@shipfox/api-integration-linear 5.0.0 → 6.0.0

package/dist/presentation/routes/webhooks.js

@@ -1,14 +1,12 @@
-import { Buffer } from 'node:buffer';
-import { LINEAR_PROVIDER, linearWebhookBaseEnvelopeSchema } from '@shipfox/api-integration-linear-dto';
-import { defineRoute, rawBodyPlugin, verifyHexHmacSignature, WEBHOOK_BODY_LIMIT } from '@shipfox/node-fastify';
-import { logger } from '@shipfox/node-opentelemetry';
-import { config } from '#config.js';
-import { handleLinearWebhook } from '#core/webhook.js';
+import { randomUUID } from 'node:crypto';
+import { createStoredWebhookRequest, WEBHOOK_MAX_RAW_BODY_BYTES } from '@shipfox/api-integration-core-dto';
+import { ClientError, defineRoute, rawBodyPlugin, WEBHOOK_BODY_LIMIT } from '@shipfox/node-fastify';
+import { createLinearWebhookProcessor } from '#core/webhook-processor.js';
 const DELIVERY_HEADER = 'linear-delivery';
 const EVENT_HEADER = 'linear-event';
 const SIGNATURE_HEADER = 'linear-signature';
-const WEBHOOK_REPLAY_WINDOW_MS = 60_000;
 export function createLinearWebhookRoutes(options) {
+    const processor = options.processor ?? createLinearWebhookProcessor(options);
     const webhookRoute = defineRoute({
         method: 'POST',
         path: '/',
@@ -18,6 +16,7 @@ export function createLinearWebhookRoutes(options) {
             bodyLimit: WEBHOOK_BODY_LIMIT
         },
         handler: async (request, reply)=>{
+            const receivedAt = new Date().toISOString();
             const deliveryHeader = request.headers[DELIVERY_HEADER];
             const event = request.headers[EVENT_HEADER];
             const signature = request.headers[SIGNATURE_HEADER];
@@ -40,76 +39,18 @@ export function createLinearWebhookRoutes(options) {
                 };
             }
             const body = request.body;
-            if (!Buffer.isBuffer(body)) {
+            if (!(body instanceof Uint8Array)) {
                 reply.code(400);
                 return {
                     error: 'expected raw JSON body'
                 };
             }
-            const rawBody = body.toString('utf8');
-            if (!verifyHexHmacSignature({
-                rawBody,
-                signature,
-                secret: config.LINEAR_WEBHOOK_SIGNING_SECRET
-            })) {
-                reply.code(401);
-                return {
-                    error: 'invalid signature'
-                };
-            }
-            let parsedJson;
-            try {
-                parsedJson = JSON.parse(rawBody);
-            } catch (error) {
-                logger().warn({
-                    deliveryId: deliveryHeader,
-                    err: error
-                }, 'linear webhook payload JSON parse failed');
-                reply.code(400);
-                return {
-                    error: 'malformed JSON'
-                };
-            }
-            const payload = linearWebhookBaseEnvelopeSchema.safeParse(parsedJson);
-            if (!payload.success) {
-                logger().warn({
-                    deliveryId: deliveryHeader,
-                    issues: payload.error.issues
-                }, 'linear webhook envelope failed schema validation');
-                await recordSignedDeliveryOnly(options, deliveryHeader);
-                reply.code(200);
-                return null;
-            }
-            if (Math.abs(Date.now() - payload.data.webhookTimestamp) > WEBHOOK_REPLAY_WINDOW_MS) {
-                reply.code(401);
-                return {
-                    error: 'stale webhook timestamp'
-                };
-            }
-            if (event !== payload.data.type) {
-                logger().warn({
-                    deliveryId: deliveryHeader,
-                    event,
-                    type: payload.data.type
-                }, 'linear webhook event header did not match payload type');
-                await recordSignedDeliveryOnly(options, deliveryHeader);
-                reply.code(200);
-                return null;
-            }
-            await options.coreDb().transaction(async (tx)=>{
-                await handleLinearWebhook({
-                    tx,
-                    // Linear documents this header as the delivery UUID; the signed timestamp is per-send.
