@rytass/bpm-core-nestjs-module 0.13.3 → 0.13.4

package/src/lib/workflow-webhook/workflow-webhook-delivery-scheduler.service.js

@@ -0,0 +1,92 @@
+"use strict";
+var WorkflowWebhookDeliverySchedulerService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowWebhookDeliverySchedulerService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const workflow_webhook_delivery_service_1 = require("./workflow-webhook-delivery.service");
+const workflow_webhook_service_1 = require("./workflow-webhook.service");
+/**
+ * The fallback that retries failed attempts, releases rows the immediate kick
+ * missed, and reclaims rows a crashed worker left in progress. `SKIP LOCKED`
+ * in the claim lets several API instances run it at once.
+ */
+let WorkflowWebhookDeliverySchedulerService = WorkflowWebhookDeliverySchedulerService_1 = class WorkflowWebhookDeliverySchedulerService {
+    constructor(deliveryService, webhookService) {
+        this.deliveryService = deliveryService;
+        this.webhookService = webhookService;
+        this.logger = new common_1.Logger(WorkflowWebhookDeliverySchedulerService_1.name);
+        this.timer = null;
+        this.scanning = false;
+    }
+    async onApplicationBootstrap() {
+        if (process.env.NODE_ENV === 'test' || !(await this.isEnabled())) {
+            return;
+        }
+        this.timer = setInterval(() => {
+            void this.scan();
+        }, this.webhookService.readOptions().delivery.scanIntervalMs);
+        this.timer.unref();
+    }
+    onApplicationShutdown() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    /**
+     * Unset means "on when there is anything to deliver to": a host with no
+     * endpoints gets no idle timer, and one with endpoints never silently loses
+     * its retries.
+     */
+    async isEnabled() {
+        const configured = this.webhookService.readOptions().delivery.schedulerEnabled;
+        if (configured !== null) {
+            return configured;
+        }
+        if (!this.webhookService.hasEndpointSources()) {
+            return false;
+        }
+        // Endpoints can be added in the database at any time, so an empty list
+        // at boot says nothing about tomorrow; a scan with nothing due is cheap.
+        if (this.webhookService.hasDatabaseSource()) {
+            return true;
+        }
+        try {
+            return ((await this.webhookService.listEndpoints({ includeDeprecated: true }))
+                .length > 0);
+        }
+        catch {
+            // A source that cannot list its endpoints at boot may still have rows
+            // to retry; running an idle scan is cheaper than losing them.
+            this.logger.warn('Could not list webhook endpoints at boot; the delivery scheduler runs anyway');
+            return true;
+        }
+    }
+    async scan() {
+        // A slow receiver must not stack scans on top of each other.
+        if (this.scanning) {
+            return;
+        }
+        this.scanning = true;
+        try {
+            const count = await this.deliveryService.deliverDue();
+            if (count) {
+                this.logger.log(`Attempted ${count} webhook deliveries`);
+            }
+        }
+        catch (error) {
+            this.logger.error(error instanceof Error ? error.message : 'Webhook delivery scan failed');
+        }
+        finally {
+            this.scanning = false;
+        }
+    }
+};
+exports.WorkflowWebhookDeliverySchedulerService = WorkflowWebhookDeliverySchedulerService;
+exports.WorkflowWebhookDeliverySchedulerService = WorkflowWebhookDeliverySchedulerService = WorkflowWebhookDeliverySchedulerService_1 = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [workflow_webhook_delivery_service_1.WorkflowWebhookDeliveryService,
+        workflow_webhook_service_1.WorkflowWebhookService])
+], WorkflowWebhookDeliverySchedulerService);
+//# sourceMappingURL=workflow-webhook-delivery-scheduler.service.js.map

package/src/lib/workflow-webhook/workflow-webhook-delivery-scheduler.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-webhook-delivery-scheduler.service.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/workflow-webhook/workflow-webhook-delivery-scheduler.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAKwB;AACxB,2FAAqF;AACrF,yEAAoE;AAEpE;;;;GAIG;AAEI,IAAM,uCAAuC,+CAA7C,MAAM,uCAAuC;IASlD,YACmB,eAA+C,EAC/C,cAAsC;QADtC,oBAAe,GAAf,eAAe,CAAgC;QAC/C,mBAAc,GAAd,cAAc,CAAwB;QARxC,WAAM,GAAG,IAAI,eAAM,CAClC,yCAAuC,CAAC,IAAI,CAC7C,CAAC;QACM,UAAK,GAA0B,IAAI,CAAC;QACpC,aAAQ,GAAG,KAAK,CAAC;IAKtB,CAAC;IAEJ,KAAK,CAAC,sBAAsB;QAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACjE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAS,EAAE;YAClC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,qBAAqB;QACnB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,UAAU,GACd,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAE9D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CACL,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;iBACnE,MAAM,GAAG,CAAC,CACd,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,8DAA8D;YAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8EAA8E,CAC/E,CAAC;YAEF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,6DAA6D;QAC7D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC;YAEtD,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,KAAK,qBAAqB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CACxE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;CACF,CAAA;AA7FY,0FAAuC;kDAAvC,uCAAuC;IADnD,IAAA,mBAAU,GAAE;6CAWyB,kEAA8B;QAC/B,iDAAsB;GAX9C,uCAAuC,CA6FnD"}

