@orthacms/webhooks-admin 0.5.0

package/dist/lib/domain/headerRules/index.js

@@ -0,0 +1,66 @@
+/**
+ * Which custom headers an endpoint may set.
+ *
+ * A **deliberate copy** of `@orthacms/webhooks-domain`'s `isAllowedCustomHeader`
+ * rather than an import: that package's barrel reaches `node:crypto` through
+ * the signature helpers, and pulling it into the browser bundle takes the whole
+ * admin down at load. The server enforces the same rule on every write — this
+ * copy only turns a `422` into an error beside the field that caused it.
+ */
+/** Header prefixes reserved for the delivery's own metadata. */
+const RESERVED_PREFIXES = ['x-ortha-'];
+/** Headers the transport owns, which an endpoint may never overwrite. */
+const RESERVED_NAMES = [
+    'host',
+    'content-type',
+    'content-length',
+    'transfer-encoding',
+    'connection',
+    'user-agent'
+];
+/** A valid HTTP field name (RFC 9110 token characters). */
+const TOKEN = /^[a-z0-9!#$%&'*+.^_`|~-]+$/;
+/**
+ * Checks one header name.
+ *
+ * Overwriting `X-Ortha-Signature` or `X-Ortha-Event` would let a delivery claim
+ * to be something it is not, and `Host` is how a request aimed at one virtual
+ * host gets served by another — so both are refused rather than silently
+ * dropped at send time.
+ */
+export function rejectionFor(name) {
+    const lower = name.trim().toLowerCase();
+    if (lower.length === 0 || !TOKEN.test(lower))
+        return 'malformed';
+    if (RESERVED_NAMES.includes(lower))
+        return 'reserved';
+    if (RESERVED_PREFIXES.some((prefix) => lower.startsWith(prefix))) {
+        return 'reserved';
+    }
+    return null;
+}
+/** Turns the stored map into rows, in a stable order. */
+export function toHeaderRows(headers) {
+    return Object.entries(headers).map(([name, value], index) => ({
+        key: `${index}-${name}`,
+        name,
+        value
+    }));
+}
+/**
+ * Turns rows back into the map the API takes.
+ *
+ * Blank rows are dropped — an editor that has one empty row open is not
+ * expressing "send an empty header" — and a later row of the same name wins,
+ * because that is what the map would have done anyway.
+ */
+export function fromHeaderRows(rows) {
+    const headers = {};
+    for (const row of rows) {
+        const name = row.name.trim();
+        if (name.length === 0)
+            continue;
+        headers[name] = row.value.trim();
+    }
+    return headers;
+}

