEBHOOK_HANDLERS_KEY]\n}\n\nexport function registerWebhookSource(config: WebhookSourceConfig): () => void {\n  const registry = getSourceRegistry()\n  registry.set(config.key, config)\n  return () => {\n    if (registry.get(config.key) === config) registry.delete(config.key)\n  }\n}\n\nexport function setWebhookSources(configs: WebhookSourceConfig[]): void {\n  const registry = getSourceRegistry()\n  registry.clear()\n  for (const config of configs) registry.set(config.key, config)\n}\n\nexport function getWebhookSource(sourceKey: string): WebhookSourceConfig | undefined {\n  return getSourceRegistry().get(sourceKey)\n}\n\nexport function listWebhookSources(): WebhookSourceConfig[] {\n  return Array.from(getSourceRegistry().values())\n}\n\nexport function clearWebhookSources(): void {\n  getSourceRegistry().clear()\n}\n\nexport function registerWebhookHandler(entry: WebhookHandlerRegistryEntry): () => void {\n  const registry = getHandlerRegistry()\n  registry.push(entry)\n  return () => {\n    const index = registry.indexOf(entry)\n    if (index >= 0) registry.splice(index, 1)\n  }\n}\n\nexport function setWebhookHandlers(entries: WebhookHandlerRegistryEntry[]): void {\n  const registry = getHandlerRegistry()\n  registry.length = 0\n  registry.push(...entries)\n}\n\nexport function listWebhookHandlers(): WebhookHandlerRegistryEntry[] {\n  return [...getHandlerRegistry()]\n}\n\nexport function clearWebhookHandlers(): void {\n  getHandlerRegistry().length = 0\n}\n\n/**\n * Resolve the handlers that match an inbound webhook's source key and event type.\n * Event matching reuses the outbound prefix-wildcard semantics (`*`, `payment_intent.*`).\n */\nexport function resolveWebhookHandlers(\n  sourceKey: string,\n  eventType: string,\n): WebhookHandlerRegistryEntry[] {\n  return getHandlerRegistry().filter((entry) => {\n    if (entry.meta.source !== sourceKey) return false\n    return matchWebhookEventPattern(eventType, entry.meta.event)\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,gCAAgC;AAMzC,MAAM,sBAAsB;AAC5B,MAAM,uBAAuB;AAO7B,SAAS,oBAAsD;AAC7D,QAAM,cAAc;AACpB,MAAI,CAAC,YAAY,mBAAmB,GAAG;AACrC,gBAAY,mBAAmB,IAAI,oBAAI,IAAiC;AAAA,EAC1E;AACA,SAAO,YAAY,mBAAmB;AACxC;AAEA,SAAS,qBAAoD;AAC3D,QAAM,cAAc;AACpB,MAAI,CAAC,YAAY,oBAAoB,GAAG;AACtC,gBAAY,oBAAoB,IAAI,CAAC;AAAA,EACvC;AACA,SAAO,YAAY,oBAAoB;AACzC;AAEO,SAAS,sBAAsB,QAAyC;AAC7E,QAAM,WAAW,kBAAkB;AACnC,WAAS,IAAI,OAAO,KAAK,MAAM;AAC/B,SAAO,MAAM;AACX,QAAI,SAAS,IAAI,OAAO,GAAG,MAAM,OAAQ,UAAS,OAAO,OAAO,GAAG;AAAA,EACrE;AACF;AAEO,SAAS,kBAAkB,SAAsC;AACtE,QAAM,WAAW,kBAAkB;AACnC,WAAS,MAAM;AACf,aAAW,UAAU,QAAS,UAAS,IAAI,OAAO,KAAK,MAAM;AAC/D;AAEO,SAAS,iBAAiB,WAAoD;AACnF,SAAO,kBAAkB,EAAE,IAAI,SAAS;AAC1C;AAEO,SAAS,qBAA4C;AAC1D,SAAO,MAAM,KAAK,kBAAkB,EAAE,OAAO,CAAC;AAChD;AAEO,SAAS,sBAA4B;AAC1C,oBAAkB,EAAE,MAAM;AAC5B;AAEO,SAAS,uBAAuB,OAAgD;AACrF,QAAM,WAAW,mBAAmB;AACpC,WAAS,KAAK,KAAK;AACnB,SAAO,MAAM;AACX,UAAM,QAAQ,SAAS,QAAQ,KAAK;AACpC,QAAI,SAAS,EAAG,UAAS,OAAO,OAAO,CAAC;AAAA,EAC1C;AACF;AAEO,SAAS,mBAAmB,SAA8C;AAC/E,QAAM,WAAW,mBAAmB;AACpC,WAAS,SAAS;AAClB,WAAS,KAAK,GAAG,OAAO;AAC1B;AAEO,SAAS,sBAAqD;AACnE,SAAO,CAAC,GAAG,mBAAmB,CAAC;AACjC;AAEO,SAAS,uBAA6B;AAC3C,qBAAmB,EAAE,SAAS;AAChC;AAMO,SAAS,uBACd,WACA,WAC+B;AAC/B,SAAO,mBAAmB,EAAE,OAAO,CAAC,UAAU;AAC5C,QAAI,MAAM,KAAK,WAAW,UAAW,QAAO;AAC5C,WAAO,yBAAyB,WAAW,MAAM,KAAK,KAAK;AAAA,EAC7D,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/webhooks/lib/module-webhook-registry.js