package/src/lib/workflow-webhook/workflow-webhook-delivery.entity.d.ts

@@ -0,0 +1,53 @@
+import { WorkflowWebhookDeliveryStatusEnum } from './workflow-webhook-delivery.enums';
+/**
+ * The part of a webhook event that is decided when the NOTIFY node runs and
+ * must not change between attempts. `deliveryId` and `attempt` are added at
+ * send time.
+ */
+export interface WorkflowWebhookFrozenEvent {
+    readonly endpoint: {
+        readonly key: string;
+        readonly version: number;
+    };
+    readonly initiator: {
+        readonly memberId: string;
+    };
+    readonly instance: {
+        readonly id: string;
+        readonly templateId: string;
+        readonly templateVersionId: string;
+        readonly title: string;
+    };
+    readonly node: {
+        readonly id: string;
+        readonly label: string;
+    };
+    readonly occurredAt: string;
+    readonly parameters: Readonly<Record<string, unknown>>;
+}
+/**
+ * One queued NOTIFY webhook delivery (ADR 18 §3.5). Not a GraphQL type: the
+ * admin-facing view arrives in P3 and deliberately omits
+ * `lastErrorDetail` from anyone who is not an administrator.
+ */
+export declare class WorkflowWebhookDeliveryEntity {
+    id: string;
+    instanceId: string;
+    nodeId: string;
+    tokenId: string;
+    targetId: string;
+    endpointKey: string;
+    endpointVersion: number;
+    event: WorkflowWebhookFrozenEvent;
+    status: WorkflowWebhookDeliveryStatusEnum;
+    attemptCount: number;
+    nextRetryAt: Date | null;
+    lastAttemptAt: Date | null;
+    lastResponseStatus: number | null;
+    lastErrorCode: string | null;
+    /** Up to 500 characters of the response body. Administrators only. */
+    lastErrorDetail: string | null;
+    sentAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}

package/src/lib/workflow-webhook/workflow-webhook-delivery.entity.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowWebhookDeliveryEntity = void 0;
+const tslib_1 = require("tslib");
+const typeorm_1 = require("typeorm");
+const workflow_webhook_delivery_enums_1 = require("./workflow-webhook-delivery.enums");
+/**
+ * One queued NOTIFY webhook delivery (ADR 18 §3.5). Not a GraphQL type: the
+ * admin-facing view arrives in P3 and deliberately omits
+ * `lastErrorDetail` from anyone who is not an administrator.
+ */
+let WorkflowWebhookDeliveryEntity = class WorkflowWebhookDeliveryEntity {
+};
+exports.WorkflowWebhookDeliveryEntity = WorkflowWebhookDeliveryEntity;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryEntity.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('uuid', { name: 'instance_id' }),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryEntity.prototype, "instanceId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('text', { name: 'node_id' }),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryEntity.prototype, "nodeId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('uuid', { name: 'token_id' }),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryEntity.prototype, "tokenId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('text', { name: 'target_id' }),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryEntity.prototype, "targetId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('text', { name: 'endpoint_key' }),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryEntity.prototype, "endpointKey", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('integer', { name: 'endpoint_version' }),
+    tslib_1.__metadata("design:type", Number)
+], WorkflowWebhookDeliveryEntity.prototype, "endpointVersion", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('jsonb'),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryEntity.prototype, "event", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('text'),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryEntity.prototype, "status", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('integer', { default: 0, name: 'attempt_count' }),
+    tslib_1.__metadata("design:type", Number)
+], WorkflowWebhookDeliveryEntity.prototype, "attemptCount", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('timestamptz', { name: 'next_retry_at', nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryEntity.prototype, "nextRetryAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('timestamptz', { name: 'last_attempt_at', nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryEntity.prototype, "lastAttemptAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('integer', { name: 'last_response_status', nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryEntity.prototype, "lastResponseStatus", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('text', { name: 'last_error_code', nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryEntity.prototype, "lastErrorCode", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('text', { name: 'last_error_detail', nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryEntity.prototype, "lastErrorDetail", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)('timestamptz', { name: 'sent_at', nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryEntity.prototype, "sentAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.CreateDateColumn)({ name: 'created_at', type: 'timestamptz' }),
+    tslib_1.__metadata("design:type", Date)
+], WorkflowWebhookDeliveryEntity.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.UpdateDateColumn)({ name: 'updated_at', type: 'timestamptz' }),
+    tslib_1.__metadata("design:type", Date)
+], WorkflowWebhookDeliveryEntity.prototype, "updatedAt", void 0);
+exports.WorkflowWebhookDeliveryEntity = WorkflowWebhookDeliveryEntity = tslib_1.__decorate([
+    (0, typeorm_1.Entity)('workflow_webhook_deliveries'),
+    (0, typeorm_1.Index)('IDX_workflow_webhook_deliveries_pending', [
+        'status',
+        'nextRetryAt',
+        'createdAt',
+    ]),
+    (0, typeorm_1.Index)('IDX_workflow_webhook_deliveries_instance', ['instanceId', 'createdAt']),
+    (0, typeorm_1.Unique)('UQ_workflow_webhook_deliveries_token_target', ['tokenId', 'targetId'])
+], WorkflowWebhookDeliveryEntity);
+//# sourceMappingURL=workflow-webhook-delivery.entity.js.map

