@sakeetech/medusa-payment-viva 0.2.2

package/dist/cli/plan.js

@@ -0,0 +1,128 @@
+"use strict";
+/**
+ * plan.ts — pure, IO-free webhook plan computation.
+ *
+ * Computes the diff between desired webhook state (from config) and current
+ * registrations (from Viva API), returning a deterministic action list.
+ *
+ * Per Viva docs, max 10 webhook URLs per event type.
+ *
+ * @see references/viva-docs/md/webhooks-for-payments.txt:134 (10-URL limit)
+ * @see references/viva-docs/md/isv-partner-program.txt:196 (ISV webhook setup flow)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computePlan = computePlan;
+// ---------------------------------------------------------------------------
+// computePlan
+// ---------------------------------------------------------------------------
+/**
+ * Computes the desired-vs-current diff and returns an ordered action list.
+ *
+ * Action ordering for human readability:
+ *   1. REGISTER (sorted by eventTypeId)
+ *   2. SKIP_ALREADY_REGISTERED (sorted by eventTypeId)
+ *   3. DEACTIVATE_DRIFT (sorted by eventTypeId)
+ *   4. WARN_LIMIT_NEAR (sorted by eventTypeId)
+ *   5. ABORT_LIMIT_HIT (sorted by eventTypeId)
+ *
+ * This is deterministic: same logical inputs always produce the same output
+ * regardless of input ordering.
+ */
+function computePlan(input) {
+    const { desired, current, perEventTypeLimit = 10, nearLimitFraction = 0.8, reconcileDrift = false, ownedHostnamePattern, } = input;
+    const nearLimitThreshold = Math.floor(perEventTypeLimit * nearLimitFraction);
+    // -------------------------------------------------------------------------
+    // Build a fast-lookup index of current registrations by eventTypeId + url.
+    // -------------------------------------------------------------------------
+    // Index: eventTypeId → url → WebhookRegistration
+    const currentByTypeAndUrl = new Map();
+    // Index: eventTypeId → all registrations (for limit counting)
+    const currentByType = new Map();
+    for (const reg of current) {
+        if (!currentByType.has(reg.eventTypeId)) {
+            currentByType.set(reg.eventTypeId, []);
+        }
+        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+        currentByType.get(reg.eventTypeId).push(reg);
+        if (!currentByTypeAndUrl.has(reg.eventTypeId)) {
+            currentByTypeAndUrl.set(reg.eventTypeId, new Map());
+        }
+        // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+        currentByTypeAndUrl.get(reg.eventTypeId).set(reg.url, reg);
+    }
+    // -------------------------------------------------------------------------
+    // Accumulators (by bucket for deterministic ordering).
+    // -------------------------------------------------------------------------
+    const registerActions = [];
+    const skipActions = [];
+    const warnActions = [];
+    const abortActions = [];
+    // Work on a sorted copy of desired for deterministic output.
+    const sortedDesired = [...desired].sort((a, b) => a.eventTypeId - b.eventTypeId);
+    for (const d of sortedDesired) {
+        const urlIndex = currentByTypeAndUrl.get(d.eventTypeId);
+        const existingForType = currentByType.get(d.eventTypeId) ?? [];
+        const registeredCount = existingForType.length;
+        // Already registered with exact URL → skip.
+        if (urlIndex?.has(d.url)) {
+            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+            skipActions.push({ kind: 'SKIP_ALREADY_REGISTERED', existing: urlIndex.get(d.url) });
+            continue;
+        }
+        // At limit → abort, no registration attempted.
+        if (registeredCount >= perEventTypeLimit) {
+            abortActions.push({
+                kind: 'ABORT_LIMIT_HIT',
+                eventTypeId: d.eventTypeId,
+                current: registeredCount,
+                limit: perEventTypeLimit,
+            });
+            continue;
+        }
+        // Near limit → warn AND register (still proceeds).
+        if (registeredCount >= nearLimitThreshold) {
+            warnActions.push({
+                kind: 'WARN_LIMIT_NEAR',
+                eventTypeId: d.eventTypeId,
+                current: registeredCount,
+                limit: perEventTypeLimit,
+            });
+        }
+        registerActions.push({ kind: 'REGISTER', desired: d });
+    }
+    // -------------------------------------------------------------------------
+    // Drift reconciliation.
+    // -------------------------------------------------------------------------
+    const deactivateActions = [];
+    if (reconcileDrift) {
+        // Build set of desired URLs for fast membership test.
+        const desiredUrlSet = new Set(desired.map((d) => d.url));
+        const sortedCurrent = [...current].sort((a, b) => a.eventTypeId - b.eventTypeId);
+        for (const reg of sortedCurrent) {
+            // Only deactivate if:
+            // 1. URL is not in desired set.
+            // 2. URL matches our owned hostname pattern (don't touch foreign webhooks).