package/dist/lib/domain/types/contentTypeOption/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * A content type as the endpoint editor's picker renders it — one row of the
+ * code-defined registry (`GET /api/content-schema`).
+ *
+ * The picker is a convenience over a free-text filter, not a closed list: an
+ * endpoint may legitimately name a type this build does not define yet.
+ */
+export type ContentTypeOption = {
+    /** The machine name, which is what the subscription filter matches on. */
+    name: string;
+    /** The human label from the registry. */
+    label: string;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/domain/types/contentTypeOption/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/domain/types/contentTypeOption/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC5B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/lib/domain/types/contentTypeOption/index.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/domain/types/webhook/index.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Every state a delivery can be in.
+ *
+ * Restated here rather than imported from `@orthacms/webhooks-domain`, and that
+ * is deliberate twice over. It is the convention — the admin restates the
+ * server's contracts locally, so a server-side rename surfaces as a type error
+ * here instead of as `undefined` in a cell. And it is a hard requirement: that
+ * package's barrel re-exports the HMAC helpers, which import `node:crypto`, so
+ * importing anything at all from it puts a Node built-in in the browser bundle
+ * and the whole admin fails to render.
+ */
+export declare const DELIVERY_STATUSES: readonly ["pending", "delivering", "succeeded", "failed", "dead"];
+/** One of {@link DELIVERY_STATUSES}. */
+export type DeliveryStatus = (typeof DELIVERY_STATUSES)[number];
+/** One configured endpoint, as the admin renders it. */
+export type WebhookEndpoint = {
+    id: string;
+    name: string;
+    url: string;
+    /** The trailing characters of the signing secret. Never the secret itself. */
+    secretHint: string;
+    enabled: boolean;
+    /** Empty means every kind. */
+    eventKinds: string[];
+    /** Empty means every content type. */
+    contentTypes: string[];
+    allWorkspaces: boolean;
+    /** Empty when {@link allWorkspaces} is true. */
+    workspaceIds: string[];
+    headers: Record<string, string>;
+    /** Set when the endpoint switched itself off after repeated failures. */
+    disabledReason: string | null;
+    consecutiveFailures: number;
+    createdAt: string;
+    updatedAt: string;
+    lastDelivery: WebhookLastDelivery | null;
+};
+/** The one-line delivery summary shown against an endpoint in the list. */
+export type WebhookLastDelivery = {
+    id: string;
+    status: DeliveryStatus;
+    eventKind: string;
+    statusCode: number | null;
+    createdAt: string;
+};
+/**
+ * An endpoint together with its freshly minted secret.
+ *
+ * Returned only by create and rotate — the one moment the plaintext exists
+ * outside the server.
+ */
+export type CreatedWebhookEndpoint = {
+    endpoint: WebhookEndpoint;
+    secret: string;
+};
+/** One row of an endpoint's delivery log. */
+export type WebhookDelivery = {
+    id: string;
+    endpointId: string;
+    eventId: string;
+    eventKind: string;
+    workspaceId: string | null;
+    contentType: string | null;
+    status: DeliveryStatus;
+    attempts: number;
+    nextAttemptAt: string | null;
+    statusCode: number | null;
+    error: string | null;
+    durationMs: number | null;
+    createdAt: string;
+    completedAt: string | null;
+};
+/** A delivery with the body that was sent and the response that came back. */
+export type WebhookDeliveryDetail = WebhookDelivery & {
+    payload: unknown;
+    responseSnippet: string | null;
+};
+/** A page of deliveries. */
+export type WebhookDeliveryPage = {
+    items: WebhookDelivery[];
+    total: number;
+    page: number;
+    pageSize: number;
+    pageCount: number;
+};
+/** The outcome of "Send test", reported in the dialog that asked for it. */
+export type WebhookTestResult = {
+    ok: boolean;
+    statusCode: number | null;
+    error: string | null;
+    durationMs: number;
+    responseSnippet: string | null;
+};
+/** One subscribable event kind, as the picker renders it. */
+export type WebhookEventOption = {
+    kind: string;
+    group: string;
+    label: string;
+    scopedByContentType: boolean;
+    carriesWorkspace: boolean;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/domain/types/webhook/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/domain/types/webhook/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,iBAAiB,mEAMpB,CAAC;AAEX,wCAAwC;AACxC,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,wDAAwD;AACxD,MAAM,MAAM,eAAe,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sCAAsC;IACtC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,gDAAgD;IAChD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,yEAAyE;IACzE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC5C,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,mBAAmB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACjC,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,4BAA4B;AAC5B,MAAM,MAAM,mBAAmB,GAAG;IAC9B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,kBAAkB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,OAAO,CAAC;CAC7B,CAAC"}

package/dist/lib/domain/types/webhook/index.js

@@ -0,0 +1,18 @@
+/**
+ * Every state a delivery can be in.
+ *
+ * Restated here rather than imported from `@orthacms/webhooks-domain`, and that
+ * is deliberate twice over. It is the convention — the admin restates the
+ * server's contracts locally, so a server-side rename surfaces as a type error
+ * here instead of as `undefined` in a cell. And it is a hard requirement: that
+ * package's barrel re-exports the HMAC helpers, which import `node:crypto`, so
+ * importing anything at all from it puts a Node built-in in the browser bundle
+ * and the whole admin fails to render.
+ */
+export const DELIVERY_STATUSES = [
+    'pending',
+    'delivering',
+    'succeeded',
+    'failed',
+    'dead'
+];