package/src/lib/workflow-webhook/workflow-webhook-delivery.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-webhook-delivery.entity.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/workflow-webhook/workflow-webhook-delivery.entity.ts"],"names":[],"mappings":";;;;AAAA,qCAQiB;AACjB,uFAAsF;AA6BtF;;;;GAIG;AASI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;CAuDzC,CAAA;AAvDY,sEAA6B;AAExC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;yDACnB;AAGZ;IADC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;iEACpB;AAGpB;IADC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;6DACpB;AAGhB;IADC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;;8DACpB;AAGjB;IADC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;;+DACpB;AAGlB;IADC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;;kEACpB;AAGrB;IADC,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;;sEACvB;AAGzB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;;4DACmB;AAGnC;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;6DAC4B;AAG3C;IADC,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;;mEACnC;AAGtB;IADC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kEACvC;AAG1B;IADC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oEACvC;AAG5B;IADC,IAAA,gBAAM,EAAC,SAAS,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yEACjC;AAGnC;IADC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oEAC9B;AAI9B;IADC,IAAA,gBAAM,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sEAC9B;AAGhC;IADC,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6DACtC;AAGrB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;sCAClD,IAAI;gEAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;sCAClD,IAAI;gEAAC;wCAtDN,6BAA6B;IARzC,IAAA,gBAAM,EAAC,6BAA6B,CAAC;IACrC,IAAA,eAAK,EAAC,yCAAyC,EAAE;QAChD,QAAQ;QACR,aAAa;QACb,WAAW;KACZ,CAAC;IACD,IAAA,eAAK,EAAC,0CAA0C,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC9E,IAAA,gBAAM,EAAC,6CAA6C,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;GAClE,6BAA6B,CAuDzC"}

package/src/lib/workflow-webhook/workflow-webhook-delivery.enums.d.ts

@@ -0,0 +1,28 @@
+export declare enum WorkflowWebhookDeliveryStatusEnum {
+    DELIVERY_IN_PROGRESS = "DELIVERY_IN_PROGRESS",
+    FAILED = "FAILED",
+    PENDING = "PENDING",
+    SENT = "SENT"
+}
+/**
+ * Why a delivery attempt did not end in `SENT` (ADR 18 §3.6). Stored on the
+ * row and copied into the terminal activity log; never contains the URL or
+ * the response body.
+ */
+export declare const WORKFLOW_WEBHOOK_DELIVERY_ERROR_CODES: {
+    readonly BUILD_REQUEST_FAILED: "WEBHOOK_BUILD_REQUEST_FAILED";
+    /** An administrator disabled the (database) endpoint. */
+    readonly ENDPOINT_DISABLED: "WEBHOOK_ENDPOINT_DISABLED";
+    /** The endpoint source threw while looking the endpoint up. */
+    readonly ENDPOINT_LOOKUP_FAILED: "WEBHOOK_ENDPOINT_LOOKUP_FAILED";
+    readonly ENDPOINT_MISSING: "WEBHOOK_ENDPOINT_MISSING";
+    /** An unexpected error inside BPM itself; retried like a transient one. */
+    readonly INTERNAL_ERROR: "WEBHOOK_INTERNAL_ERROR";
+    readonly INVALID_REQUEST: "WEBHOOK_INVALID_REQUEST";
+    readonly NETWORK: "WEBHOOK_NETWORK";
+    readonly PARAMETER_INVALID: "WEBHOOK_PARAMETER_INVALID";
+    readonly REDIRECT: "WEBHOOK_REDIRECT";
+    readonly TIMEOUT: "WEBHOOK_TIMEOUT";
+    readonly URL_NOT_ALLOWED: "WEBHOOK_URL_NOT_ALLOWED";
+};
+export type WorkflowWebhookDeliveryErrorCode = (typeof WORKFLOW_WEBHOOK_DELIVERY_ERROR_CODES)[keyof typeof WORKFLOW_WEBHOOK_DELIVERY_ERROR_CODES] | `WEBHOOK_HTTP_${number}`;

