@shipfox/api-integration-sentry 2.0.0

package/dist/presentation/routes/installation-handler.js

@@ -0,0 +1,70 @@
+import { sentryInstallationWebhookSchema } from '@shipfox/api-integration-sentry-dto';
+import { config } from '#config.js';
+import { handleSentryInstallationCreated, handleSentryInstallationDeleted } from '#core/webhook.js';
+import { getSentryInstallationByInstallationUuid, persistVerifiedUnclaimedInstallation } from '#db/installations.js';
+import { parseAndValidateOrDrop, SENTRY_PROVIDER } from './webhook-delivery.js';
+// Validates an installation lifecycle delivery, then applies it. `created` is the
+// authoritative install signal: it exchanges the single-use code and persists a
+// verified-unclaimed row (exchange outside any transaction; persist + delivery
+// record in one short transaction). `deleted` tombstones the install and disables
+// the connection in a single transaction.
+export async function handleInstallationResource(args) {
+    const { context, reply, deliveryId, rawBody } = args;
+    const payload = await parseAndValidateOrDrop({
+        schema: sentryInstallationWebhookSchema,
+        rawBody,
+        deliveryId,
+        context,
+        reply
+    });
+    if (!payload) return null;
+    const installation = payload.data.installation;
+    if (payload.action === 'deleted') {
+        await context.coreDb().transaction(async (tx)=>{
+            await handleSentryInstallationDeleted({
+                tx,
+                deliveryId,
+                installationUuid: installation.uuid,
+                recordDeliveryOnly: context.recordDeliveryOnly,
+                updateConnectionLifecycleStatus: context.updateConnectionLifecycleStatus
+            });
+        });
+        reply.code(204);
+        return null;
+    }
+    await handleSentryInstallationCreated({
+        deliveryId,
+        installationUuid: installation.uuid,
+        orgSlug: installation.organization?.slug,
+        code: installation.code,
+        sentry: context.sentry,
+        verifyInstall: config.SENTRY_APP_VERIFY_INSTALL,
+        getSentryInstallation: ({ installationUuid })=>getSentryInstallationByInstallationUuid(installationUuid),
+        persistUnclaimedAndRecordDelivery: ({ installationUuid, orgSlug, codeHash, deliveryId: id })=>context.coreDb().transaction(async (tx)=>{
+                const persisted = await persistVerifiedUnclaimedInstallation({
+                    installationUuid,
+                    orgSlug,
+                    codeHash
+                }, {
+                    tx
+                });
+                await context.recordDeliveryOnly({
+                    tx,
+                    provider: SENTRY_PROVIDER,
+                    deliveryId: id
+                });
+                return persisted;
+            }),
+        recordDelivery: (id)=>context.coreDb().transaction(async (tx)=>{
+                await context.recordDeliveryOnly({
+                    tx,
+                    provider: SENTRY_PROVIDER,
+                    deliveryId: id
+                });
+            })
+    });
+    reply.code(204);
+    return null;
+}
+
+//# sourceMappingURL=installation-handler.js.map