@@ -0,0 +1,12 @@
+import { setWebhookHandlers, setWebhookSources } from "./inbound-registry.js";
+function registerWebhookSourceEntries(entries) {
+  setWebhookSources(entries.flatMap((entry) => entry.sources ?? []));
+}
+function registerWebhookHandlerEntries(entries) {
+  setWebhookHandlers(entries.flatMap((entry) => entry.handlers ?? []));
+}
+export {
+  registerWebhookHandlerEntries,
+  registerWebhookSourceEntries
+};
+//# sourceMappingURL=module-webhook-registry.js.map

package/dist/modules/webhooks/lib/module-webhook-registry.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/webhooks/lib/module-webhook-registry.ts"],
+  "sourcesContent": ["import type {\n  WebhookHandlerRegistryEntry,\n  WebhookSourceConfig,\n} from '@open-mercato/shared/lib/webhooks'\nimport { setWebhookHandlers, setWebhookSources } from './inbound-registry'\n\nexport type WebhookSourceModuleEntry = {\n  moduleId: string\n  sources: WebhookSourceConfig[]\n}\n\nexport type WebhookHandlerModuleEntry = {\n  moduleId: string\n  handlers: WebhookHandlerRegistryEntry[]\n}\n\n/**\n * Bootstrap-time registration for module-declared webhook sources.\n * Driven by the `webhooks.sources` generator plugin via\n * `bootstrap-registrations.generated.ts` \u2014 modules contribute a\n * `webhook-sources.ts` and are wired here without bootstrap.ts edits.\n */\nexport function registerWebhookSourceEntries(entries: WebhookSourceModuleEntry[]): void {\n  setWebhookSources(entries.flatMap((entry) => entry.sources ?? []))\n}\n\n/**\n * Bootstrap-time registration for module-declared webhook handlers.\n * Driven by the `webhooks.handlers` generator plugin.\n */\nexport function registerWebhookHandlerEntries(entries: WebhookHandlerModuleEntry[]): void {\n  setWebhookHandlers(entries.flatMap((entry) => entry.handlers ?? []))\n}\n"],
+  "mappings": "AAIA,SAAS,oBAAoB,yBAAyB;AAkB/C,SAAS,6BAA6B,SAA2C;AACtF,oBAAkB,QAAQ,QAAQ,CAAC,UAAU,MAAM,WAAW,CAAC,CAAC,CAAC;AACnE;AAMO,SAAS,8BAA8B,SAA4C;AACxF,qBAAmB,QAAQ,QAAQ,CAAC,UAAU,MAAM,YAAY,CAAC,CAAC,CAAC;AACrE;",
+  "names": []
+}

package/dist/modules/webhooks/lib/queue.js

@@ -2,8 +2,11 @@ import { createModuleQueue } from "@open-mercato/queue";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("webhooks");
 const queues = /* @__PURE__ */ new Map();
+const inboundQueues = /* @__PURE__ */ new Map();
 const LOCAL_WORKER_PROMISE_KEY = "__openMercatoWebhookLocalWorkerPromise__";
+const LOCAL_INBOUND_WORKER_PROMISE_KEY = "__openMercatoWebhookLocalInboundWorkerPromise__";
 const WEBHOOK_DELIVERIES_QUEUE = "webhook-deliveries";
+const WEBHOOK_INBOUND_DISPATCH_QUEUE = "webhook-inbound-dispatch";
 function getWebhookQueue(queueName = WEBHOOK_DELIVERIES_QUEUE) {
   const existing = queues.get(queueName);
   if (existing) return existing;
@@ -43,9 +46,53 @@ async function enqueueWebhookDelivery(job, delayMs) {
   await ensureLocalWebhookQueueWorkerStarted();
   return jobId;
 }
+function getInboundDispatchQueue(queueName = WEBHOOK_INBOUND_DISPATCH_QUEUE) {
+  const existing = inboundQueues.get(queueName);
+  if (existing) return existing;
+  const concurrency = Math.max(1, Number.parseInt(process.env.WEBHOOK_INBOUND_QUEUE_CONCURRENCY ?? "5", 10) || 5);
+  const created = createModuleQueue(queueName, { concurrency });
+  inboundQueues.set(queueName, created);
+  return created;
+}
+async function ensureLocalInboundQueueWorkerStarted() {
+  if (process.env.QUEUE_STRATEGY === "async") return;
+  const globalStore = globalThis;
+  if (globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY]) {
+    await globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY];
+    return;
+  }
+  globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY] = (async () => {
+    const queue = getInboundDispatchQueue();
+    await queue.process(async (job) => {
+      const [{ createRequestContainer }, { processInboundDispatchJob }] = await Promise.all([
+        import("@open-mercato/shared/lib/di/container"),
+        import("./inbound-dispatch.js")
+      ]);
+      const container = await createRequestContainer();
+      const em = container.resolve("em").fork();
+      await processInboundDispatchJob(em, job.payload, {
+        resolve: (name) => container.resolve(name)
+      });
+    });
+  })().catch((error) => {
+    delete globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY];
+    logger.error("Failed to start local inbound dispatch worker", { err: error });
+    throw error;
+  });
+  await globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY];
+}
+async function enqueueInboundDispatch(job) {
+  const queue = getInboundDispatchQueue();
+  const jobId = await queue.enqueue(job);
+  await ensureLocalInboundQueueWorkerStarted();
+  return jobId;
+}
 export {
   WEBHOOK_DELIVERIES_QUEUE,
+  WEBHOOK_INBOUND_DISPATCH_QUEUE,
+  enqueueInboundDispatch,
   enqueueWebhookDelivery,
+  getInboundDispatchQueue,
   getWebhookQueue
 };
 //# sourceMappingURL=queue.js.map