package/dist/lib/domain/types/workspaceOption/index.d.ts

@@ -0,0 +1,16 @@
+/** A workspace as the endpoint editor's picker renders it. */
+export type WorkspaceOption = {
+    id: string;
+    name: string;
+    description: string | null;
+    /**
+     * The content-type slugs this workspace was granted (`workspace_content`).
+     *
+     * Empty means **granted nothing**, never "no filtering" — the same rule the
+     * server's own `WorkspaceGrantsQuery` states. The editor narrows its type
+     * picker to the union of the chosen workspaces' grants, because a type this
+     * workspace cannot hold can never produce an event here.
+     */
+    contentTypes: string[];
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/domain/types/workspaceOption/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/domain/types/workspaceOption/index.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,MAAM,MAAM,eAAe,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC"}

package/dist/lib/domain/types/workspaceOption/index.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/infrastructure/httpWebhookGateway/index.d.ts

@@ -0,0 +1,11 @@
+import type { WebhookGateway } from '../webhookGateway';
+/**
+ * HTTP implementation of {@link WebhookGateway} over the shared `apiClient`
+ * (axios, same-origin, cookie-authed; paths omit the `/api` dev-proxy prefix).
+ *
+ * Every response goes through a mapper and every failure through `toApiError`,
+ * so callers see this plugin's models and `ApiError` rather than axios
+ * internals. The single place `apiClient` is used in this package.
+ */
+export declare const httpWebhookGateway: WebhookGateway;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/httpWebhookGateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/httpWebhookGateway/index.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAoB,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAkC1E;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,EAAE,cA8JhC,CAAC"}

package/dist/lib/infrastructure/httpWebhookGateway/index.js

@@ -0,0 +1,138 @@
+import { apiClient, toApiError } from '@orthacms/utils-admin';
+import { toWebhookDelivery, toWebhookDeliveryDetail, toWebhookEndpoint, toContentTypeOption, toWebhookEventOption, toWorkspaceOption } from '../webhookMapper';
+/** Maps a created/rotated endpoint, secret included. */
+function toCreated(dto) {
+    return { endpoint: toWebhookEndpoint(dto.endpoint), secret: dto.secret };
+}
+/**
+ * HTTP implementation of {@link WebhookGateway} over the shared `apiClient`
+ * (axios, same-origin, cookie-authed; paths omit the `/api` dev-proxy prefix).
+ *
+ * Every response goes through a mapper and every failure through `toApiError`,
+ * so callers see this plugin's models and `ApiError` rather than axios
+ * internals. The single place `apiClient` is used in this package.
+ */
+export const httpWebhookGateway = {
+    async list() {
+        try {
+            const { data } = await apiClient.get('/webhooks');
+            return data.map(toWebhookEndpoint);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async get(id) {
+        try {
+            const { data } = await apiClient.get(`/webhooks/${id}`);
+            return toWebhookEndpoint(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async create(input) {
+        try {
+            const { data } = await apiClient.post('/webhooks', input);
+            return toCreated(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async update(id, input) {
+        try {
+            const { data } = await apiClient.patch(`/webhooks/${id}`, input);
+            return toWebhookEndpoint(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async remove(id) {
+        try {
+            await apiClient.delete(`/webhooks/${id}`);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async rotateSecret(id) {
+        try {
+            const { data } = await apiClient.post(`/webhooks/${id}/secret`);
+            return toCreated(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async test(id) {
+        try {
+            const { data } = await apiClient.post(`/webhooks/${id}/test`);
+            return data;
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async listDeliveries(id, params) {
+        try {
+            const { data } = await apiClient.get(`/webhooks/${id}/deliveries`, { params });
+            return { ...data, items: data.items.map(toWebhookDelivery) };
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async getDelivery(id, deliveryId) {
+        try {
+            const { data } = await apiClient.get(`/webhooks/${id}/deliveries/${deliveryId}`);
+            return toWebhookDeliveryDetail(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async redeliver(id, deliveryId) {
+        try {
+            const { data } = await apiClient.post(`/webhooks/${id}/deliveries/${deliveryId}/redeliver`);
+            return toWebhookDelivery(data);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async listEvents() {
+        try {
+            const { data } = await apiClient.get('/webhook-events');
+            return data.map(toWebhookEventOption);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async listWorkspaceOptions() {
+        try {
+            // Unpaginated and scoped to the caller's memberships by the server
+            // — `GET /api/workspaces` returns a bare array, which is also what
+            // the API-tokens picker reads.
+            const { data } = await apiClient.get('/workspaces');
+            return data.map(toWorkspaceOption);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    },
+    async listContentTypeOptions() {
+        try {
+            // The registry the Content Library reads, not a webhooks-owned
+            // list: there is one source of truth for what types exist, and it
+            // is code, so this plugin borrows it rather than storing its own.
+            const { data } = await apiClient.get('/content-schema');
+            return data.map(toContentTypeOption);
+        }
+        catch (error) {
+            throw toApiError(error);
+        }
+    }
+};