+            const isOwned = ownedHostnamePattern ? ownedHostnamePattern.test(reg.url) : true;
+            if (!desiredUrlSet.has(reg.url) && isOwned) {
+                deactivateActions.push({
+                    kind: 'DEACTIVATE_DRIFT',
+                    existing: reg,
+                    reason: 'URL_NOT_IN_DESIRED',
+                });
+            }
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Compose final ordered list.
+    // -------------------------------------------------------------------------
+    const actions = [
+        ...registerActions,
+        ...skipActions,
+        ...deactivateActions,
+        ...warnActions,
+        ...abortActions,
+    ];
+    const hasFatalError = abortActions.length > 0;
+    return { actions, hasFatalError };
+}
+//# sourceMappingURL=plan.js.map

package/dist/cli/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/cli/plan.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAuDH,kCAyHC;AA1ID,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,SAAgB,WAAW,CAAC,KAAuB;IACjD,MAAM,EACJ,OAAO,EACP,OAAO,EACP,iBAAiB,GAAG,EAAE,EACtB,iBAAiB,GAAG,GAAG,EACvB,cAAc,GAAG,KAAK,EACtB,oBAAoB,GACrB,GAAG,KAAK,CAAC;IAEV,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,iBAAiB,CAAC,CAAC;IAE7E,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA4C,CAAC;IAChF,8DAA8D;IAC9D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAiC,CAAC;IAE/D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,oEAAoE;QACpE,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,oEAAoE;QACpE,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,4EAA4E;IAC5E,uDAAuD;IACvD,4EAA4E;IAC5E,MAAM,eAAe,GAAwB,EAAE,CAAC;IAChD,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAwB,EAAE,CAAC;IAE7C,6DAA6D;IAC7D,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAEjF,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC;QAE/C,4CAA4C;QAC5C,IAAI,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,oEAAoE;YACpE,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAE,EAAE,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QAED,+CAA+C;QAC/C,IAAI,eAAe,IAAI,iBAAiB,EAAE,CAAC;YACzC,YAAY,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,OAAO,EAAE,eAAe;gBACxB,KAAK,EAAE,iBAAiB;aACzB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,mDAAmD;QACnD,IAAI,eAAe,IAAI,kBAAkB,EAAE,CAAC;YAC1C,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,OAAO,EAAE,eAAe;gBACxB,KAAK,EAAE,iBAAiB;aACzB,CAAC,CAAC;QACL,CAAC;QAED,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,4EAA4E;IAC5E,wBAAwB;IACxB,4EAA4E;IAC5E,MAAM,iBAAiB,GAAwB,EAAE,CAAC;IAElD,IAAI,cAAc,EAAE,CAAC;QACnB,sDAAsD;QACtD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEzD,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;QAEjF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,sBAAsB;YACtB,gCAAgC;YAChC,4EAA4E;YAC5E,MAAM,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC3C,iBAAiB,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,kBAAkB;oBACxB,QAAQ,EAAE,GAAG;oBACb,MAAM,EAAE,oBAAoB;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,8BAA8B;IAC9B,4EAA4E;IAC5E,MAAM,OAAO,GAAwB;QACnC,GAAG,eAAe;QAClB,GAAG,WAAW;QACd,GAAG,iBAAiB;QACpB,GAAG,WAAW;QACd,GAAG,YAAY;KAChB,CAAC;IAEF,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IAE9C,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC"}

package/dist/cli/register-webhooks.d.ts

@@ -0,0 +1,54 @@
+/**
+ * register-webhooks.ts — CLI entry point for idempotent webhook registration.
+ *
+ * Mode-aware:
+ *   - ISV mode: builds the ISV webhook client and POSTs one /isv/v1/webhooks
+ *     registration per V1 event type (existing behaviour, unchanged).
+ *   - Merchant mode: Viva offers no programmatic registration. The CLI fetches
+ *     the verification key from GET /api/messages/config/token (Basic auth,
+ *     merchant variant) and prints the URLs the operator must paste into Viva
+ *     Self Care → Sales → API Access → Webhooks. `--reconcile-drift` is
+ *     non-applicable in merchant mode.
+ *
+ * Design: deploy-time orchestrated, not runtime self-registration (plan P12).
+ * Re-running after a successful apply produces all SKIP_ALREADY_REGISTERED
+ * actions, proving idempotency.