package/dist/modules/webhooks/lib/queue.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/webhooks/lib/queue.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createModuleQueue, type Queue } from '@open-mercato/queue'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { WebhookDeliveryJob } from './delivery'\n\nconst logger = createLogger('webhooks')\n\nconst queues = new Map<string, Queue<WebhookDeliveryJob>>()\nconst LOCAL_WORKER_PROMISE_KEY = '__openMercatoWebhookLocalWorkerPromise__'\n\nexport const WEBHOOK_DELIVERIES_QUEUE = 'webhook-deliveries'\n\nexport function getWebhookQueue(queueName: string = WEBHOOK_DELIVERIES_QUEUE): Queue<WebhookDeliveryJob> {\n  const existing = queues.get(queueName)\n  if (existing) return existing\n\n  const concurrency = Math.max(1, Number.parseInt(process.env.WEBHOOK_QUEUE_CONCURRENCY ?? '10', 10) || 10)\n  const created = createModuleQueue<WebhookDeliveryJob>(queueName, { concurrency })\n\n  queues.set(queueName, created)\n  return created\n}\n\nasync function ensureLocalWebhookQueueWorkerStarted(): Promise<void> {\n  if (process.env.QUEUE_STRATEGY === 'async') return\n\n  const globalStore = globalThis as typeof globalThis & {\n    [LOCAL_WORKER_PROMISE_KEY]?: Promise<void>\n  }\n\n  if (globalStore[LOCAL_WORKER_PROMISE_KEY]) {\n    await globalStore[LOCAL_WORKER_PROMISE_KEY]\n    return\n  }\n\n  globalStore[LOCAL_WORKER_PROMISE_KEY] = (async () => {\n    const queue = getWebhookQueue()\n\n    await queue.process(async (job) => {\n      const [{ createRequestContainer }, { processWebhookDeliveryJob }] = await Promise.all([\n        import('@open-mercato/shared/lib/di/container'),\n        import('./delivery'),\n      ])\n\n      const container = await createRequestContainer()\n      const em = (container.resolve('em') as EntityManager).fork()\n      await processWebhookDeliveryJob(em, job.payload)\n    })\n  })().catch((error) => {\n    delete globalStore[LOCAL_WORKER_PROMISE_KEY]\n    logger.error('Failed to start local delivery worker', { err: error })\n    throw error\n  })\n\n  await globalStore[LOCAL_WORKER_PROMISE_KEY]\n}\n\nexport async function enqueueWebhookDelivery(job: WebhookDeliveryJob, delayMs?: number): Promise<string> {\n  const queue = getWebhookQueue()\n  const jobId = await queue.enqueue(job, delayMs && delayMs > 0 ? { delayMs } : undefined)\n  await ensureLocalWebhookQueueWorkerStarted()\n  return jobId\n}\n"],
-  "mappings": "AACA,SAAS,yBAAqC;AAC9C,SAAS,oBAAoB;AAG7B,MAAM,SAAS,aAAa,UAAU;AAEtC,MAAM,SAAS,oBAAI,IAAuC;AAC1D,MAAM,2BAA2B;AAE1B,MAAM,2BAA2B;AAEjC,SAAS,gBAAgB,YAAoB,0BAAqD;AACvG,QAAM,WAAW,OAAO,IAAI,SAAS;AACrC,MAAI,SAAU,QAAO;AAErB,QAAM,cAAc,KAAK,IAAI,GAAG,OAAO,SAAS,QAAQ,IAAI,6BAA6B,MAAM,EAAE,KAAK,EAAE;AACxG,QAAM,UAAU,kBAAsC,WAAW,EAAE,YAAY,CAAC;AAEhF,SAAO,IAAI,WAAW,OAAO;AAC7B,SAAO;AACT;AAEA,eAAe,uCAAsD;AACnE,MAAI,QAAQ,IAAI,mBAAmB,QAAS;AAE5C,QAAM,cAAc;AAIpB,MAAI,YAAY,wBAAwB,GAAG;AACzC,UAAM,YAAY,wBAAwB;AAC1C;AAAA,EACF;AAEA,cAAY,wBAAwB,KAAK,YAAY;AACnD,UAAM,QAAQ,gBAAgB;AAE9B,UAAM,MAAM,QAAQ,OAAO,QAAQ;AACjC,YAAM,CAAC,EAAE,uBAAuB,GAAG,EAAE,0BAA0B,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QACpF,OAAO,uCAAuC;AAAA,QAC9C,OAAO,YAAY;AAAA,MACrB,CAAC;AAED,YAAM,YAAY,MAAM,uBAAuB;AAC/C,YAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,YAAM,0BAA0B,IAAI,IAAI,OAAO;AAAA,IACjD,CAAC;AAAA,EACH,GAAG,EAAE,MAAM,CAAC,UAAU;AACpB,WAAO,YAAY,wBAAwB;AAC3C,WAAO,MAAM,yCAAyC,EAAE,KAAK,MAAM,CAAC;AACpE,UAAM;AAAA,EACR,CAAC;AAED,QAAM,YAAY,wBAAwB;AAC5C;AAEA,eAAsB,uBAAuB,KAAyB,SAAmC;AACvG,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,QAAQ,MAAM,MAAM,QAAQ,KAAK,WAAW,UAAU,IAAI,EAAE,QAAQ,IAAI,MAAS;AACvF,QAAM,qCAAqC;AAC3C,SAAO;AACT;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createModuleQueue, type