package/dist/lib/infrastructure/serverMessageOf/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The message the **server** wrote, when it wrote one.
+ *
+ * `ApiError.message` is axios's own text ("Request failed with status code
+ * 422"), which is useless in a form. The server's message — the one written for
+ * whoever typed the URL — is in the parsed body, which `ApiError` deliberately
+ * leaves opaque as `details` so the transport layer does not decide what an
+ * endpoint's error shape means.
+ *
+ * This decides it for this endpoint: NestJS's exception filter puts a human
+ * message on `message`, and a `ValidationPipe` failure puts an array there
+ * instead. An array is not shown — those are field-level messages the form
+ * already renders — so the caller falls back to its own copy.
+ */
+export declare function serverMessageOf(error: unknown): string | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/serverMessageOf/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/serverMessageOf/index.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQ7D"}

package/dist/lib/infrastructure/serverMessageOf/index.js

@@ -0,0 +1,24 @@
+import { ApiError } from '@orthacms/utils-admin';
+/**
+ * The message the **server** wrote, when it wrote one.
+ *
+ * `ApiError.message` is axios's own text ("Request failed with status code
+ * 422"), which is useless in a form. The server's message — the one written for
+ * whoever typed the URL — is in the parsed body, which `ApiError` deliberately
+ * leaves opaque as `details` so the transport layer does not decide what an
+ * endpoint's error shape means.
+ *
+ * This decides it for this endpoint: NestJS's exception filter puts a human
+ * message on `message`, and a `ValidationPipe` failure puts an array there
+ * instead. An array is not shown — those are field-level messages the form
+ * already renders — so the caller falls back to its own copy.
+ */
+export function serverMessageOf(error) {
+    if (!(error instanceof ApiError))
+        return null;
+    const details = error.details;
+    if (typeof details !== 'object' || details === null)
+        return null;
+    const message = details['message'];
+    return typeof message === 'string' && message.length > 0 ? message : null;
+}