+ *
+ * Exit codes:
+ *   0 — clean (no actions OR all applied successfully OR merchant manual setup printed)
+ *   1 — plan has actions but --apply was not passed (CI gate use case — ISV mode only)
+ *   2 — apply failed (HTTP error, 4xx/5xx from Viva)
+ *   3 — fatal precondition (config invalid, ABORT_LIMIT_HIT, missing webhook URL)
+ *
+ * @see references/viva-docs/md/webhooks-for-payments.txt:134 (10-URL limit)
+ * @see references/viva-docs/md/isv-partner-program.txt:196 (ISV webhook setup)
+ * @see docs/ENDPOINTS.md §8.1 (merchant verification-key endpoint)
+ * @see docs/plans/multi-mode-v0.md §9.5 (CLI behaviour matrix)
+ */
+type Dispatcher = any;
+export interface RunOptions {
+    /** Print the plan and exit; do NOT mutate. */
+    dryRun: boolean;
+    /** Apply REGISTER + DEACTIVATE_DRIFT actions. */
+    apply: boolean;
+    /**
+     * Override target webhook URL; default is built from env (VIVA_WEBHOOK_BASE_URL).
+     * Must be provided here or via VIVA_WEBHOOK_BASE_URL env var.
+     */
+    webhookBaseUrl?: string | undefined;
+    /** When true, run drift reconciliation. */
+    reconcileDrift?: boolean | undefined;
+    /** Output format: 'human' | 'json'. */
+    output: 'human' | 'json';
+}
+/**
+ * Programmatic entry — also called by bin.ts for the CLI.
+ * Reads VIVA_* env via loadConfigFromEnv() and branches on config.mode.
+ *
+ * @param opts  - CLI run options.
+ * @param env   - Optional env override (defaults to process.env). Used in tests.
+ * @param dispatcher - Optional undici Dispatcher override (MockAgent in tests).
+ */
+export declare function run(opts: RunOptions, env?: NodeJS.ProcessEnv, dispatcher?: Dispatcher): Promise<number>;
+export {};
+//# sourceMappingURL=register-webhooks.d.ts.map

package/dist/cli/register-webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-webhooks.d.ts","sourceRoot":"","sources":["../../src/cli/register-webhooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH,KAAK,UAAU,GAAG,GAAG,CAAC;AAqBtB,MAAM,WAAW,UAAU;IACzB,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,KAAK,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,2CAA2C;IAC3C,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,uCAAuC;IACvC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1B;AA4BD;;;;;;;GAOG;AACH,wBAAsB,GAAG,CACvB,IAAI,EAAE,UAAU,EAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,CAAC,CAsDjB"}

package/dist/cli/register-webhooks.js

@@ -0,0 +1,366 @@
+"use strict";
+/**
+ * register-webhooks.ts — CLI entry point for idempotent webhook registration.
+ *
+ * Mode-aware:
+ *   - ISV mode: builds the ISV webhook client and POSTs one /isv/v1/webhooks
+ *     registration per V1 event type (existing behaviour, unchanged).
+ *   - Merchant mode: Viva offers no programmatic registration. The CLI fetches
+ *     the verification key from GET /api/messages/config/token (Basic auth,
+ *     merchant variant) and prints the URLs the operator must paste into Viva
+ *     Self Care → Sales → API Access → Webhooks. `--reconcile-drift` is
+ *     non-applicable in merchant mode.
+ *
+ * Design: deploy-time orchestrated, not runtime self-registration (plan P12).
+ * Re-running after a successful apply produces all SKIP_ALREADY_REGISTERED
+ * actions, proving idempotency.
+ *
+ * Exit codes:
+ *   0 — clean (no actions OR all applied successfully OR merchant manual setup printed)
+ *   1 — plan has actions but --apply was not passed (CI gate use case — ISV mode only)
+ *   2 — apply failed (HTTP error, 4xx/5xx from Viva)
+ *   3 — fatal precondition (config invalid, ABORT_LIMIT_HIT, missing webhook URL)
+ *
+ * @see references/viva-docs/md/webhooks-for-payments.txt:134 (10-URL limit)
+ * @see references/viva-docs/md/isv-partner-program.txt:196 (ISV webhook setup)
+ * @see docs/ENDPOINTS.md §8.1 (merchant verification-key endpoint)
+ * @see docs/plans/multi-mode-v0.md §9.5 (CLI behaviour matrix)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const isv_1 = require("@sakeetech/viva-payments-core/isv");
+const auth_1 = require("@sakeetech/viva-payments-core/auth");
+const legacy_1 = require("@sakeetech/viva-payments-core/legacy");
+const errors_1 = require("@sakeetech/viva-payments-core/errors");
+const webhooks_1 = require("@sakeetech/viva-payments-core/webhooks");
+const config_js_1 = require("../config.js");
+const plan_js_1 = require("./plan.js");
+const MERCHANT_EVENTS = Object.freeze([
+    { id: 1796, name: 'Transaction Payment Created' },
+    { id: 1797, name: 'Transaction Reversal Created' },
+    { id: 1798, name: 'Transaction Payment Failed' },
+    { id: 4865, name: 'Order Updated' },
+]);
+// ---------------------------------------------------------------------------
+// Main entry
+// ---------------------------------------------------------------------------
+/**
+ * Programmatic entry — also called by bin.ts for the CLI.