Queue } from '@open-mercato/queue'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { WebhookDeliveryJob } from './delivery'\nimport type { InboundDispatchJob } from './inbound-dispatch'\n\nconst logger = createLogger('webhooks')\n\nconst queues = new Map<string, Queue<WebhookDeliveryJob>>()\nconst inboundQueues = new Map<string, Queue<InboundDispatchJob>>()\nconst LOCAL_WORKER_PROMISE_KEY = '__openMercatoWebhookLocalWorkerPromise__'\nconst LOCAL_INBOUND_WORKER_PROMISE_KEY = '__openMercatoWebhookLocalInboundWorkerPromise__'\n\nexport const WEBHOOK_DELIVERIES_QUEUE = 'webhook-deliveries'\nexport const WEBHOOK_INBOUND_DISPATCH_QUEUE = 'webhook-inbound-dispatch'\n\nexport function getWebhookQueue(queueName: string = WEBHOOK_DELIVERIES_QUEUE): Queue<WebhookDeliveryJob> {\n  const existing = queues.get(queueName)\n  if (existing) return existing\n\n  const concurrency = Math.max(1, Number.parseInt(process.env.WEBHOOK_QUEUE_CONCURRENCY ?? '10', 10) || 10)\n  const created = createModuleQueue<WebhookDeliveryJob>(queueName, { concurrency })\n\n  queues.set(queueName, created)\n  return created\n}\n\nasync function ensureLocalWebhookQueueWorkerStarted(): Promise<void> {\n  if (process.env.QUEUE_STRATEGY === 'async') return\n\n  const globalStore = globalThis as typeof globalThis & {\n    [LOCAL_WORKER_PROMISE_KEY]?: Promise<void>\n  }\n\n  if (globalStore[LOCAL_WORKER_PROMISE_KEY]) {\n    await globalStore[LOCAL_WORKER_PROMISE_KEY]\n    return\n  }\n\n  globalStore[LOCAL_WORKER_PROMISE_KEY] = (async () => {\n    const queue = getWebhookQueue()\n\n    await queue.process(async (job) => {\n      const [{ createRequestContainer }, { processWebhookDeliveryJob }] = await Promise.all([\n        import('@open-mercato/shared/lib/di/container'),\n        import('./delivery'),\n      ])\n\n      const container = await createRequestContainer()\n      const em = (container.resolve('em') as EntityManager).fork()\n      await processWebhookDeliveryJob(em, job.payload)\n    })\n  })().catch((error) => {\n    delete globalStore[LOCAL_WORKER_PROMISE_KEY]\n    logger.error('Failed to start local delivery worker', { err: error })\n    throw error\n  })\n\n  await globalStore[LOCAL_WORKER_PROMISE_KEY]\n}\n\nexport async function enqueueWebhookDelivery(job: WebhookDeliveryJob, delayMs?: number): Promise<string> {\n  const queue = getWebhookQueue()\n  const jobId = await queue.enqueue(job, delayMs && delayMs > 0 ? { delayMs } : undefined)\n  await ensureLocalWebhookQueueWorkerStarted()\n  return jobId\n}\n\nexport function getInboundDispatchQueue(\n  queueName: string = WEBHOOK_INBOUND_DISPATCH_QUEUE,\n): Queue<InboundDispatchJob> {\n  const existing = inboundQueues.get(queueName)\n  if (existing) return existing\n\n  const concurrency = Math.max(1, Number.parseInt(process.env.WEBHOOK_INBOUND_QUEUE_CONCURRENCY ?? '5', 10) || 5)\n  const created = createModuleQueue<InboundDispatchJob>(queueName, { concurrency })\n\n  inboundQueues.set(queueName, created)\n  return created\n}\n\nasync function ensureLocalInboundQueueWorkerStarted(): Promise<void> {\n  if (process.env.QUEUE_STRATEGY === 'async') return\n\n  const globalStore = globalThis as typeof globalThis & {\n    [LOCAL_INBOUND_WORKER_PROMISE_KEY]?: Promise<void>\n  }\n\n  if (globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY]) {\n    await globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY]\n    