package/dist/lib/infrastructure/webhookGateway/index.d.ts

@@ -0,0 +1,62 @@
+import type { CreatedWebhookEndpoint, WebhookDelivery, WebhookDeliveryDetail, WebhookDeliveryPage, WebhookEndpoint, WebhookEventOption, WebhookTestResult } from '../../domain/types/webhook';
+import type { ContentTypeOption } from '../../domain/types/contentTypeOption';
+import type { WorkspaceOption } from '../../domain/types/workspaceOption';
+import type { DeliveriesListParams } from '../webhooksKeys';
+/**
+ * What the endpoint editor submits.
+ *
+ * The three filters are all optional and all mean "everything" when omitted —
+ * which is also what the server does with them, so the dialog's "All" toggles
+ * map to simply not sending the field.
+ */
+export type SaveWebhookInput = {
+    name: string;
+    url: string;
+    enabled?: boolean;
+    eventKinds?: string[];
+    contentTypes?: string[];
+    allWorkspaces?: boolean;
+    workspaceIds?: string[];
+    headers?: Record<string, string>;
+};
+/**
+ * The port over the webhooks management API — the one seam this plugin talks
+ * to instead of `apiClient`. {@link httpWebhookGateway} is the implementation.
+ */
+export type WebhookGateway = {
+    /** Every endpoint via `GET /api/webhooks`. */
+    list(): Promise<WebhookEndpoint[]>;
+    /** One endpoint via `GET /api/webhooks/:id`. */
+    get(id: string): Promise<WebhookEndpoint>;
+    /**
+     * Creates one via `POST /api/webhooks`. The result carries the one-time
+     * signing secret — it is never returned again.
+     */
+    create(input: SaveWebhookInput): Promise<CreatedWebhookEndpoint>;
+    /** Updates one via `PATCH /api/webhooks/:id`. */
+    update(id: string, input: SaveWebhookInput): Promise<WebhookEndpoint>;
+    /** Deletes one, and its log, via `DELETE /api/webhooks/:id`. */
+    remove(id: string): Promise<void>;
+    /** Mints a new signing secret via `POST /api/webhooks/:id/secret`. */
+    rotateSecret(id: string): Promise<CreatedWebhookEndpoint>;
+    /** Sends a `ping` and reports the response via `POST /api/webhooks/:id/test`. */
+    test(id: string): Promise<WebhookTestResult>;
+    /** One page of the delivery log. */
+    listDeliveries(id: string, params: DeliveriesListParams): Promise<WebhookDeliveryPage>;
+    /** One delivery with its request and response bodies. */
+    getDelivery(id: string, deliveryId: string): Promise<WebhookDeliveryDetail>;
+    /** Queues the same event again. */
+    redeliver(id: string, deliveryId: string): Promise<WebhookDelivery>;
+    /** The subscribable event catalogue, for the editor's picker. */
+    listEvents(): Promise<WebhookEventOption[]>;
+    /** Every workspace, for the editor's workspace picker. */
+    listWorkspaceOptions(): Promise<WorkspaceOption[]>;
+    /**
+     * The code-defined content types, for the editor's type picker.
+     *
+     * A convenience over a free-text filter rather than the set of legal
+     * values: an endpoint may name a type this build does not define.
+     */
+    listContentTypeOptions(): Promise<ContentTypeOption[]>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/webhookGateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/webhookGateway/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG;IACzB,8CAA8C;IAC9C,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACnC,gDAAgD;IAChD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,iDAAiD;IACjD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACtE,gEAAgE;IAChE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,sEAAsE;IACtE,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC1D,iFAAiF;IACjF,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7C,oCAAoC;IACpC,cAAc,CACV,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC,yDAAyD;IACzD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC5E,mCAAmC;IACnC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpE,iEAAiE;IACjE,UAAU,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC5C,0DAA0D;IAC1D,oBAAoB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACnD;;;;;OAKG;IACH,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CAC1D,CAAC"}

package/dist/lib/infrastructure/webhookGateway/index.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/infrastructure/webhookMapper/index.d.ts