package/dist/presentation/routes/installation-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/installation-handler.ts"],"sourcesContent":["import {sentryInstallationWebhookSchema} from '@shipfox/api-integration-sentry-dto';\nimport type {FastifyReply} from 'fastify';\nimport {config} from '#config.js';\nimport {handleSentryInstallationCreated, handleSentryInstallationDeleted} from '#core/webhook.js';\nimport {\n  getSentryInstallationByInstallationUuid,\n  persistVerifiedUnclaimedInstallation,\n} from '#db/installations.js';\nimport type {SentryWebhookContext} from './webhook-context.js';\nimport {parseAndValidateOrDrop, SENTRY_PROVIDER} from './webhook-delivery.js';\n\n// Validates an installation lifecycle delivery, then applies it. `created` is the\n// authoritative install signal: it exchanges the single-use code and persists a\n// verified-unclaimed row (exchange outside any transaction; persist + delivery\n// record in one short transaction). `deleted` tombstones the install and disables\n// the connection in a single transaction.\nexport async function handleInstallationResource(args: {\n  context: SentryWebhookContext;\n  reply: FastifyReply;\n  deliveryId: string;\n  rawBody: string;\n}): Promise<null> {\n  const {context, reply, deliveryId, rawBody} = args;\n\n  const payload = await parseAndValidateOrDrop({\n    schema: sentryInstallationWebhookSchema,\n    rawBody,\n    deliveryId,\n    context,\n    reply,\n  });\n  if (!payload) return null;\n\n  const installation = payload.data.installation;\n\n  if (payload.action === 'deleted') {\n    await context.coreDb().transaction(async (tx) => {\n      await handleSentryInstallationDeleted({\n        tx,\n        deliveryId,\n        installationUuid: installation.uuid,\n        recordDeliveryOnly: context.recordDeliveryOnly,\n        updateConnectionLifecycleStatus: context.updateConnectionLifecycleStatus,\n      });\n    });\n    reply.code(204);\n    return null;\n  }\n\n  await handleSentryInstallationCreated({\n    deliveryId,\n    installationUuid: installation.uuid,\n    orgSlug: installation.organization?.slug,\n    code: installation.code,\n    sentry: context.sentry,\n    verifyInstall: config.SENTRY_APP_VERIFY_INSTALL,\n    getSentryInstallation: ({installationUuid}) =>\n      getSentryInstallationByInstallationUuid(installationUuid),\n    persistUnclaimedAndRecordDelivery: ({installationUuid, orgSlug, codeHash, deliveryId: id}) =>\n      context.coreDb().transaction(async (tx) => {\n        const persisted = await persistVerifiedUnclaimedInstallation(\n          {installationUuid, orgSlug, codeHash},\n          {tx},\n        );\n        await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId: id});\n        return persisted;\n      }),\n    recordDelivery: (id) =>\n      context.coreDb().transaction(async (tx) => {\n        await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId: id});\n      }),\n  });\n\n  reply.code(204);\n  return null;\n}\n"],"names":["sentryInstallationWebhookSchema","config","handleSentryInstallationCreated","handleSentryInstallationDeleted","getSentryInstallationByInstallationUuid","persistVerifiedUnclaimedInstallation","parseAndValidateOrDrop","SENTRY_PROVIDER","handleInstallationResource","args","context","reply","deliveryId","rawBody","payload","schema","installation","data","action","coreDb","transaction","tx","installationUuid","uuid","recordDeliveryOnly","updateConnectionLifecycleStatus","code","orgSlug","organization","slug","sentry","verifyInstall","SENTRY_APP_VERIFY_INSTALL","getSentryInstallation","persistUnclaimedAndRecordDelivery","codeHash","id","persisted","provider","recordDelivery"],"mappings":"AAAA,SAAQA,+BAA+B,QAAO,sCAAsC;AAEpF,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,+BAA+B,EAAEC,+BAA+B,QAAO,mBAAmB;AAClG,SACEC,uCAAuC,EACvCC,oCAAoC,QAC/B,uBAAuB;AAE9B,SAAQC,sBAAsB,EAAEC,eAAe,QAAO,wBAAwB;AAE9E,kFAAkF;AAClF,gFAAgF;AAChF,+EAA+E;AAC/E,kFAAkF;AAClF,0CAA0C;AAC1C,OAAO,eAAeC,2BAA2BC,IAKhD;IACC,MAAM,EAACC,OAAO,EAAEC,KAAK,EAAEC,UAAU,EAAEC,OAAO,EAAC,GAAGJ;IAE9C,MAAMK,UAAU,MAAMR,uBAAuB;QAC3CS,QAAQf;QACRa;QACAD;QACAF;QACAC;IACF;IACA,IAAI,CAACG,SAAS,OAAO;IAErB,MAAME,eAAeF,QAAQG,IAAI,CAACD,YAAY;IAE9C,IAAIF,QAAQI,MAAM,KAAK,WAAW;QAChC,MAAMR,QAAQS,MAAM,GAAGC,WAAW,CAAC,OAAOC;YACxC,MAAMlB,gCAAgC;gBACpCkB;gBACAT;gBACAU,kBAAkBN,aAAaO,IAAI;gBACnCC,oBAAoBd,QAAQc,kBAAkB;gBAC9CC,iCAAiCf,QAAQe,+BAA+B;YAC1E;QACF;QACAd,MAAMe,IAAI,CAAC;QACX,OAAO;IACT;IAEA,MAAMxB,gCAAgC;QACpCU;QACAU,kBAAkBN,aAAaO,IAAI;QACnCI,SAASX,aAAaY,YAAY,EAAEC;QACpCH,MAAMV,aAAaU,IAAI;QACvBI,QAAQpB,QAAQoB,MAAM;QACtBC,eAAe9B,OAAO+B,yBAAyB;QAC/CC,uBAAuB,CAAC,EAACX,gBAAgB,EAAC,GACxClB,wCAAwCkB;QAC1CY,mCAAmC,CAAC,EAACZ,gBAAgB,EAAEK,OAAO,EAAEQ,QAAQ,EAAEvB,YAAYwB,EAAE,EAAC,GACvF1B,QAAQS,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBAClC,MAAMgB,YAAY,MAAMhC,qCACtB;oBAACiB;oBAAkBK;oBAASQ;gBAAQ,GACpC;oBAACd;gBAAE;gBAEL,MAAMX,QAAQc,kBAAkB,CAAC;oBAACH;oBAAIiB,UAAU/B;oBAAiBK,YAAYwB;gBAAE;gBAC/E,OAAOC;YACT;QACFE,gBAAgB,CAACH,KACf1B,QAAQS,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBAClC,MAAMX,QAAQc,kBAAkB,CAAC;oBAACH;oBAAIiB,UAAU/B;oBAAiBK,YAAYwB;gBAAE;YACjF;IACJ;IAEAzB,MAAMe,IAAI,CAAC;IACX,OAAO;AACT"}