package/src/lib/workflow-webhook/workflow-webhook-delivery.enums.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WORKFLOW_WEBHOOK_DELIVERY_ERROR_CODES = exports.WorkflowWebhookDeliveryStatusEnum = void 0;
+const graphql_1 = require("@nestjs/graphql");
+var WorkflowWebhookDeliveryStatusEnum;
+(function (WorkflowWebhookDeliveryStatusEnum) {
+    WorkflowWebhookDeliveryStatusEnum["DELIVERY_IN_PROGRESS"] = "DELIVERY_IN_PROGRESS";
+    WorkflowWebhookDeliveryStatusEnum["FAILED"] = "FAILED";
+    WorkflowWebhookDeliveryStatusEnum["PENDING"] = "PENDING";
+    WorkflowWebhookDeliveryStatusEnum["SENT"] = "SENT";
+})(WorkflowWebhookDeliveryStatusEnum || (exports.WorkflowWebhookDeliveryStatusEnum = WorkflowWebhookDeliveryStatusEnum = {}));
+(0, graphql_1.registerEnumType)(WorkflowWebhookDeliveryStatusEnum, {
+    name: 'BPMWorkflowWebhookDeliveryStatus',
+});
+/**
+ * Why a delivery attempt did not end in `SENT` (ADR 18 §3.6). Stored on the
+ * row and copied into the terminal activity log; never contains the URL or
+ * the response body.
+ */
+exports.WORKFLOW_WEBHOOK_DELIVERY_ERROR_CODES = {
+    BUILD_REQUEST_FAILED: 'WEBHOOK_BUILD_REQUEST_FAILED',
+    /** An administrator disabled the (database) endpoint. */
+    ENDPOINT_DISABLED: 'WEBHOOK_ENDPOINT_DISABLED',
+    /** The endpoint source threw while looking the endpoint up. */
+    ENDPOINT_LOOKUP_FAILED: 'WEBHOOK_ENDPOINT_LOOKUP_FAILED',
+    ENDPOINT_MISSING: 'WEBHOOK_ENDPOINT_MISSING',
+    /** An unexpected error inside BPM itself; retried like a transient one. */
+    INTERNAL_ERROR: 'WEBHOOK_INTERNAL_ERROR',
+    INVALID_REQUEST: 'WEBHOOK_INVALID_REQUEST',
+    NETWORK: 'WEBHOOK_NETWORK',
+    PARAMETER_INVALID: 'WEBHOOK_PARAMETER_INVALID',
+    REDIRECT: 'WEBHOOK_REDIRECT',
+    TIMEOUT: 'WEBHOOK_TIMEOUT',
+    URL_NOT_ALLOWED: 'WEBHOOK_URL_NOT_ALLOWED',
+};
+//# sourceMappingURL=workflow-webhook-delivery.enums.js.map

package/src/lib/workflow-webhook/workflow-webhook-delivery.enums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-webhook-delivery.enums.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/workflow-webhook/workflow-webhook-delivery.enums.ts"],"names":[],"mappings":";;;AAAA,6CAAmD;AAEnD,IAAY,iCAKX;AALD,WAAY,iCAAiC;IAC3C,kFAA6C,CAAA;IAC7C,sDAAiB,CAAA;IACjB,wDAAmB,CAAA;IACnB,kDAAa,CAAA;AACf,CAAC,EALW,iCAAiC,iDAAjC,iCAAiC,QAK5C;AAED,IAAA,0BAAgB,EAAC,iCAAiC,EAAE;IAClD,IAAI,EAAE,kCAAkC;CACzC,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,qCAAqC,GAAG;IACnD,oBAAoB,EAAE,8BAA8B;IACpD,yDAAyD;IACzD,iBAAiB,EAAE,2BAA2B;IAC9C,+DAA+D;IAC/D,sBAAsB,EAAE,gCAAgC;IACxD,gBAAgB,EAAE,0BAA0B;IAC5C,2EAA2E;IAC3E,cAAc,EAAE,wBAAwB;IACxC,eAAe,EAAE,yBAAyB;IAC1C,OAAO,EAAE,iBAAiB;IAC1B,iBAAiB,EAAE,2BAA2B;IAC9C,QAAQ,EAAE,kBAAkB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,eAAe,EAAE,yBAAyB;CAClC,CAAC"}