return\n  }\n\n  globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY] = (async () => {\n    const queue = getInboundDispatchQueue()\n\n    await queue.process(async (job) => {\n      const [{ createRequestContainer }, { processInboundDispatchJob }] = await Promise.all([\n        import('@open-mercato/shared/lib/di/container'),\n        import('./inbound-dispatch'),\n      ])\n\n      const container = await createRequestContainer()\n      const em = (container.resolve('em') as EntityManager).fork()\n      await processInboundDispatchJob(em, job.payload, {\n        resolve: <T,>(name: string) => container.resolve(name) as T,\n      })\n    })\n  })().catch((error) => {\n    delete globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY]\n    logger.error('Failed to start local inbound dispatch worker', { err: error })\n    throw error\n  })\n\n  await globalStore[LOCAL_INBOUND_WORKER_PROMISE_KEY]\n}\n\nexport async function enqueueInboundDispatch(job: InboundDispatchJob): Promise<string> {\n  const queue = getInboundDispatchQueue()\n  const jobId = await queue.enqueue(job)\n  await ensureLocalInboundQueueWorkerStarted()\n  return jobId\n}\n"],
+  "mappings": "AACA,SAAS,yBAAqC;AAC9C,SAAS,oBAAoB;AAI7B,MAAM,SAAS,aAAa,UAAU;AAEtC,MAAM,SAAS,oBAAI,IAAuC;AAC1D,MAAM,gBAAgB,oBAAI,IAAuC;AACjE,MAAM,2BAA2B;AACjC,MAAM,mCAAmC;AAElC,MAAM,2BAA2B;AACjC,MAAM,iCAAiC;AAEvC,SAAS,gBAAgB,YAAoB,0BAAqD;AACvG,QAAM,WAAW,OAAO,IAAI,SAAS;AACrC,MAAI,SAAU,QAAO;AAErB,QAAM,cAAc,KAAK,IAAI,GAAG,OAAO,SAAS,QAAQ,IAAI,6BAA6B,MAAM,EAAE,KAAK,EAAE;AACxG,QAAM,UAAU,kBAAsC,WAAW,EAAE,YAAY,CAAC;AAEhF,SAAO,IAAI,WAAW,OAAO;AAC7B,SAAO;AACT;AAEA,eAAe,uCAAsD;AACnE,MAAI,QAAQ,IAAI,mBAAmB,QAAS;AAE5C,QAAM,cAAc;AAIpB,MAAI,YAAY,wBAAwB,GAAG;AACzC,UAAM,YAAY,wBAAwB;AAC1C;AAAA,EACF;AAEA,cAAY,wBAAwB,KAAK,YAAY;AACnD,UAAM,QAAQ,gBAAgB;AAE9B,UAAM,MAAM,QAAQ,OAAO,QAAQ;AACjC,YAAM,CAAC,EAAE,uBAAuB,GAAG,EAAE,0BAA0B,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QACpF,OAAO,uCAAuC;AAAA,QAC9C,OAAO,YAAY;AAAA,MACrB,CAAC;AAED,YAAM,YAAY,MAAM,uBAAuB;AAC/C,YAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,YAAM,0BAA0B,IAAI,IAAI,OAAO;AAAA,IACjD,CAAC;AAAA,EACH,GAAG,EAAE,MAAM,CAAC,UAAU;AACpB,WAAO,YAAY,wBAAwB;AAC3C,WAAO,MAAM,yCAAyC,EAAE,KAAK,MAAM,CAAC;AACpE,UAAM;AAAA,EACR,CAAC;AAED,QAAM,YAAY,wBAAwB;AAC5C;AAEA,eAAsB,uBAAuB,KAAyB,SAAmC;AACvG,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,QAAQ,MAAM,MAAM,QAAQ,KAAK,WAAW,UAAU,IAAI,EAAE,QAAQ,IAAI,MAAS;AACvF,QAAM,qCAAqC;AAC3C,SAAO;AACT;AAEO,SAAS,wBACd,YAAoB,gCACO;AAC3B,QAAM,WAAW,cAAc,IAAI,SAAS;AAC5C,MAAI,SAAU,QAAO;AAErB,QAAM,cAAc,KAAK,IAAI,GAAG,OAAO,SAAS,QAAQ,IAAI,qCAAqC,KAAK,EAAE,KAAK,CAAC;AAC9G,QAAM,UAAU,kBAAsC,WAAW,EAAE,YAAY,CAAC;AAEhF,gBAAc,IAAI,WAAW,OAAO;AACpC,SAAO;AACT;AAEA,eAAe,uCAAsD;AACnE,MAAI,QAAQ,IAAI,mBAAmB,QAAS;AAE5C,QAAM,cAAc;AAIpB,MAAI,YAAY,gCAAgC,GAAG;AACjD,UAAM,YAAY,gCAAgC;AAClD;AAAA,EACF;AAEA,cAAY,gCAAgC,KAAK,YAAY;AAC3D,UAAM,QAAQ,wBAAwB;AAEtC,UAAM,MAAM,QAAQ,OAAO,QAAQ;AACjC,YAAM,CAAC,EAAE,uBAAuB,GAAG,EAAE,0BAA0B,CAAC,IAAI,MAAM,QAAQ,IAAI;AAAA,QACpF,OAAO,uCAAuC;AAAA,QAC9C,OAAO,oBAAoB;AAAA,MAC7B,CAAC;AAED,YAAM,YAAY,MAAM,uBAAuB;AAC/C,YAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,YAAM,0BAA0B,IAAI,IAAI,SAAS;AAAA,QAC/C,SAAS,CAAK,SAAiB,UAAU,QAAQ,IAAI;AAAA,MACvD,CAAC;AAAA,IACH,CAAC;AAAA,EACH,GAAG,EAAE,MAAM,CAAC,UAAU;AACpB,WAAO,YAAY,gCAAgC;AACnD,WAAO,MAAM,iDAAiD,EAAE,KAAK,MAAM,CAAC;AAC5E,UAAM;AAAA,EACR,CAAC;AAED,QAAM,YAAY,gCAAgC;AACpD;AAEA,eAAsB,uBAAuB,KAA0C;AACrF,QAAM,QAAQ,wBAAwB;AACtC,QAAM,QAAQ,MAAM,MAAM,QAAQ,GAAG;AACrC,QAAM,qCAAqC;AAC3C,SAAO;AACT;",
   "names": []
 }