+ * Reads VIVA_* env via loadConfigFromEnv() and branches on config.mode.
+ *
+ * @param opts  - CLI run options.
+ * @param env   - Optional env override (defaults to process.env). Used in tests.
+ * @param dispatcher - Optional undici Dispatcher override (MockAgent in tests).
+ */
+async function run(opts, env, dispatcher) {
+    const effectiveEnv = env ?? process.env;
+    // -------------------------------------------------------------------------
+    // 1. Load + validate config.
+    // -------------------------------------------------------------------------
+    let config;
+    try {
+        config = (0, config_js_1.loadConfigFromEnv)(effectiveEnv);
+    }
+    catch (err) {
+        if (err instanceof errors_1.VivaValidationError) {
+            console.error(`[viva-register-webhooks] Config error: ${err.message}`);
+        }
+        else {
+            console.error(`[viva-register-webhooks] Unexpected config error: ${String(err)}`);
+        }
+        return 3;
+    }
+    // -------------------------------------------------------------------------
+    // 2. Resolve webhook base URL (mode-agnostic).
+    // -------------------------------------------------------------------------
+    const webhookBaseUrl = opts.webhookBaseUrl ?? effectiveEnv['VIVA_WEBHOOK_BASE_URL'];
+    if (!webhookBaseUrl) {
+        console.error('[viva-register-webhooks] VIVA_WEBHOOK_BASE_URL is required (or pass --webhook-base-url).');
+        return 3;
+    }
+    // Strip trailing slash for consistent URL construction.
+    const baseUrl = webhookBaseUrl.replace(/\/$/, '');
+    const webhookUrl = `${baseUrl}/viva/webhook`;
+    // -------------------------------------------------------------------------
+    // 3. Branch on mode.
+    // -------------------------------------------------------------------------
+    if (config.mode === 'merchant') {
+        return runMerchant({
+            config,
+            opts,
+            webhookUrl,
+            ...(dispatcher !== undefined ? { dispatcher } : {}),
+        });
+    }
+    return runIsv({
+        config,
+        opts,
+        webhookUrl,
+        baseUrl,
+        ...(dispatcher !== undefined ? { dispatcher } : {}),
+    });
+}
+async function runMerchant(input) {
+    const { config, opts, webhookUrl, dispatcher } = input;
+    // --reconcile-drift is non-applicable: Viva merchants cannot list/deactivate
+    // webhooks via API — Self Care UI is the only management surface.
+    if (opts.reconcileDrift) {
+        if (opts.output === 'json') {
+            console.log(JSON.stringify({
+                mode: 'merchant',
+                error: 'reconcile-drift-not-supported',
+                message: '--reconcile-drift is not supported in merchant mode (manual setup only). ' +
+                    'ISV mode uses this flag against POST /isv/v1/webhooks.',
+            }, null, 2));
+        }
+        else {
+            console.log('--reconcile-drift is not supported in merchant mode (manual setup only).');
+            console.log('ISV mode uses this flag against POST /isv/v1/webhooks.');
+        }
+        return 0;
+    }
+    // --dry-run: print expected URLs + placeholder for key, skip the network call.
+    if (opts.dryRun) {
+        printMerchantInstructions({
+            webhookUrl,
+            verificationKey: undefined,
+            output: opts.output,
+        });
+        return 0;
+    }
+    // --apply: fetch verification key from Viva legacy host, then print instructions.
+    if (opts.apply) {
+        const basicAuth = new legacy_1.BasicAuthClient({
+            authVariant: 'merchant',
+            environment: config.environment,
+            merchantId: config.legacyMerchantId,
+            apiKey: config.legacyApiKey,
+            ...(dispatcher !== undefined ? { dispatcher } : {}),
+        });
+        let verificationKey;
+        try {
+            verificationKey = await basicAuth.fetchWebhookVerificationKey();
+        }
+        catch (err) {
+            const msg = err instanceof errors_1.VivaApiError ? err.message : String(err);
+            console.error(`[viva-register-webhooks] Failed to fetch verification key: ${msg}`);
+            return 2;
+        }
+        printMerchantInstructions({
+            webhookUrl,
+            verificationKey,
+            output: opts.output,
+        });
+        return 0;
+    }
+    // Neither --dry-run nor --apply (should be caught by bin.ts but guard here).
+    console.error('[viva-register-webhooks] Specify --dry-run or --apply.');
+    return 3;
+}
+function printMerchantInstructions(input) {
+    const { webhookUrl, verificationKey, output } = input;
+    if (output === 'json') {
+        console.log(JSON.stringify({
+            mode: 'merchant',
+            verificationKey: verificationKey ?? '<dry-run — verification key not fetched>',
+            events: MERCHANT_EVENTS.map((e) => ({
+                id: e.id,
+                name: e.name,
+                url: webhookUrl,
+            })),
+        }, null, 2));
+        return;
+    }
+    // Human-readable.