package/src/lib/workflow-webhook/workflow-webhook-delivery.object.d.ts

@@ -0,0 +1,28 @@
+import { WorkflowWebhookDeliveryStatusEnum } from './workflow-webhook-delivery.enums';
+/**
+ * An administrator's view of one NOTIFY webhook delivery (ADR 18 §3.10).
+ *
+ * Carries the outcome and nothing that reaches the receiver: no URL, no
+ * headers, no parameters. `lastErrorDetail` (at most 500 characters of a
+ * failing response, or an error's kind) is why this is admin-only.
+ */
+export declare class WorkflowWebhookDeliveryObject {
+    attemptCount: number;
+    createdAt: Date;
+    endpointKey: string;
+    /** `null` when the endpoint is no longer registered. */
+    endpointLabel: string | null;
+    endpointVersion: number;
+    id: string;
+    instanceId: string;
+    lastAttemptAt: Date | null;
+    lastErrorCode: string | null;
+    lastErrorDetail: string | null;
+    lastResponseStatus: number | null;
+    nextRetryAt: Date | null;
+    nodeId: string;
+    sentAt: Date | null;
+    status: WorkflowWebhookDeliveryStatusEnum;
+    targetId: string;
+    updatedAt: Date;
+}

package/src/lib/workflow-webhook/workflow-webhook-delivery.object.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowWebhookDeliveryObject = void 0;
+const tslib_1 = require("tslib");
+const graphql_1 = require("@nestjs/graphql");
+const workflow_webhook_delivery_enums_1 = require("./workflow-webhook-delivery.enums");
+/**
+ * An administrator's view of one NOTIFY webhook delivery (ADR 18 §3.10).
+ *
+ * Carries the outcome and nothing that reaches the receiver: no URL, no
+ * headers, no parameters. `lastErrorDetail` (at most 500 characters of a
+ * failing response, or an error's kind) is why this is admin-only.
+ */
+let WorkflowWebhookDeliveryObject = class WorkflowWebhookDeliveryObject {
+};
+exports.WorkflowWebhookDeliveryObject = WorkflowWebhookDeliveryObject;
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int),
+    tslib_1.__metadata("design:type", Number)
+], WorkflowWebhookDeliveryObject.prototype, "attemptCount", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", Date)
+], WorkflowWebhookDeliveryObject.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryObject.prototype, "endpointKey", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => String, { nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryObject.prototype, "endpointLabel", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int),
+    tslib_1.__metadata("design:type", Number)
+], WorkflowWebhookDeliveryObject.prototype, "endpointVersion", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryObject.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryObject.prototype, "instanceId", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => Date, { nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryObject.prototype, "lastAttemptAt", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => String, { nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryObject.prototype, "lastErrorCode", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => String, { nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryObject.prototype, "lastErrorDetail", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => graphql_1.Int, { nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryObject.prototype, "lastResponseStatus", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => Date, { nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryObject.prototype, "nextRetryAt", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryObject.prototype, "nodeId", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => Date, { nullable: true }),
+    tslib_1.__metadata("design:type", Object)
+], WorkflowWebhookDeliveryObject.prototype, "sentAt", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(() => workflow_webhook_delivery_enums_1.WorkflowWebhookDeliveryStatusEnum),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryObject.prototype, "status", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", String)
+], WorkflowWebhookDeliveryObject.prototype, "targetId", void 0);
+tslib_1.__decorate([
+    (0, graphql_1.Field)(),
+    tslib_1.__metadata("design:type", Date)
+], WorkflowWebhookDeliveryObject.prototype, "updatedAt", void 0);
+exports.WorkflowWebhookDeliveryObject = WorkflowWebhookDeliveryObject = tslib_1.__decorate([
+    (0, graphql_1.ObjectType)('BPMWorkflowWebhookDelivery')
+], WorkflowWebhookDeliveryObject);
+//# sourceMappingURL=workflow-webhook-delivery.object.js.map

