@relayfile/core 0.1.0 → 0.1.2

package/dist/webhooks.d.ts

@@ -62,12 +62,22 @@ export interface IngestWebhookOptions {
     generateEnvelopeId?: () => string;
     coalesceWindowMs?: number;
     /**
-     * Optional signature verification callback. When provided, called with the
-     * raw input before processing. Return `true` if the payload signature is
-     * valid, `false` to reject the webhook. Callers should implement
-     * HMAC/RSA verification in this callback at the HTTP handler layer.
+     * Signature verification callback. Called with the raw input before
+     * processing. Return `true` if the payload signature is valid, `false` to
+     * reject the webhook. Callers should implement HMAC/RSA verification in
+     * this callback at the HTTP handler layer.
+     *
+     * When not provided, all webhooks are rejected unless
+     * `requireSignature` is explicitly set to `false`.
      */
     signatureVerifier?: (input: IngestWebhookInput) => boolean;
+    /**
+     * Whether signature verification is required. Defaults to `true`
+     * (fail-closed). When `true` and no `signatureVerifier` is provided,
+     * all webhooks are rejected with status `"signature_missing"`.
+     * Set to `false` only in trusted/internal environments.
+     */
+    requireSignature?: boolean;
 }
 export interface WebhookStorageAdapter extends StorageAdapter {
     getEnvelopeByDelivery(workspaceId: string, provider: string, deliveryId: string): EnvelopeRow | null;

package/dist/webhooks.js

@@ -17,6 +17,14 @@ import { normalizePath, DEFAULT_CONTENT_TYPE, MAX_FILE_BYTES, encodedSize } from
 export function ingestWebhook(storage, input, options = {}) {
     const envelopeStorage = getWebhookStorage(storage);
     const correlationId = input.correlationId?.trim() ?? "";
+    const requireSignature = options.requireSignature === true;
+    if (requireSignature && !options.signatureVerifier) {
+        return {
+            status: "signature_missing",
+            envelopeId: "",
+            correlationId,
+        };
+    }
     if (options.signatureVerifier && !options.signatureVerifier(input)) {
         return {
             status: "signature_invalid",
@@ -210,7 +218,6 @@ export function applyWebhookEnvelope(storage, envelope, options = {}) {
                 revision: null,
             };
         }
-        const revision = storage.nextRevision();
         const content = typeof event.content === "string"
             ? event.content
             : JSON.stringify(event.data ?? {});
@@ -224,6 +231,7 @@ export function applyWebhookEnvelope(storage, envelope, options = {}) {
                 reason: "file_too_large",
             };
         }
+        const revision = storage.nextRevision();
         // Strip permissions from webhook-provided semantics to prevent
         // external webhooks from injecting or overwriting ACL rules.
         const semantics = normalizeSemantics(event.semantics);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@relayfile/core",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Shared business logic for relayfile — file operations, ACL, queries, events, and writeback lifecycle",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",