+    console.log('');
+    console.log('Manual webhook setup required (merchant mode).');
+    console.log('');
+    console.log('1. Go to Viva Self Care → Sales → API Access → Webhooks.');
+    console.log('2. For each event below, register the URL with your storefront base URL:');
+    console.log('');
+    for (const e of MERCHANT_EVENTS) {
+        console.log(`   ${e.name} (${e.id}): ${webhookUrl}`);
+    }
+    console.log('');
+    console.log('3. Paste this verification key into VIVA_WEBHOOK_VERIFICATION_KEY in .env:');
+    console.log(`   ${verificationKey ?? '<dry-run — verification key not fetched>'}`);
+    console.log('');
+    console.log('4. Restart your Medusa server.');
+    console.log('');
+}
+async function runIsv(input) {
+    const { config, opts, webhookUrl, baseUrl, dispatcher } = input;
+    // -------------------------------------------------------------------------
+    // Build IsvWebhooks client.
+    // Inject dispatcher when provided (undici MockAgent in tests).
+    // The OAuth2 strategy also needs the dispatcher so that MockAgent
+    // intercepts both /connect/token and /api/accounts/webhooks calls.
+    // -------------------------------------------------------------------------
+    const cache = new auth_1.InMemoryTokenCache();
+    const mutex = new auth_1.AsyncMutex();
+    const primary = new auth_1.OAuth2ClientCredentialsStrategy({
+        environment: config.environment,
+        clientId: config.clientId,
+        clientSecret: config.clientSecret,
+        cache,
+        mutex,
+        ...(dispatcher !== undefined ? { dispatcher } : {}),
+    });
+    const httpClient = new isv_1.IsvHttpClient({
+        environment: config.environment,
+        authStrategy: primary,
+        ...(dispatcher !== undefined ? { dispatcher } : {}),
+    });
+    const isvWebhooks = new isv_1.IsvWebhooks(httpClient);
+    // -------------------------------------------------------------------------
+    // Build desired state from V1_EVENT_TYPE_IDS.
+    // One URL per event type, all pointing to the same endpoint.
+    // -------------------------------------------------------------------------
+    const desired = webhooks_1.V1_EVENT_TYPE_IDS.map((eventTypeId) => ({
+        eventTypeId,
+        url: webhookUrl,
+        description: `viva-register-webhooks v1 (eventTypeId=${eventTypeId})`,
+    }));
+    // -------------------------------------------------------------------------
+    // Fetch current registrations.
+    //
+    // The ISV API exposes no list endpoint (probe-verified 2026-05-11). The
+    // computePlan model still expects a `current` slice, so we feed it an
+    // empty list — plan output reduces to REGISTER actions only. Drift
+    // reconciliation is a no-op (kept as a flag so callers don't break, but
+    // it cannot detect anything to deactivate).
+    // -------------------------------------------------------------------------
+    const current = [];
+    if (opts.reconcileDrift) {
+        console.warn('[viva-register-webhooks] --reconcile-drift is a no-op: the ISV API does not expose list/deactivate endpoints. ' +
+            'Existing webhook drift must be cleaned up via the Viva self-care UI.');
+    }
+    // -------------------------------------------------------------------------
+    // Compute plan.
+    // -------------------------------------------------------------------------
+    const planInput = {
+        desired,
+        current,
+        reconcileDrift: opts.reconcileDrift ?? false,
+    };
+    // Only pass ownedHostnamePattern when reconciling to satisfy exactOptionalPropertyTypes.
+    if (opts.reconcileDrift) {
+        planInput.ownedHostnamePattern = buildOwnedPattern(baseUrl);
+    }
+    const plan = (0, plan_js_1.computePlan)(planInput);
+    // -------------------------------------------------------------------------
+    // Dry-run: print and exit.
+    // -------------------------------------------------------------------------
+    if (opts.dryRun) {
+        printPlan(plan, opts.output);
+        if (plan.hasFatalError) {
+            return 3;
+        }
+        const hasActions = plan.actions.some((a) => a.kind === 'REGISTER' || a.kind === 'DEACTIVATE_DRIFT');
+        return hasActions ? 1 : 0;
+    }
+    // -------------------------------------------------------------------------
+    // Apply.
+    // -------------------------------------------------------------------------
+    if (opts.apply) {
+        // Abort immediately if the plan has a fatal error.