package/src/lib/workflow-webhook/workflow-webhook-delivery.object.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-webhook-delivery.object.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/workflow-webhook/workflow-webhook-delivery.object.ts"],"names":[],"mappings":";;;;AAAA,6CAA6D;AAC7D,uFAAsF;AAEtF;;;;;;GAMG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;CAoDzC,CAAA;AApDY,sEAA6B;AAExC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,CAAC;;mEACK;AAGtB;IADC,IAAA,eAAK,GAAE;sCACI,IAAI;gEAAC;AAGjB;IADC,IAAA,eAAK,GAAE;;kEACa;AAIrB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oEACV;AAG9B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,CAAC;;sEACQ;AAGzB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;;yDACJ;AAGZ;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,YAAE,CAAC;;iEACI;AAGpB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oEACV;AAG5B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oEACV;AAG9B;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sEACR;AAGhC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,aAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yEACF;AAGnC;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;kEACZ;AAG1B;IADC,IAAA,eAAK,GAAE;;6DACQ;AAGhB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6DACjB;AAGrB;IADC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,mEAAiC,CAAC;;6DACJ;AAG3C;IADC,IAAA,eAAK,GAAE;;+DACU;AAGlB;IADC,IAAA,eAAK,GAAE;sCACI,IAAI;gEAAC;wCAnDN,6BAA6B;IADzC,IAAA,oBAAU,EAAC,4BAA4B,CAAC;GAC5B,6BAA6B,CAoDzC"}

package/src/lib/workflow-webhook/workflow-webhook-delivery.resolver.d.ts

@@ -0,0 +1,9 @@
+import { WorkflowWebhookDeliveryObject } from './workflow-webhook-delivery.object';
+import { WorkflowWebhookDeliveryService } from './workflow-webhook-delivery.service';
+export declare class WorkflowWebhookDeliveryResolver {
+    private readonly deliveryService;
+    constructor(deliveryService: WorkflowWebhookDeliveryService);
+    workflowWebhookDeliveries(instanceId: string): Promise<readonly WorkflowWebhookDeliveryObject[]>;
+    retryWorkflowWebhookDelivery(id: string, currentMemberId?: string | null): Promise<WorkflowWebhookDeliveryObject>;
+    private toObject;
+}

package/src/lib/workflow-webhook/workflow-webhook-delivery.resolver.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowWebhookDeliveryResolver = void 0;
+const tslib_1 = require("tslib");
+const graphql_1 = require("@nestjs/graphql");
+const bpm_auth_1 = require("../bpm-auth");
+const workflow_webhook_delivery_object_1 = require("./workflow-webhook-delivery.object");
+const workflow_webhook_delivery_service_1 = require("./workflow-webhook-delivery.service");
+let WorkflowWebhookDeliveryResolver = class WorkflowWebhookDeliveryResolver {
+    constructor(deliveryService) {
+        this.deliveryService = deliveryService;
+    }
+    async workflowWebhookDeliveries(instanceId) {
+        const rows = await this.deliveryService.listInstanceDeliveries(instanceId);
+        return Promise.all(rows.map((row) => this.toObject(row)));
+    }
+    async retryWorkflowWebhookDelivery(id, currentMemberId) {
+        return this.toObject(await this.deliveryService.retryFailedDelivery(id, currentMemberId ?? null));
+    }
+    async toObject(row) {
+        const endpointLabel = await this.deliveryService.readEndpointLabel(row);
+        // Field by field, so nothing on the entity that is not meant for this
+        // view — the frozen event with its parameters — can ride along.
+        return Object.assign(new workflow_webhook_delivery_object_1.WorkflowWebhookDeliveryObject(), {
+            attemptCount: row.attemptCount,
+            createdAt: row.createdAt,
+            endpointKey: row.endpointKey,
+            endpointLabel,
+            endpointVersion: row.endpointVersion,
+            id: row.id,
+            instanceId: row.instanceId,
+            lastAttemptAt: row.lastAttemptAt,
+            lastErrorCode: row.lastErrorCode,
+            lastErrorDetail: row.lastErrorDetail,
+            lastResponseStatus: row.lastResponseStatus,
+            nextRetryAt: row.nextRetryAt,
+            nodeId: row.nodeId,
+            sentAt: row.sentAt,
+            status: row.status,
+            targetId: row.targetId,
+            updatedAt: row.updatedAt,
+        });
+    }
+};
+exports.WorkflowWebhookDeliveryResolver = WorkflowWebhookDeliveryResolver;
+tslib_1.__decorate([
+    (0, graphql_1.Query)(() => [workflow_webhook_delivery_object_1.WorkflowWebhookDeliveryObject]),
+    tslib_1.__param(0, (0, graphql_1.Args)('instanceId', { type: () => graphql_1.ID })),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String]),
+    tslib_1.__metadata("design:returntype", Promise)
+], WorkflowWebhookDeliveryResolver.prototype, "workflowWebhookDeliveries", null);
+tslib_1.__decorate([
+    (0, graphql_1.Mutation)(() => workflow_webhook_delivery_object_1.WorkflowWebhookDeliveryObject),
+    tslib_1.__param(0, (0, graphql_1.Args)('id', { type: () => graphql_1.ID })),
+    tslib_1.__param(1, (0, bpm_auth_1.BPMCurrentMemberId)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], WorkflowWebhookDeliveryResolver.prototype, "retryWorkflowWebhookDelivery", null);
+exports.WorkflowWebhookDeliveryResolver = WorkflowWebhookDeliveryResolver = tslib_1.__decorate([
+    (0, graphql_1.Resolver)(),
+    (0, bpm_auth_1.BPMAdminOnly)(),
+    tslib_1.__metadata("design:paramtypes", [workflow_webhook_delivery_service_1.WorkflowWebhookDeliveryService])
+], WorkflowWebhookDeliveryResolver);
+//# sourceMappingURL=workflow-webhook-delivery.resolver.js.map