-                    deliveryId: deliveryHeader,
-                    payload: payload.data,
-                    rawPayload: parsedJson,
-                    publishIntegrationEventReceived: options.publishIntegrationEventReceived,
-                    recordDeliveryOnly: options.recordDeliveryOnly,
-                    getIntegrationConnectionById: options.getIntegrationConnectionById
-                });
-            });
-            reply.code(200);
-            return null;
+            const result = await processor.process(createLinearStoredWebhookRequest({
+                body,
+                headers: request.headers,
+                rawQueryString: request.raw.url?.split('?')[1] ?? ''
+            }, receivedAt));
+            return sendLinearWebhookResponse(reply, result);
         }
     });
     return {
@@ -123,14 +64,69 @@ export function createLinearWebhookRoutes(options) {
         ]
     };
 }
-async function recordSignedDeliveryOnly(options, deliveryId) {
-    await options.coreDb().transaction(async (tx)=>{
-        await options.recordDeliveryOnly({
-            tx,
-            provider: LINEAR_PROVIDER,
-            deliveryId
+function createLinearStoredWebhookRequest(input, receivedAt) {
+    if (input.body.byteLength > WEBHOOK_MAX_RAW_BODY_BYTES) {
+        throw new ClientError('Webhook request body is too large', 'body-too-large', {
+            status: 413
         });
-    });
+    }
+    try {
+        return createStoredWebhookRequest({
+            requestId: randomUUID(),
+            routeId: 'linear',
+            receivedAt,
+            rawQueryString: input.rawQueryString,
+            headers: linearWebhookHeaders(input.headers),
+            body: input.body
+        });
+    } catch (error) {
+        throw new ClientError('Webhook request metadata is invalid', 'invalid-webhook-request', {
+            cause: error
+        });
+    }
+}
+function linearWebhookHeaders(headers) {
+    return Object.fromEntries([
+        'content-type',
+        DELIVERY_HEADER,
+        EVENT_HEADER,
+        SIGNATURE_HEADER,
+        'linear-timestamp'
+    ].flatMap((name)=>{
+        const value = headers[name];
+        return typeof value === 'string' ? [
+            [
+                name,
+                value
+            ]
+        ] : [];
+    }));
+}
+function sendLinearWebhookResponse(reply, result) {
+    if (result.outcome !== 'discarded') {
+        reply.code(200);
+        return null;
+    }
+    if (result.reason === 'invalid_signature') {
+        reply.code(401);
+        return {
+            error: 'invalid signature'
+        };
+    }
+    if (result.reason === 'stale_at_receipt') {
+        reply.code(401);
+        return {
+            error: 'stale webhook timestamp'
+        };
+    }
+    if (result.reason === 'malformed_payload') {
+        reply.code(400);
+        return {
+            error: 'malformed JSON'
+        };
+    }
+    reply.code(200);
+    return null;
 }
 
 //# sourceMappingURL=webhooks.js.map