+        if (plan.hasFatalError) {
+            printPlan(plan, opts.output);
+            console.error('[viva-register-webhooks] Aborting: ABORT_LIMIT_HIT in plan. ' +
+                'Deregister unused webhooks before retrying.');
+            return 3;
+        }
+        printPlan(plan, opts.output);
+        const actionsToApply = plan.actions.filter((a) => a.kind === 'REGISTER' || a.kind === 'DEACTIVATE_DRIFT');
+        for (const action of actionsToApply) {
+            if (action.kind === 'REGISTER') {
+                try {
+                    await isvWebhooks.registerWebhook({
+                        eventTypeId: action.desired.eventTypeId,
+                        url: action.desired.url,
+                    });
+                    logLine(opts.output, 'applied', `REGISTER eventTypeId=${action.desired.eventTypeId} url=${action.desired.url}`);
+                }
+                catch (err) {
+                    const msg = err instanceof errors_1.VivaApiError
+                        ? err.message
+                        : String(err);
+                    console.error(`[viva-register-webhooks] REGISTER failed for eventTypeId=${action.desired.eventTypeId}: ${msg}`);
+                    return 2;
+                }
+            }
+            // DEACTIVATE_DRIFT is unreachable: current=[] means computePlan never emits it.
+        }
+        logLine(opts.output, 'done', `Applied ${actionsToApply.length} action(s).`);
+        return 0;
+    }
+    // Neither --dry-run nor --apply (should be caught by bin.ts but guard here).
+    console.error('[viva-register-webhooks] Specify --dry-run or --apply.');
+    return 3;
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Builds a RegExp that matches URLs containing the hostname extracted from baseUrl.
+ *
+ * Used for drift reconciliation to avoid touching webhooks that belong to
+ * other operators on the same ISV account.
+ */
+function buildOwnedPattern(baseUrl) {
+    try {
+        const { hostname } = new URL(baseUrl);
+        // Escape dots for use in RegExp.
+        const escaped = hostname.replace(/\./g, '\\.');
+        return new RegExp(escaped);
+    }
+    catch {
+        // If URL parsing fails, fall back to a pattern that matches everything.
+        return /.*/;
+    }
+}
+function printPlan(plan, output) {
+    if (output === 'json') {
+        console.log(JSON.stringify({ plan: plan.actions, hasFatalError: plan.hasFatalError }, null, 2));
+        return;
+    }
+    // Human-readable table.
+    console.log('');
+    console.log('viva-register-webhooks — Plan');
+    console.log('─'.repeat(72));
+    if (plan.actions.length === 0) {
+        console.log('  (no actions — all webhooks already registered)');
+        console.log('');
+        return;
+    }
+    for (const action of plan.actions) {
+        const line = formatAction(action);
+        console.log(`  ${line}`);
+    }
+    console.log('─'.repeat(72));
+    console.log(`  ${plan.actions.length} action(s) | fatal=${plan.hasFatalError}`);
+    console.log('');
+}
+function formatAction(action) {
+    switch (action.kind) {
+        case 'REGISTER':
+            return `[REGISTER]         eventTypeId=${action.desired.eventTypeId}  url=${action.desired.url}`;
+        case 'SKIP_ALREADY_REGISTERED':
+            return `[SKIP]             eventTypeId=${action.existing.eventTypeId}  url=${action.existing.url}`;
+        case 'DEACTIVATE_DRIFT':
+            return `[DEACTIVATE_DRIFT] eventTypeId=${action.existing.eventTypeId}  url=${action.existing.url}  reason=${action.reason}`;
+        case 'WARN_LIMIT_NEAR':
+            return `[WARN_LIMIT_NEAR]  eventTypeId=${action.eventTypeId}  current=${action.current}/${action.limit}`;
+        case 'ABORT_LIMIT_HIT':
+            return `[ABORT_LIMIT_HIT]  eventTypeId=${action.eventTypeId}  current=${action.current}/${action.limit}  (operator must deregister)`;
+    }
+}
+function logLine(output, level, message) {
+    if (output === 'json') {
+        console.log(JSON.stringify({ level, message, ts: new Date().toISOString() }));
+    }
+    else {
+        console.log(`[${level}] ${message}`);
+    }
+}
+//# sourceMappingURL=register-webhooks.js.map