package/dist/modules/webhooks/migrations/Migration20260617141327_webhooks.js

@@ -0,0 +1,16 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260617141327_webhooks extends Migration {
+  up() {
+    this.addSql(`create table "webhook_inbound_configs" ("id" uuid not null default gen_random_uuid(), "source_key" text not null, "is_active" boolean not null default true, "integration_id" text null, "organization_id" uuid not null, "tenant_id" uuid not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, primary key ("id"));`);
+    this.addSql(`create index "webhook_inbound_configs_source_key_is_active_index" on "webhook_inbound_configs" ("source_key", "is_active");`);
+    this.addSql(`alter table "webhook_inbound_configs" add constraint "webhook_inbound_configs_source_scope_unique" unique ("source_key", "organization_id", "tenant_id");`);
+    this.addSql(`create table "webhook_ingestions" ("id" uuid not null default gen_random_uuid(), "source_key" text not null, "event_type" text not null, "external_message_id" text null, "payload" jsonb not null, "headers" jsonb null, "status" text not null default 'received', "error_message" text null, "processed_at" timestamptz null, "handler_count" int not null default 0, "handler_results" jsonb null, "duration_ms" int null, "organization_id" uuid not null, "tenant_id" uuid not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, primary key ("id"));`);
+    this.addSql(`create index "webhook_ingestions_external_message_id_index" on "webhook_ingestions" ("external_message_id");`);
+    this.addSql(`create index "webhook_ingestions_organization_id_tenant_id_created_at_index" on "webhook_ingestions" ("organization_id", "tenant_id", "created_at");`);
+    this.addSql(`create index "webhook_ingestions_source_key_status_created_at_index" on "webhook_ingestions" ("source_key", "status", "created_at");`);
+  }
+}
+export {
+  Migration20260617141327_webhooks
+};
+//# sourceMappingURL=Migration20260617141327_webhooks.js.map

package/dist/modules/webhooks/migrations/Migration20260617141327_webhooks.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/webhooks/migrations/Migration20260617141327_webhooks.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260617141327_webhooks extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`create table \"webhook_inbound_configs\" (\"id\" uuid not null default gen_random_uuid(), \"source_key\" text not null, \"is_active\" boolean not null default true, \"integration_id\" text null, \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));`);\n    this.addSql(`create index \"webhook_inbound_configs_source_key_is_active_index\" on \"webhook_inbound_configs\" (\"source_key\", \"is_active\");`);\n    this.addSql(`alter table \"webhook_inbound_configs\" add constraint \"webhook_inbound_configs_source_scope_unique\" unique (\"source_key\", \"organization_id\", \"tenant_id\");`);\n\n    this.addSql(`create table \"webhook_ingestions\" (\"id\" uuid not null default gen_random_uuid(), \"source_key\" text not null, \"event_type\" text not null, \"external_message_id\" text null, \"payload\" jsonb not null, \"headers\" jsonb null, \"status\" text not null default 'received', \"error_message\" text null, \"processed_at\" timestamptz null, \"handler_count\" int not null default 0, \"handler_results\" jsonb null, \"duration_ms\" int null, \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));`);\n    this.addSql(`create index \"webhook_ingestions_external_message_id_index\" on \"webhook_ingestions\" (\"external_message_id\");`);\n    this.addSql(`create index \"webhook_ingestions_organization_id_tenant_id_created_at_index\" on \"webhook_ingestions\" (\"organization_id\", \"tenant_id\", \"created_at\");`);\n    this.addSql(`create index \"webhook_ingestions_source_key_status_created_at_index\" on \"webhook_ingestions\" (\"source_key\", \"status\", \"created_at\");`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,yCAAyC,UAAU;AAAA,EAErD,KAA2B;AAClC,SAAK,OAAO,iVAAiV;AAC7V,SAAK,OAAO,6HAA6H;AACzI,SAAK,OAAO,2JAA2J;AAEvK,SAAK,OAAO,ujBAAujB;AACnkB,SAAK,OAAO,8GAA8G;AAC1H,SAAK,OAAO,sJAAsJ;AAClK,SAAK,OAAO,sIAAsI;AAAA,EACpJ;AAEF;",
+  "names": []
+}

package/dist/modules/webhooks/workers/inbound-dispatch.js

@@ -0,0 +1,29 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { processInboundDispatchJob } from "../lib/inbound-dispatch.js";
+const logger = createLogger("webhooks");
+const metadata = {
+  queue: "webhook-inbound-dispatch",
+  id: "webhooks:inbound-dispatch-worker",
+  concurrency: 5
+};
+async function handler(job, ctx) {
+  const em = ctx.resolve("em").fork();
+  try {
+    await processInboundDispatchJob(em, job.data, {
+      resolve: (name) => ctx.resolve(name)
+    });
+  } catch (error) {
+    logger.error("Inbound dispatch job processing failed", {
+      ingestionId: job.data.ingestionId,
+      sourceKey: job.data.sourceKey,
+      tenantId: job.data.tenantId,
+      err: error
+    });
+    throw error;
+  }
+}
+export {
+  handler as default,
+  metadata
+};
+//# sourceMappingURL=inbound-dispatch.js.map