package/dist/presentation/routes/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {Buffer} from 'node:buffer';\nimport type {\n  GetIntegrationConnectionByIdFn,\n  IntegrationTx,\n  PublishIntegrationEventReceivedFn,\n  RecordDeliveryOnlyFn,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  LINEAR_PROVIDER,\n  linearWebhookBaseEnvelopeSchema,\n} from '@shipfox/api-integration-linear-dto';\nimport {\n  defineRoute,\n  type RouteGroup,\n  rawBodyPlugin,\n  verifyHexHmacSignature,\n  WEBHOOK_BODY_LIMIT,\n} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {NodePgDatabase} from 'drizzle-orm/node-postgres';\nimport {config} from '#config.js';\nimport {handleLinearWebhook} from '#core/webhook.js';\n\nconst DELIVERY_HEADER = 'linear-delivery';\nconst EVENT_HEADER = 'linear-event';\nconst SIGNATURE_HEADER = 'linear-signature';\nconst WEBHOOK_REPLAY_WINDOW_MS = 60_000;\n\nexport interface CreateLinearWebhookRoutesOptions {\n  coreDb: () => NodePgDatabase<Record<string, unknown>>;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n}\n\nexport function createLinearWebhookRoutes(options: CreateLinearWebhookRoutesOptions): RouteGroup {\n  const webhookRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Linear webhook receiver.',\n    options: {bodyLimit: WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const deliveryHeader = request.headers[DELIVERY_HEADER];\n      const event = request.headers[EVENT_HEADER];\n      const signature = request.headers[SIGNATURE_HEADER];\n\n      if (typeof deliveryHeader !== 'string' || !deliveryHeader) {\n        reply.code(400);\n        return {error: 'missing Linear-Delivery header'};\n      }\n      if (typeof event !== 'string' || !event) {\n        reply.code(400);\n        return {error: 'missing Linear-Event header'};\n      }\n      if (typeof signature !== 'string' || !signature) {\n        reply.code(401);\n        return {error: 'missing Linear-Signature header'};\n      }\n\n      const body = request.body;\n      if (!Buffer.isBuffer(body)) {\n        reply.code(400);\n        return {error: 'expected raw JSON body'};\n      }\n      const rawBody = body.toString('utf8');\n\n      if (\n        !verifyHexHmacSignature({\n          rawBody,\n          signature,\n          secret: config.LINEAR_WEBHOOK_SIGNING_SECRET,\n        })\n      ) {\n        reply.code(401);\n        return {error: 'invalid signature'};\n      }\n\n      let parsedJson: unknown;\n      try {\n        parsedJson = JSON.parse(rawBody);\n      } catch (error) {\n        logger().warn(\n          {deliveryId: deliveryHeader, err: error},\n          'linear webhook payload JSON parse failed',\n        );\n        reply.code(400);\n        return {error: 'malformed JSON'};\n      }\n\n      const payload = linearWebhookBaseEnvelopeSchema.safeParse(parsedJson);\n      if (!payload.success) {\n        logger().warn(\n          {deliveryId: deliveryHeader, issues: payload.error.issues},\n          'linear webhook envelope failed schema validation',\n        );\n        await recordSignedDeliveryOnly(options, deliveryHeader);\n        reply.code(200);\n        return null;\n      }\n\n      if (Math.abs(Date.now() - payload.data.webhookTimestamp) > WEBHOOK_REPLAY_WINDOW_MS) {\n        reply.code(401);\n        return {error: 'stale webhook timestamp'};\n      }\n\n      if (event !