package/dist/cli/register-webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-webhooks.js","sourceRoot":"","sources":["../../src/cli/register-webhooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;AA6EH,kBA0DC;AAhID,2DAG2C;AAC3C,6DAI4C;AAC5C,iEAAuE;AACvE,iEAAyF;AACzF,qEAA2E;AAC3E,4CAAiD;AACjD,uCAAwC;AAsCxC,MAAM,eAAe,GAAiC,MAAM,CAAC,MAAM,CAAC;IAClE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,EAAE;IACjD,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,8BAA8B,EAAE;IAClD,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE;IAChD,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE;CAC3B,CAAC,CAAC;AAEZ,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;GAOG;AACI,KAAK,UAAU,GAAG,CACvB,IAAgB,EAChB,GAAuB,EACvB,UAAuB;IAEvB,MAAM,YAAY,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAExC,4EAA4E;IAC5E,6BAA6B;IAC7B,4EAA4E;IAC5E,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,6BAAiB,EAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAmB,EAAE,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,0CAA0C,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,qDAAqD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,+CAA+C;IAC/C,4EAA4E;IAC5E,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC,uBAAuB,CAAC,CAAC;IAE/D,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CACX,0FAA0F,CAC3F,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wDAAwD;IACxD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,GAAG,OAAO,eAAe,CAAC;IAE7C,4EAA4E;IAC5E,qBAAqB;IACrB,4EAA4E;IAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,WAAW,CAAC;YACjB,MAAM;YACN,IAAI;YACJ,UAAU;YACV,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;QACZ,MAAM;QACN,IAAI;QACJ,UAAU;QACV,OAAO;QACP,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAaD,KAAK,UAAU,WAAW,CAAC,KAAuB;IAChD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAEvD,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,+BAA+B;gBACtC,OAAO,EACL,2EAA2E;oBAC3E,wDAAwD;aAC3D,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CACT,0EAA0E,CAC3E,CAAC;YACF,OAAO,CAAC,GAAG,CACT,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,+EAA+E;IAC/E,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,yBAAyB,CAAC;YACxB,UAAU;YACV,eAAe,EAAE,SAAS;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,kFAAkF;IAClF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAI,wBAAe,CAAC;YACpC,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,MAAM,CAAC,gBAAgB;YACnC,MAAM,EAAE,MAAM,CAAC,YAAY;YAC3B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC,CAAC;QAEH,IAAI,eAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,eAAe,GAAG,MAAM,SAAS,CAAC,2BAA2B,EAAE,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,qBAAY,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpE,OAAO,CAAC,KAAK,CACX,8DAA8D,GAAG,EAAE,CACpE,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,yBAAyB,CAAC;YACxB,UAAU;YACV,eAAe;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6EAA6E;IAC7E,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC;AACX,CAAC;AASD,SAAS,yBAAyB,CAAC,KAAyB;IAC1D,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAEtD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,IAAI,EAAE,UAAU;YAChB,eAAe,EACb,eAAe,IAAI,0CAA0C;YAC/D,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;SACJ,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CACT,0EAA0E,CAC3E,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,MAAM,UAAU,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,4EAA4E,CAC7E,CAAC;IACF,OAAO,CAAC,GAAG,CACT,MAAM,eAAe,IAAI,0CAA0C,EAAE,CACtE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAcD,KAAK,UAAU,MAAM,CAAC,KAAkB;IACtC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAEhE,4EAA4E;IAC5E,4BAA4B;IAC5B,+DAA+D;IAC/D,kEAAkE;IAClE,mEAAmE;IACnE,4EAA4E;IAC5E,MAAM,KAAK,GAAG,IAAI,yBAAkB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,iBAAU,EAAE,CAAC;IAE/B,MAAM,OAAO,GAAG,IAAI,sCAA+B,CAAC;QAClD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,KAAK;QACL,KAAK;QACL,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,mBAAa,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,OAAO;QACrB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAI,iBAAW,CAAC,UAAU,CAAC,CAAC;IAEhD,4EAA4E;IAC5E,8CAA8C;IAC9C,6DAA6D;IAC7D,4EAA4E;IAC5E,MAAM,OAAO,GAAqB,4BAAiB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACxE,WAAW;QACX,GAAG,EAAE,UAAU;QACf,WAAW,EAAE,0CAA0C,WAAW,GAAG;KACtE,CAAC,CAAC,CAAC;IAEJ,4EAA4E;IAC5E,+BAA+B;IAC/B,EAAE;IACF,wEAAwE;IACxE,sEAAsE;IACtE,mEAAmE;IACnE,wEAAwE;IACxE,4CAA4C;IAC5C,4EAA4E;IAC5E,MAAM,OAAO,GAAY,EAAE,CAAC;IAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CACV,gHAAgH;YAChH,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,gBAAgB;IAChB,4EAA4E;IAC5E,MAAM,SAAS,GAAsC;QACnD,OAAO;QACP,OAAO;QACP,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;KAC7C,CAAC;IAEF,yFAAyF;IACzF,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,SAAS,CAAC,oBAAoB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,GAAe,IAAA,qBAAW,EAAC,SAAS,CAAC,CAAC;IAEhD,4EAA4E;IAC5E,2BAA2B;IAC3B,4EAA4E;IAC5E,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAC9D,CAAC;QACF,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,4EAA4E;IAC5E,SAAS;IACT,4EAA4E;IAC5E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,mDAAmD;QACnD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO,CAAC,KAAK,CACX,8DAA8D;gBAC5D,6CAA6C,CAChD,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE7B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CACxC,CAAC,CAAC,EAA8E,EAAE,CAChF,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