package/dist/modules/webhooks/workers/inbound-dispatch.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/webhooks/workers/inbound-dispatch.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { processInboundDispatchJob, type InboundDispatchJob } from '../lib/inbound-dispatch'\n\nconst logger = createLogger('webhooks')\n\nexport const metadata = {\n  queue: 'webhook-inbound-dispatch',\n  id: 'webhooks:inbound-dispatch-worker',\n  concurrency: 5,\n}\n\nexport default async function handler(\n  job: { data: InboundDispatchJob },\n  ctx: { resolve: <T = unknown>(name: string) => T },\n) {\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  try {\n    await processInboundDispatchJob(em, job.data, {\n      resolve: <T,>(name: string) => ctx.resolve(name) as T,\n    })\n  } catch (error) {\n    logger.error('Inbound dispatch job processing failed', {\n      ingestionId: job.data.ingestionId,\n      sourceKey: job.data.sourceKey,\n      tenantId: job.data.tenantId,\n      err: error,\n    })\n    throw error\n  }\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAC7B,SAAS,iCAA0D;AAEnE,MAAM,SAAS,aAAa,UAAU;AAE/B,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAEA,eAAO,QACL,KACA,KACA;AACA,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,MAAI;AACF,UAAM,0BAA0B,IAAI,IAAI,MAAM;AAAA,MAC5C,SAAS,CAAK,SAAiB,IAAI,QAAQ,IAAI;AAAA,IACjD,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,0CAA0C;AAAA,MACrD,aAAa,IAAI,KAAK;AAAA,MACtB,WAAW,IAAI,KAAK;AAAA,MACpB,UAAU,IAAI,KAAK;AAAA,MACnB,KAAK;AAAA,IACP,CAAC;AACD,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/generated/entities/inbound_endpoint_config_entity/index.ts

@@ -0,0 +1,8 @@
+export const id = "id";
+export const source_key = "source_key";
+export const is_active = "is_active";
+export const integration_id = "integration_id";
+export const organization_id = "organization_id";
+export const tenant_id = "tenant_id";
+export const created_at = "created_at";
+export const updated_at = "updated_at";

package/generated/entities/webhook_ingestion_entity/index.ts

@@ -0,0 +1,16 @@
+export const id = "id";
+export const source_key = "source_key";
+export const event_type = "event_type";
+export const external_message_id = "external_message_id";
+export const payload = "payload";
+export const headers = "headers";
+export const status = "status";
+export const error_message = "error_message";
+export const processed_at = "processed_at";
+export const handler_count = "handler_count";
+export const handler_results = "handler_results";
+export const duration_ms = "duration_ms";
+export const organization_id = "organization_id";
+export const tenant_id = "tenant_id";
+export const created_at = "created_at";
+export const updated_at = "updated_at";

package/generated/entities.ids.generated.ts

@@ -5,7 +5,9 @@ export const M = {
     "webhooks": {
       "webhook_entity": "webhooks:webhook_entity",
       "webhook_delivery_entity": "webhooks:webhook_delivery_entity",
-      "webhook_inbound_receipt_entity": "webhooks:webhook_inbound_receipt_entity"
+      "webhook_inbound_receipt_entity": "webhooks:webhook_inbound_receipt_entity",
+      "webhook_ingestion_entity": "webhooks:webhook_ingestion_entity",
+      "inbound_endpoint_config_entity": "webhooks:inbound_endpoint_config_entity"
     }
   } as const;
 

package/generated/entity-fields-registry.ts

@@ -1,6 +1,16 @@
 // AUTO-GENERATED by mercato generate entity-ids
 // Static registry for entity fields - eliminates dynamic imports for Turbopack compatibility
 export const entityFieldsRegistry: Record<string, Record<string, string>> = {
+    "inbound_endpoint_config_entity": {
+      "id": "id",
+      "source_key": "source_key",
+      "is_active": "is_active",
+      "integration_id": "integration_id",
+      "organization_id": "organization_id",
+      "tenant_id": "tenant_id",
+      "created_at": "created_at",
+      "updated_at": "updated_at"
+    },
     "webhook_delivery_entity": {
       "id": "id",
       "webhook_id": "webhook_id",
@@ -62,6 +72,24 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "organization_id": "organization_id",
       "tenant_id": "tenant_id",
       "created_at": "created_at"
+    },
+    "webhook_ingestion_entity": {
+      "id": "id",
+      "source_key": "source_key",
+      "event_type": "event_type",
+      "external_message_id": "external_message_id",
+      "payload": "payload",
+      "headers": "headers",
+      "status": "status",
+      "error_message": "error_message",
+      "processed_at": "processed_at",
+      "handler_count": "handler_count",
+      "handler_results": "handler_results",
+      "duration_ms": "duration_ms",
+      "organization_id": "organization_id",
+      "tenant_id": "tenant_id",
+      "created_at": "created_at",
+      "updated_at": "updated_at"
     }
   };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/webhooks",
-  "version": "0.6.7-develop.6726.1.983ae8a07e",
+  "version": "0.6.7-develop.6749.1.6b54c56dfe",
   "license": "MIT",
   "description": "Webhooks module for Open Mercato — Standard Webhooks compliant outbound/inbound delivery",
   "type": "module",
@@ -70,19 +70,19 @@
     }
   },
   "dependencies": {
-    "@open-mercato/core": "0.6.7-develop.6726.1.983ae8a07e",
-    "@open-mercato/queue": "0.6.7-develop.6726.1.983ae8a07e",
-    "@open-mercato/ui": "0.6.7-develop.6726.1.983ae8a07e",
+    "@open-mercato/core": "0.6.7-develop.6749.1.6b54c56dfe",
+    "@open-mercato/queue": "0.6.7-develop.6749.1.6b54c56dfe",
+    "@open-mercato/ui": "0.6.7-develop.6749.1.6b54c56dfe",
     "svix": "^1.96.1"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/shared": "0.6.7-develop.6726.1.983ae8a07e",
+    "@open-mercato/shared": "0.6.7-develop.6749.1.6b54c56dfe",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.6.7-develop.6726.1.983ae8a07e",
+    "@open-mercato/shared": "0.6.7-develop.6749.1.6b54c56dfe",
     "@types/jest": "^30.0.0",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",

package/src/modules/webhooks/api/inbound/[endpointId]/__tests__/route.unify.test.ts

