@openleash/core 0.5.0 → 0.5.3

package/dist/webhook.js

@@ -0,0 +1,114 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deliverWebhook = deliverWebhook;
+const crypto = __importStar(require("node:crypto"));
+const audit_js_1 = require("./audit.js");
+function safeAuditStore(auditStore, eventType, metadata) {
+    try {
+        auditStore.append(eventType, metadata);
+    }
+    catch {
+        // Audit store may no longer be available (e.g. tests cleaned up)
+    }
+}
+/** @deprecated Use the overload that accepts `auditStore` instead of `dataDir`. */
+function safeAudit(dataDir, eventType, metadata) {
+    try {
+        (0, audit_js_1.appendAuditEvent)(dataDir, eventType, metadata);
+    }
+    catch {
+        // Data directory may no longer exist (e.g. tests cleaned up)
+    }
+}
+function deliverWebhook(params) {
+    const { webhookUrl, webhookSecret, webhookAuthToken, payload, auditStore, dataDir, timeoutMs = 10_000 } = params;
+    if (!webhookUrl)
+        return;
+    const body = JSON.stringify(payload);
+    const signature = crypto
+        .createHmac('sha256', webhookSecret)
+        .update(body)
+        .digest('hex');
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    const audit = (eventType, metadata) => {
+        if (auditStore) {
+            safeAuditStore(auditStore, eventType, metadata);
+        }
+        else if (dataDir) {
+            safeAudit(dataDir, eventType, metadata);
+        }
+    };
+    fetch(webhookUrl, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'X-Webhook-Signature': signature,
+            Authorization: `Bearer ${webhookAuthToken}`,
+        },
+        body,
+        signal: controller.signal,
+    })
+        .then((res) => {
+        clearTimeout(timer);
+        if (res.ok) {
+            audit('WEBHOOK_DELIVERED', {
+                webhook_url: webhookUrl,
+                event_type: payload.event_type,
+                agent_principal_id: payload.agent_principal_id,
+                status_code: res.status,
+            });
+        }
+        else {
+            audit('WEBHOOK_DELIVERY_FAILED', {
+                webhook_url: webhookUrl,
+                event_type: payload.event_type,
+                agent_principal_id: payload.agent_principal_id,
+                status_code: res.status,
+            });
+        }
+    })
+        .catch((err) => {
+        clearTimeout(timer);
+        audit('WEBHOOK_DELIVERY_FAILED', {
+            webhook_url: webhookUrl,
+            event_type: payload.event_type,
+            agent_principal_id: payload.agent_principal_id,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    });
+}
+//# sourceMappingURL=webhook.js.map

package/dist/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../src/webhook.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,wCAiEC;AAlHD,oDAAsC;AACtC,yCAA8C;AAc9C,SAAS,cAAc,CAAC,UAAsB,EAAE,SAAiB,EAAE,QAAiC;IAClG,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,OAAe,EAAE,SAAiB,EAAE,QAAiC;IACtF,IAAI,CAAC;QACH,IAAA,2BAAgB,EAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAmBD,SAAgB,cAAc,CAAC,MAQ9B;IACC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IACjH,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM;SACrB,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC;SACnC,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,QAAiC,EAAE,EAAE;QACrE,IAAI,UAAU,EAAE,CAAC;YACf,cAAc,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,CAAC,UAAU,EAAE;QAChB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,qBAAqB,EAAE,SAAS;YAChC,aAAa,EAAE,UAAU,gBAAgB,EAAE;SAC5C;QACD,IAAI;QACJ,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC;SACC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACZ,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,KAAK,CAAC,mBAAmB,EAAE;gBACzB,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;gBAC9C,WAAW,EAAE,GAAG,CAAC,MAAM;aACxB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,yBAAyB,EAAE;gBAC/B,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;gBAC9C,WAAW,EAAE,GAAG,CAAC,MAAM;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,CAAC,yBAAyB,EAAE;YAC/B,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openleash/core",
-  "version": "0.5.0",
+  "version": "0.5.3",
   "description": "Core authorization engine for openleash",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",