,CACzD,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,WAAW,CAAC,eAAe,CAAC;wBAChC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;wBACvC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;qBACxB,CAAC,CAAC;oBACH,OAAO,CACL,IAAI,CAAC,MAAM,EACX,SAAS,EACT,wBAAwB,MAAM,CAAC,OAAO,CAAC,WAAW,QAAQ,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAC/E,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GACP,GAAG,YAAY,qBAAY;wBACzB,CAAC,CAAC,GAAG,CAAC,OAAO;wBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAClB,OAAO,CAAC,KAAK,CACX,4DAA4D,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,GAAG,EAAE,CACjG,CAAC;oBACF,OAAO,CAAC,CAAC;gBACX,CAAC;YACH,CAAC;YACD,gFAAgF;QAClF,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC,MAAM,aAAa,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,6EAA6E;IAC7E,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,iCAAiC;QACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB,EAAE,MAA4B;IAC/D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IAED,wBAAwB;IACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CACT,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,sBAAsB,IAAI,CAAC,aAAa,EAAE,CACnE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB;IAC7C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,kCAAkC,MAAM,CAAC,OAAO,CAAC,WAAW,SAAS,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACnG,KAAK,yBAAyB;YAC5B,OAAO,kCAAkC,MAAM,CAAC,QAAQ,CAAC,WAAW,SAAS,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACrG,KAAK,kBAAkB;YACrB,OAAO,kCAAkC,MAAM,CAAC,QAAQ,CAAC,WAAW,SAAS,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9H,KAAK,iBAAiB;YACpB,OAAO,kCAAkC,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC3G,KAAK,iBAAiB;YACpB,OAAO,kCAAkC,MAAM,CAAC,WAAW,aAAa,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,8BAA8B,CAAC;IACzI,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,MAA4B,EAC5B,KAAa,EACb,OAAe;IAEf,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/cli/types.d.ts

@@ -0,0 +1,62 @@
+/**
+ * CLI types for viva-register-webhooks.
+ *
+ * Defines the DesiredWebhook input shape, the WebhookPlanAction discriminated
+ * union, and PlanResult returned by computePlan().
+ *
+ * @see references/viva-docs/md/webhooks-for-payments.txt:134 (10-URL limit per event type)
+ * @see references/viva-docs/md/isv-partner-program.txt:200 (ISV webhook registration)
+ */
+import type { VivaEventTypeId } from '@sakeetech/viva-payments-core/types';
+/**
+ * Locally-defined shape preserved for `computePlan`'s historical model.
+ *
+ * The ISV API exposes no list endpoint, so the CLI never observes existing
+ * registrations — `current` is always supplied as `[]`. SKIP_ALREADY_REGISTERED
+ * and DEACTIVATE_DRIFT actions therefore cannot fire at runtime; the shape is
+ * retained so that snapshot tests over `computePlan` keep passing.
+ */
+export interface WebhookRegistration {
+    webhookId?: string;
+    eventTypeId: number;
+    url: string;
+    isActive: boolean;
+}
+export type { VivaEventTypeId };
+/**
+ * A single webhook registration we want to ensure exists at deploy time.
+ */
+export interface DesiredWebhook {
+    eventTypeId: VivaEventTypeId;
+    /** Full HTTPS URL that will receive the POST. */
+    url: string;
+    /** Optional friendly description registered with Viva. */
+    description?: string;
+}
+export type WebhookPlanAction = {
+    kind: 'REGISTER';
+    desired: DesiredWebhook;
+} | {
+    kind: 'SKIP_ALREADY_REGISTERED';
+    existing: WebhookRegistration;
+} | {
+    kind: 'DEACTIVATE_DRIFT';
+    existing: WebhookRegistration;
+    reason: string;
+} | {
+    kind: 'WARN_LIMIT_NEAR';
+    eventTypeId: number;
+    current: number;
+    limit: number;
+} | {
+    kind: 'ABORT_LIMIT_HIT';
+    eventTypeId: number;
+    current: number;
+    limit: number;
+};
+export interface PlanResult {
+    actions: WebhookPlanAction[];
+    /** True if any ABORT_LIMIT_HIT is in actions. */
+    hasFatalError: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cli/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,YAAY,EAAE,eAAe,EAAE,CAAC;AAMhC;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,eAAe,CAAC;IAC7B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAMrF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,iDAAiD;IACjD,aAAa,EAAE,OAAO,CAAC;CACxB"}

package/dist/cli/types.js

@@ -0,0 +1,12 @@
+"use strict";
+/**
+ * CLI types for viva-register-webhooks.
+ *
+ * Defines the DesiredWebhook input shape, the WebhookPlanAction discriminated
+ * union, and PlanResult returned by computePlan().
+ *
+ * @see references/viva-docs/md/webhooks-for-payments.txt:134 (10-URL limit per event type)
+ * @see references/viva-docs/md/isv-partner-program.txt:200 (ISV webhook registration)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cli/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG"}