@@ -0,0 +1,104 @@
+import type { WebhookDelivery, WebhookDeliveryDetail, WebhookEndpoint, WebhookEventOption } from '../../domain/types/webhook';
+import type { ContentTypeOption } from '../../domain/types/contentTypeOption';
+import type { WorkspaceOption } from '../../domain/types/workspaceOption';
+/**
+ * The wire shapes and the mapping into the admin's models — the
+ * anti-corruption layer for this plugin.
+ *
+ * The admin restates the server's view types locally rather than importing
+ * them: the module boundary forbids reaching into a server package, and the
+ * restatement is what makes a server-side rename show up here as a type error
+ * instead of as `undefined` in a cell.
+ */
+/** `GET /api/webhooks` and `GET /api/webhooks/:id`. */
+export type WebhookEndpointResponse = {
+    id: string;
+    name: string;
+    url: string;
+    secretHint: string;
+    enabled: boolean;
+    eventKinds: string[];
+    contentTypes: string[];
+    allWorkspaces: boolean;
+    workspaceIds: string[];
+    headers: Record<string, string>;
+    disabledReason: string | null;
+    consecutiveFailures: number;
+    createdAt: string;
+    updatedAt: string;
+    lastDelivery: WebhookLastDeliveryResponse | null;
+};
+/** The last-delivery summary carried on an endpoint row. */
+export type WebhookLastDeliveryResponse = {
+    id: string;
+    status: string;
+    eventKind: string;
+    statusCode: number | null;
+    createdAt: string;
+};
+/** The create/rotate response — the only one carrying a secret. */
+export type CreatedWebhookEndpointResponse = {
+    endpoint: WebhookEndpointResponse;
+    secret: string;
+};
+/** One row of `GET /api/webhooks/:id/deliveries`. */
+export type WebhookDeliveryResponse = {
+    id: string;
+    endpointId: string;
+    eventId: string;
+    eventKind: string;
+    workspaceId: string | null;
+    contentType: string | null;
+    status: string;
+    attempts: number;
+    nextAttemptAt: string | null;
+    statusCode: number | null;
+    error: string | null;
+    durationMs: number | null;
+    createdAt: string;
+    completedAt: string | null;
+};
+/** `GET /api/webhooks/:id/deliveries/:deliveryId`. */
+export type WebhookDeliveryDetailResponse = WebhookDeliveryResponse & {
+    payload: unknown;
+    responseSnippet: string | null;
+};
+/** `GET /api/webhook-events`. */
+export type WebhookEventResponse = {
+    kind: string;
+    group: string;
+    label: string;
+    scopedByContentType: boolean;
+    carriesWorkspace: boolean;
+};
+/** Only the fields the workspace picker needs from `GET /api/workspaces`. */
+export type ContentTypeSummaryResponse = {
+    name: string;
+    label: string;
+};
+export type WorkspaceOptionResponse = {
+    id: string;
+    name: string;
+    description: string | null;
+    /** Granted content-type slugs; absent on an older server. */
+    content?: string[];
+};
+/** Maps an endpoint from the wire. */
+export declare function toWebhookEndpoint(dto: WebhookEndpointResponse): WebhookEndpoint;
+/** Maps one delivery row. */
+export declare function toWebhookDelivery(dto: WebhookDeliveryResponse): WebhookDelivery;
+/** Maps one delivery with its bodies. */
+export declare function toWebhookDeliveryDetail(dto: WebhookDeliveryDetailResponse): WebhookDeliveryDetail;
+/** Maps one event descriptor. */
+export declare function toWebhookEventOption(dto: WebhookEventResponse): WebhookEventOption;
+/** Maps a workspace row to the picker's option shape. */
+export declare function toWorkspaceOption(dto: WorkspaceOptionResponse): WorkspaceOption;
+/**
+ * Maps one content type from the registry.
+ *
+ * Only the two fields the picker needs — the rest of a summary (kind, path,
+ * `i18n`, …) describes how the type behaves, which the subscription filter has
+ * no opinion about.
+ */
+export declare function toContentTypeOption(dto: ContentTypeSummaryResponse): ContentTypeOption;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/infrastructure/webhookMapper/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/infrastructure/webhookMapper/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,eAAe,EACf,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAErB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E;;;;;;;;GAQG;AAEH,uDAAuD;AACvD,MAAM,MAAM,uBAAuB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,2BAA2B,GAAG,IAAI,CAAC;CACpD,CAAC;AAEF,4DAA4D;AAC5D,MAAM,MAAM,2BAA2B,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,8BAA8B,GAAG;IACzC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,qDAAqD;AACrD,MAAM,MAAM,uBAAuB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,sDAAsD;AACtD,MAAM,MAAM,6BAA6B,GAAG,uBAAuB,GAAG;IAClE,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,iCAAiC;AACjC,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEF,6EAA6E;AAC7E,MAAM,MAAM,0BAA0B,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,sCAAsC;AACtC,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,uBAAuB,GAC7B,eAAe,CAKjB;AAOD,6BAA6B;AAC7B,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,uBAAuB,GAC7B,eAAe,CAEjB;AAED,yCAAyC;AACzC,wBAAgB,uBAAuB,CACnC,GAAG,EAAE,6BAA6B,GACnC,qBAAqB,CAMvB;AAED,iCAAiC;AACjC,wBAAgB,oBAAoB,CAChC,GAAG,EAAE,oBAAoB,GAC1B,kBAAkB,CAEpB;AAED,yDAAyD;AACzD,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,uBAAuB,GAC7B,eAAe,CAUjB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAC/B,GAAG,EAAE,0BAA0B,GAChC,iBAAiB,CAEnB"}