== payload.data.type) {\n        logger().warn(\n          {deliveryId: deliveryHeader, event, type: payload.data.type},\n          'linear webhook event header did not match payload type',\n        );\n        await recordSignedDeliveryOnly(options, deliveryHeader);\n        reply.code(200);\n        return null;\n      }\n\n      await options.coreDb().transaction(async (tx) => {\n        await handleLinearWebhook({\n          tx,\n          // Linear documents this header as the delivery UUID; the signed timestamp is per-send.\n          deliveryId: deliveryHeader,\n          payload: payload.data,\n          rawPayload: parsedJson,\n          publishIntegrationEventReceived: options.publishIntegrationEventReceived,\n          recordDeliveryOnly: options.recordDeliveryOnly,\n          getIntegrationConnectionById: options.getIntegrationConnectionById,\n        });\n      });\n\n      reply.code(200);\n      return null;\n    },\n  });\n\n  return {\n    prefix: '/webhooks/integrations/linear',\n    auth: [],\n    plugins: [rawBodyPlugin],\n    routes: [webhookRoute],\n  };\n}\n\nasync function recordSignedDeliveryOnly(\n  options: Pick<CreateLinearWebhookRoutesOptions, 'coreDb' | 'recordDeliveryOnly'>,\n  deliveryId: string,\n): Promise<void> {\n  await options.coreDb().transaction(async (tx: IntegrationTx) => {\n    await options.recordDeliveryOnly({\n      tx,\n      provider: LINEAR_PROVIDER,\n      deliveryId,\n    });\n  });\n}\n"],"names":["Buffer","LINEAR_PROVIDER","linearWebhookBaseEnvelopeSchema","defineRoute","rawBodyPlugin","verifyHexHmacSignature","WEBHOOK_BODY_LIMIT","logger","config","handleLinearWebhook","DELIVERY_HEADER","EVENT_HEADER","SIGNATURE_HEADER","WEBHOOK_REPLAY_WINDOW_MS","createLinearWebhookRoutes","options","webhookRoute","method","path","auth","description","bodyLimit","handler","request","reply","deliveryHeader","headers","event","signature","code","error","body","isBuffer","rawBody","toString","secret","LINEAR_WEBHOOK_SIGNING_SECRET","parsedJson","JSON","parse","warn","deliveryId","err","payload","safeParse","success","issues","recordSignedDeliveryOnly","Math","abs","Date","now","data","webhookTimestamp","type","coreDb","transaction","tx","rawPayload","publishIntegrationEventReceived","recordDeliveryOnly","getIntegrationConnectionById","prefix","plugins","routes","provider"],"mappings":"AAAA,SAAQA,MAAM,QAAO,cAAc;AAOnC,SACEC,eAAe,EACfC,+BAA+B,QAC1B,sCAAsC;AAC7C,SACEC,WAAW,EAEXC,aAAa,EACbC,sBAAsB,EACtBC,kBAAkB,QACb,wBAAwB;AAC/B,SAAQC,MAAM,QAAO,8BAA8B;AAEnD,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,mBAAmB,QAAO,mBAAmB;AAErD,MAAMC,kBAAkB;AACxB,MAAMC,eAAe;AACrB,MAAMC,mBAAmB;AACzB,MAAMC,2BAA2B;AASjC,OAAO,SAASC,0BAA0BC,OAAyC;IACjF,MAAMC,eAAeb,YAAY;QAC/Bc,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbL,SAAS;YAACM,WAAWf;QAAkB;QACvCgB,SAAS,OAAOC,SAASC;YACvB,MAAMC,iBAAiBF,QAAQG,OAAO,CAAChB,gBAAgB;YACvD,MAAMiB,QAAQJ,QAAQG,OAAO,CAACf,aAAa;YAC3C,MAAMiB,YAAYL,QAAQG,OAAO,CAACd,iBAAiB;YAEnD,IAAI,OAAOa,mBAAmB,YAAY,CAACA,gBAAgB;gBACzDD,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAgC;YACjD;YACA,IAAI,OAAOH,UAAU,YAAY,CAACA,OAAO;gBACvCH,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAA6B;