package/src/lib/workflow-webhook/workflow-webhook-delivery.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-webhook-delivery.resolver.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/workflow-webhook/workflow-webhook-delivery.resolver.ts"],"names":[],"mappings":";;;;AAAA,6CAAsE;AACtE,0CAA+D;AAE/D,yFAAmF;AACnF,2FAAqF;AAI9E,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAC1C,YACmB,eAA+C;QAA/C,oBAAe,GAAf,eAAe,CAAgC;IAC/D,CAAC;IAGE,AAAN,KAAK,CAAC,yBAAyB,CACW,UAAkB;QAE1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAE3E,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAGK,AAAN,KAAK,CAAC,4BAA4B,CACA,EAAU,EACpB,eAA+B;QAErD,OAAO,IAAI,CAAC,QAAQ,CAClB,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAC5C,EAAE,EACF,eAAe,IAAI,IAAI,CACxB,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,GAAkC;QAElC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAExE,sEAAsE;QACtE,gEAAgE;QAChE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,gEAA6B,EAAE,EAAE;YACxD,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa;YACb,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;YAC1C,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAtDY,0EAA+B;AAMpC;IADL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,gEAA6B,CAAC,CAAC;IAE1C,mBAAA,IAAA,cAAI,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,YAAE,EAAE,CAAC,CAAA;;;;gFAKxC;AAGK;IADL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,gEAA6B,CAAC;IAE3C,mBAAA,IAAA,cAAI,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,YAAE,EAAE,CAAC,CAAA;IAC9B,mBAAA,IAAA,6BAAkB,GAAE,CAAA;;;;mFAQtB;0CAzBU,+BAA+B;IAF3C,IAAA,kBAAQ,GAAE;IACV,IAAA,uBAAY,GAAE;6CAGuB,kEAA8B;GAFvD,+BAA+B,CAsD3C"}