@@ -0,0 +1,108 @@
+import type { WebhookSourceConfig } from '@open-mercato/shared/lib/webhooks'
+
+const enqueueInboundDispatch = jest.fn(async () => 'job-1')
+const emitWebhooksEvent = jest.fn(async () => undefined)
+const findWithDecryption = jest.fn()
+const credentialsResolve = jest.fn(async () => ({ webhookSigningSecret: 'whsec' }))
+
+const flush = jest.fn(async () => undefined)
+const persist = jest.fn()
+const em = {
+  fork: () => em,
+  create: (_entity: unknown, data: Record<string, unknown>) => ({ id: 'ing-1', ...data }),
+  persist,
+  flush,
+}
+
+jest.mock('@open-mercato/shared/lib/di/container', () => ({
+  createRequestContainer: async () => ({
+    resolve: (name: string) => {
+      if (name === 'em') return em
+      if (name === 'integrationCredentialsService') return { resolve: credentialsResolve }
+      throw new Error(`[internal] no mock for ${name}`)
+    },
+  }),
+}))
+jest.mock('@open-mercato/shared/lib/i18n/server', () => ({
+  resolveTranslations: async () => ({ translate: (_key: string, fallback: string) => fallback }),
+}))
+jest.mock('@open-mercato/shared/lib/encryption/find', () => ({
+  findWithDecryption: (...args: unknown[]) => findWithDecryption(...args),
+}))
+jest.mock('../../../../events', () => ({
+  emitWebhooksEvent: (...args: unknown[]) => emitWebhooksEvent(...args),
+}))
+jest.mock('../../../../lib/queue', () => ({
+  enqueueInboundDispatch: (...args: unknown[]) => enqueueInboundDispatch(...args),
+}))
+
+import { POST } from '../route'
+import { clearWebhookSources, registerWebhookSource } from '../../../../lib/inbound-registry'
+
+function makeSource(overrides: Partial<WebhookSourceConfig> = {}): WebhookSourceConfig {
+  return {
+    key: 'stripe',
+    label: 'Stripe',
+    verifier: async () => true,
+    eventTypeExtractor: (body) => String((body as { type?: string }).type ?? ''),
+    messageIdExtractor: (body) => String((body as { id?: string }).id ?? ''),
+    ...overrides,
+  }
+}
+
+function postTo(endpointId: string, body = '{"type":"payment_intent.succeeded","id":"evt_1"}') {
+  const request = new Request(`http://localhost/api/webhooks/inbound/${endpointId}`, {
+    method: 'POST',
+    body,
+    headers: { 'content-type': 'application/json' },
+  })
+  return POST(request, { params: Promise.resolve({ endpointId }) })
+}
+
+beforeEach(() => {
+  clearWebhookSources()
+  enqueueInboundDispatch.mockClear()
+  emitWebhooksEvent.mockClear()
+  persist.mockClear()
+  flush.mockReset()
+  flush.mockResolvedValue(undefined)
+  findWithDecryption.mockReset()
+  findWithDecryption.mockResolvedValue([{ organizationId: 'o1', tenantId: 't1', sourceKey: 'stripe', isActive: true }])
+  credentialsResolve.mockClear()
+})
+
+it('returns 404 when neither a source nor an adapter matches the segment', async () => {
+  const res = await postTo('totally-unknown')
+  expect(res.status).toBe(404)
+})
+
+it('accepts a valid source webhook: records ingestion, enqueues dispatch, emits received', async () => {
+  registerWebhookSource(makeSource({ verifier: async () => true }))
+  const res = await postTo('stripe')
+  expect(res.status).toBe(200)
+  await expect(res.json()).resolves.toEqual({ ok: true })
+  expect(enqueueInboundDispatch).toHaveBeenCalledWith(
+    expect.objectContaining({ ingestionId: 'ing-1', sourceKey: 'stripe', eventType: 'payment_intent.succeeded', tenantId: 't1', organizationId: 'o1' }),
+  )
+  expect(emitWebhooksEvent).toHaveBeenCalledWith(
+    'webhooks.inbound.received',
+    expect.objectContaining({ endpointId: 'stripe', eventType: 'payment_intent.succeeded' }),
+    { persistent: true },
+  )
+})
+
+it('rejects with 401 when no candidate scope verifies', async () => {
+  registerWebhookSource(makeSource({ verifier: async () => false }))
+  const res = await postTo('stripe')
+  expect(res.status).toBe(401)
+  expect(enqueueInboundDispatch).not.toHaveBeenCalled()
+})
+
+it('returns duplicate when the receipt unique constraint is violated', async () => {
+  registerWebhookSource(makeSource())
+  flush.mockRejectedValueOnce({ code: '23505' })
+  const res = await postTo('stripe')
+  expect(res.status).toBe(200)
+  await expect(res.json()).resolves.toEqual({ ok: true, duplicate: true })
+  expect(enqueueInboundDispatch).not.toHaveBeenCalled()
+})