YAC9C;YACA,IAAI,OAAOF,cAAc,YAAY,CAACA,WAAW;gBAC/CJ,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAiC;YAClD;YAEA,MAAMC,OAAOR,QAAQQ,IAAI;YACzB,IAAI,CAAC/B,OAAOgC,QAAQ,CAACD,OAAO;gBAC1BP,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,MAAMG,UAAUF,KAAKG,QAAQ,CAAC;YAE9B,IACE,CAAC7B,uBAAuB;gBACtB4B;gBACAL;gBACAO,QAAQ3B,OAAO4B,6BAA6B;YAC9C,IACA;gBACAZ,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAmB;YACpC;YAEA,IAAIO;YACJ,IAAI;gBACFA,aAAaC,KAAKC,KAAK,CAACN;YAC1B,EAAE,OAAOH,OAAO;gBACdvB,SAASiC,IAAI,CACX;oBAACC,YAAYhB;oBAAgBiB,KAAKZ;gBAAK,GACvC;gBAEFN,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAgB;YACjC;YAEA,MAAMa,UAAUzC,gCAAgC0C,SAAS,CAACP;YAC1D,IAAI,CAACM,QAAQE,OAAO,EAAE;gBACpBtC,SAASiC,IAAI,CACX;oBAACC,YAAYhB;oBAAgBqB,QAAQH,QAAQb,KAAK,CAACgB,MAAM;gBAAA,GACzD;gBAEF,MAAMC,yBAAyBhC,SAASU;gBACxCD,MAAMK,IAAI,CAAC;gBACX,OAAO;YACT;YAEA,IAAImB,KAAKC,GAAG,CAACC,KAAKC,GAAG,KAAKR,QAAQS,IAAI,CAACC,gBAAgB,IAAIxC,0BAA0B;gBACnFW,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAyB;YAC1C;YAEA,IAAIH,UAAUgB,QAAQS,IAAI,CAACE,IAAI,EAAE;gBAC/B/C,SAASiC,IAAI,CACX;oBAACC,YAAYhB;oBAAgBE;oBAAO2B,MAAMX,QAAQS,IAAI,CAACE,IAAI;gBAAA,GAC3D;gBAEF,MAAMP,yBAAyBhC,SAASU;gBACxCD,MAAMK,IAAI,CAAC;gBACX,OAAO;YACT;YAEA,MAAMd,QAAQwC,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBACxC,MAAMhD,oBAAoB;oBACxBgD;oBACA,uFAAuF;oBACvFhB,YAAYhB;oBACZkB,SAASA,QAAQS,IAAI;oBACrBM,YAAYrB;oBACZsB,iCAAiC5C,QAAQ4C,+BAA+B;oBACxEC,oBAAoB7C,QAAQ6C,kBAAkB;oBAC9CC,8BAA8B9C,QAAQ8C,4BAA4B;gBACpE;YACF;YAEArC,MAAMK,IAAI,CAAC;YACX,OAAO;QACT;IACF;IAEA,OAAO;QACLiC,QAAQ;QACR3C,MAAM,EAAE;QACR4C,SAAS;YAAC3D;SAAc;QACxB4D,QAAQ;YAAChD;SAAa;IACxB;AACF;AAEA,eAAe+B,yBACbhC,OAAgF,EAChF0B,UAAkB;IAElB,MAAM1B,QAAQwC,MAAM,GAAGC,WAAW,CAAC,OAAOC;QACxC,MAAM1C,QAAQ6C,kBAAkB,CAAC;YAC/BH;YACAQ,UAAUhE;YACVwC;QACF;IACF;AACF"}
+{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {randomUUID} from 'node:crypto';\nimport type {\n  GetIntegrationConnectionByIdFn,\n  PublishIntegrationEventReceivedFn,\n  RecordDeliveryOnlyFn,\n  StoredWebhookRequest,\n  WebhookProcessingResult,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  createStoredWebhookRequest,\n  WEBHOOK_MAX_RAW_BODY_BYTES,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  ClientError,\n  defineRoute,\n  type RouteGroup,\n  rawBodyPlugin,\n  WEBHOOK_BODY_LIMIT,\n} from '@shipfox/node-fastify';\nimport type {NodePgDatabase} from 'drizzle-orm/node-postgres';\nimport {\n  createLinearWebhookProcessor,\n  type LinearWebhookProcessor,\n} from '#core/webhook-processor.js';\n\nconst DELIVERY_HEADER = 'linear-delivery';\nconst EVENT_HEADER = 'linear-event';\nconst SIGNATURE_HEADER = 'linear-signature';\n\nexport interface CreateLinearWebhookRoutesOptions {\n  coreDb: () => NodePgDatabase<Record<string, unknown>>;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n  processor?: LinearWebhookProcessor | undefined;\n}\n\nexport function createLinearWebhookRoutes(options: CreateLinearWebhookRoutesOptions): RouteGroup {\n  const processor = options.processor ?? createLinearWebhookProcessor(options);\n  const webhookRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Linear webhook receiver.',\n    options: {bodyLimit: WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const receivedAt = new Date().toISOString();\n      const deliveryHeader = request.headers[DELIVERY_HEADER];\n      const event = request.headers[EVENT_HEADER];\n      const signature = request.headers[SIGNATURE_HEADER];\n\n      if (typeof deliveryHeader !