package/src/lib/workflow-webhook/workflow-webhook-delivery.service.d.ts

@@ -0,0 +1,116 @@
+import { InjectionToken } from '@nestjs/common';
+import { EntityManager, Repository } from 'typeorm';
+import { ActivityLogEntity } from '../workflow-engine/activity-log.entity';
+import { WorkflowWebhookDeliveryEntity } from './workflow-webhook-delivery.entity';
+import { WorkflowWebhookEnqueueContext } from './workflow-webhook-enqueue';
+import { BPMResolvedWorkflowWebhookOptions } from './workflow-webhook-options';
+import { WorkflowWebhookService } from './workflow-webhook.service';
+import { BPMWorkflowWebhookEndpointEntry, BPMWorkflowWebhookEvent } from './workflow-webhook.types';
+export type WorkflowWebhookFetch = (input: string, init: RequestInit) => Promise<Response>;
+/**
+ * The HTTP client deliveries go through. Defaults to the global `fetch`;
+ * bound mainly so tests can observe requests without a network.
+ */
+export declare const BPM_WORKFLOW_WEBHOOK_FETCH: InjectionToken<WorkflowWebhookFetch>;
+/** What an administrator's test send came back with. */
+export interface WorkflowWebhookTestOutcome {
+    readonly errorCode: string | null;
+    /** Error kind, network code or a truncated response body; never the URL. */
+    readonly errorDetail: string | null;
+    readonly ok: boolean;
+    readonly status: number | null;
+}
+export declare class WorkflowWebhookDeliveryService {
+    private readonly deliveryRepository;
+    private readonly activityLogRepository;
+    private readonly webhookService;
+    private readonly options;
+    private readonly logger;
+    private readonly fetchImpl;
+    constructor(deliveryRepository: Repository<WorkflowWebhookDeliveryEntity>, activityLogRepository: Repository<ActivityLogEntity>, webhookService: WorkflowWebhookService, options?: BPMResolvedWorkflowWebhookOptions, fetchImpl?: WorkflowWebhookFetch);
+    /** The clock every attempt reads; separate so tests can pin it. */
+    readCurrentTime(): Date;
+    /**
+     * Queues a NOTIFY node's webhooks inside the engine transaction `manager`.
+     * Sends nothing: delivery starts only once that transaction commits
+     * (ADR 18 §3.5). Rows that can already be judged undeliverable are written
+     * as `FAILED` together with their terminal activity log.
+     */
+    enqueueNotifyWebhooks(manager: EntityManager, context: WorkflowWebhookEnqueueContext, targets: unknown): Promise<readonly string[]>;
+    /** Every delivery queued for an instance, oldest first (ADR 18 §3.10). */
+    listInstanceDeliveries(instanceId: string): Promise<readonly WorkflowWebhookDeliveryEntity[]>;
+    /**
+     * Puts a `FAILED` delivery back in the queue with a fresh attempt budget
+     * and starts it at once. The delivery id does not change, so a receiver
+     * that already processed an earlier attempt still recognizes it.
+     *
+     * Only `FAILED` rows that were actually attempted qualify. A row in flight
+     * or already sent would be sent again; a row that failed while being queued
+     * (endpoint missing, lookup failed, parameter invalid) froze an event that
+     * never passed the parameter checks, and sending it would break the
+     * endpoint's contract. The state change and the audit entry commit together.
+     */
+    retryFailedDelivery(id: string, actorMemberId: string | null): Promise<WorkflowWebhookDeliveryEntity>;
+    /**
+     * One scheduler pass: claim what is due, a few rows at a time, until the
+     * batch size is reached or nothing more is due.
+     *
+     * Claiming the whole batch up front and attempting it a few at a time left
+     * the rows at the back holding a claim while they waited; past the stale
+     * window another worker took them over. Claiming only what starts at once
+     * means a claimed row is always a row in flight.
+     */
+    deliverDue(now?: Date): Promise<number>;
+    /**
+     * Attempts specific rows right after the transaction that queued them
+     * committed, in groups that start together. Rows another worker already
+     * claimed, or that are not due, are skipped by the claim itself.
+     */
+    deliverByIds(ids: readonly string[], now?: Date): Promise<number>;
+    /**
+     * Starts every claimed row at once (never more than
+     * {@link MAX_CONCURRENT_ATTEMPTS}). Strictly one by one, a single receiver
+     * that runs into its timeout held every other delivery back by that long
+     * (seen on the wrapper host: a 10 s timeout delayed an unrelated endpoint by
+     * 10 s). Each row still re-stamps and writes back under its own claim.
+     */
+    private attemptTogether;
+    private attemptSafely;
+    private claim;
+    private attempt;
+    private resolveOutcome;
+    /**
+     * Sends one event to an endpoint exactly as a delivery attempt would —
+     * same refusals, allowlist, timeout, redirect handling and signature —
+     * without a delivery row, for an administrator's test send (ADR 18 §3.13).
+     * The endpoint may be disabled: testing before enabling is the point.
+     */
+    sendTestEvent(entry: BPMWorkflowWebhookEndpointEntry, event: BPMWorkflowWebhookEvent): Promise<WorkflowWebhookTestOutcome>;
+    private sendEvent;
+    /**
+     * A request BPM refuses to send at all. These never become retryable: the
+     * same endpoint would return the same request next time. None of the
+     * details quote the URL.
+     */
+    private readRequestRefusal;
+    private post;
+    private record;
+    /**
+     * The endpoint's display name for the timeline, which every reader of the
+     * instance sees; `null` when the endpoint is gone and the key must stand in.
+     */
+    readEndpointLabel(row: Pick<WorkflowWebhookDeliveryEntity, 'endpointKey' | 'endpointVersion'>, manager?: EntityManager): Promise<string | null>;
+    /** Takes the claim over from `from` to `to`; `false` if it moved on. */
+    private moveClaim;
+    /**
+     * `base * 2^(attempt - 1)` with ±20 % jitter so a receiver that came back up
+     * is not hit by every queued delivery in the same second, then capped: the
+     * cap is a promise to the operator, so jitter may not exceed it.
+     */
+    readRetryDelay(attempt: number): number;
+    /**
+     * Visible to everyone who can read the instance, so it carries the outcome
+     * and nothing else: no URL, no response body, no parameters.
+     */
+    private createTerminalActivity;
+}