== 'string' || !deliveryHeader) {\n        reply.code(400);\n        return {error: 'missing Linear-Delivery header'};\n      }\n      if (typeof event !== 'string' || !event) {\n        reply.code(400);\n        return {error: 'missing Linear-Event header'};\n      }\n      if (typeof signature !== 'string' || !signature) {\n        reply.code(401);\n        return {error: 'missing Linear-Signature header'};\n      }\n\n      const body = request.body;\n      if (!(body instanceof Uint8Array)) {\n        reply.code(400);\n        return {error: 'expected raw JSON body'};\n      }\n      const result = await processor.process(\n        createLinearStoredWebhookRequest(\n          {\n            body,\n            headers: request.headers,\n            rawQueryString: request.raw.url?.split('?')[1] ?? '',\n          },\n          receivedAt,\n        ),\n      );\n\n      return sendLinearWebhookResponse(reply, result);\n    },\n  });\n\n  return {\n    prefix: '/webhooks/integrations/linear',\n    auth: [],\n    plugins: [rawBodyPlugin],\n    routes: [webhookRoute],\n  };\n}\n\nfunction createLinearStoredWebhookRequest(\n  input: {\n    body: Uint8Array;\n    headers: Record<string, string | string[] | undefined>;\n    rawQueryString: string;\n  },\n  receivedAt: string,\n): StoredWebhookRequest {\n  if (input.body.byteLength > WEBHOOK_MAX_RAW_BODY_BYTES) {\n    throw new ClientError('Webhook request body is too large', 'body-too-large', {status: 413});\n  }\n\n  try {\n    return createStoredWebhookRequest({\n      requestId: randomUUID(),\n      routeId: 'linear',\n      receivedAt,\n      rawQueryString: input.rawQueryString,\n      headers: linearWebhookHeaders(input.headers),\n      body: input.body,\n    });\n  } catch (error) {\n    throw new ClientError('Webhook request metadata is invalid', 'invalid-webhook-request', {\n      cause: error,\n    });\n  }\n}\n\nfunction linearWebhookHeaders(headers: Record<string, string | string[] | undefined>) {\n  return Object.fromEntries(\n    ['content-type', DELIVERY_HEADER, EVENT_HEADER, SIGNATURE_HEADER, 'linear-timestamp'].flatMap(\n      (name) => {\n        const value = headers[name];\n        return typeof value === 'string' ? [[name, value]] : [];\n      },\n    ),\n  );\n}\n\nfunction sendLinearWebhookResponse(\n  reply: {code(statusCode: number): void},\n  result: WebhookProcessingResult,\n) {\n  if (result.outcome !== 'discarded') {\n    reply.code(200);\n    return null;\n  }\n\n  if (result.reason === 'invalid_signature') {\n    reply.code(401);\n    return {error: 'invalid signature'};\n  }\n  if (result.reason === 'stale_at_receipt') {\n    reply.code(401);\n    return {error: 'stale webhook timestamp'};\n  }\n  if (result.reason === 'malformed_payload') {\n    reply.code(400);\n    return {error: 'malformed JSON'};\n  }\n\n  reply.code(200);\n  return null;\n}\n"],"names":["randomUUID","createStoredWebhookRequest","WEBHOOK_MAX_RAW_BODY_BYTES","ClientError","defineRoute","rawBodyPlugin","WEBHOOK_BODY_LIMIT","createLinearWebhookProcessor","DELIVERY_HEADER","EVENT_HEADER","SIGNATURE_HEADER","createLinearWebhookRoutes","options","processor","webhookRoute","method","path","auth","description","bodyLimit","handler","request","reply","receivedAt","Date","toISOString","deliveryHeader","headers","event","signature","code","error","body","Uint8Array","result","process","createLinearStoredWebhookRequest","rawQueryString","raw","url","split","sendLinearWebhookResponse","prefix","plugins","routes","input","byteLength","status","requestId","routeId","linearWebhookHeaders","cause","Object","fromEntries","flatMap","name","value","outcome","reason"],"mappings":"AAAA,SAAQA,UAAU,QAAO,cAAc;AAQvC,SACEC,0BAA0B,EAC1BC,0BAA0B,QACrB,oCAAoC;AAC3C,SACEC,WAAW,EACXC,WAAW,EAEXC,aAAa,EACbC,kBAAkB,QACb,wBAAwB;AAE/B,SACEC,4BAA4B,QAEvB,6BAA6B;AAEpC,MAAMC,kBAAkB;AACxB,MAAMC,eAAe;AACrB,MAAMC,mBAAmB;AAUzB,OAAO,SAASC,0BAA0BC,OAAyC;IACjF,MAAMC,YAAYD,QAAQC,SAAS,IAAIN,6BAA6BK;IACpE,MAAME,eAAeV,YAAY;QAC/BW,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbN,SAAS;YAACO,WAAWb;QAAkB;QACvCc,SAAS,OAAOC,SAASC;YACvB,MAAMC,aAAa,IAAIC,OAAOC,WAAW;YACzC,MAAMC,iBAAiBL,QAAQM,OAAO,CAACnB,gBAAgB;YACvD,MAAMoB,QAAQP,QAAQM,OAAO,CAAClB,aAAa;YAC3C,MAAMoB,YAAYR,QAAQM,OAAO,CAACjB,iBAAiB;YAEnD,IAAI,OAAOgB,mBAAmB,YAAY,CAACA,gBAAgB;gBACzDJ,MAAMQ,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAgC;YACjD;YACA,IAAI,OAAOH,UAAU,YAAY,CAACA,OAAO;gBACvCN,MAAMQ,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAA6B;YAC9C;YACA,IAAI,OAAOF,cAAc,YAAY,CAACA,WAAW;gBAC/CP,MAAMQ,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAiC;YAClD;YAEA,MAAMC,OAAOX,QAAQW,IAAI;YACzB,IAAI,CAAEA,CAAAA,gBAAgBC,UAAS,GAAI;gBACjCX,MAAMQ,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,MAAMG,SAAS,MAAMrB,UAAUsB,OAAO,CACpCC,iCACE;gBACEJ;gBACAL,SAASN,QAAQM,OAAO;gBACxBU,gBAAgBhB,QAAQiB,GAAG,CAACC,GAAG,EAAEC,MAAM,IAAI,CAAC,EAAE,IAAI;YACpD,GACAjB;YAIJ,OAAOkB,0BAA0BnB,OAAOY;QAC1C;IACF;IAEA,OAAO;QACLQ,QAAQ;QACRzB,MAAM,EAAE;QACR0B,SAAS;YAACtC;SAAc;QACxBuC,QAAQ;YAAC9B;SAAa;IACxB;AACF;AAEA,SAASsB,iCACPS,KAIC,EACDtB,UAAkB;IAElB,IAAIsB,MAAMb,IAAI,CAACc,UAAU,GAAG5C,4BAA4B;QACtD,MAAM,IAAIC,YAAY,qCAAqC,kBAAkB;YAAC4C,QAAQ;QAAG;IAC3F;IAEA,IAAI;QACF,OAAO9C,2BAA2B;YAChC+C,WAAWhD;YACXiD,SAAS;YACT1B;YACAc,gBAAgBQ,MAAMR,cAAc;YACpCV,SAASuB,qBAAqBL,MAAMlB,OAAO;YAC3CK,MAAMa,MAAMb,IAAI;QAClB;IACF,EAAE,OAAOD,OAAO;QACd,MAAM,IAAI5B,YAAY,uCAAuC,2BAA2B;YACtFgD,OAAOpB;QACT;IACF;AACF;AAEA,SAASmB,qBAAqBvB,OAAsD;IAClF,OAAOyB,OAAOC,WAAW,CACvB;QAAC;QAAgB7C;QAAiBC;QAAcC;QAAkB;KAAmB,CAAC4C,OAAO,CAC3F,CAACC;QACC,MAAMC,QAAQ7B,OAAO,CAAC4B,KAAK;QAC3B,OAAO,OAAOC,UAAU,WAAW;YAAC;gBAACD;gBAAMC;aAAM;SAAC,GAAG,EAAE;IACzD;AAGN;AAEA,SAASf,0BACPnB,KAAuC,EACvCY,MAA+B;IAE/B,IAAIA,OAAOuB,OAAO,KAAK,aAAa;QAClCnC,MAAMQ,IAAI,CAAC;QACX,OAAO;IACT;IAEA,IAAII,OAAOwB,MAAM,KAAK,qBAAqB;QACzCpC,MAAMQ,IAAI,CAAC;QACX,OAAO;YAACC,OAAO;QAAmB;IACpC;IACA,IAAIG,OAAOwB,MAAM,KAAK,oBAAoB;QACxCpC,MAAMQ,IAAI,CAAC;QACX,OAAO;YAACC,OAAO;QAAyB;IAC1C;IACA,IAAIG,OAAOwB,MAAM,KAAK,qBAAqB;QACzCpC,MAAMQ,IAAI,CAAC;QACX,OAAO;YAACC,OAAO;QAAgB;IACjC;IAEAT,MAAMQ,IAAI,CAAC;IACX,OAAO;AACT"}