package/dist/presentation/routes/issue-handler.d.ts

@@ -0,0 +1,9 @@
+import type { FastifyReply } from 'fastify';
+import type { SentryWebhookContext } from './webhook-context.js';
+export declare function handleIssueResource(args: {
+    context: SentryWebhookContext;
+    reply: FastifyReply;
+    deliveryId: string;
+    rawBody: string;
+}): Promise<null>;
+//# sourceMappingURL=issue-handler.d.ts.map

package/dist/presentation/routes/issue-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-handler.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/issue-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAQ/D,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB"}

package/dist/presentation/routes/issue-handler.js

@@ -0,0 +1,50 @@
+import { sentryIssueWebhookSchema } from '@shipfox/api-integration-sentry-dto';
+import { logger } from '@shipfox/node-opentelemetry';
+import { SentryIssueDroppedError } from '#core/errors.js';
+import { handleSentryIssueEvent, normalizeSentryIssueAction } from '#core/webhook.js';
+import { parseAndValidateOrDrop, recordAndDrop } from './webhook-delivery.js';
+// Validates an issue delivery, then publishes the mapped event in a transaction.
+// A malformed or unknown-action payload is recorded-and-dropped (204) before we
+// reach core. Core throws a SentryIssueDroppedError when the delivery references
+// state we cannot publish against (unknown/deleted installation, missing
+// connection); we record-and-drop those too. Any other error bubbles up.
+export async function handleIssueResource(args) {
+    const { context, reply, deliveryId, rawBody } = args;
+    const payload = await parseAndValidateOrDrop({
+        schema: sentryIssueWebhookSchema,
+        normalize: normalizeSentryIssueAction,
+        rawBody,
+        deliveryId,
+        context,
+        reply
+    });
+    if (!payload) return null;
+    try {
+        await context.coreDb().transaction(async (tx)=>{
+            await handleSentryIssueEvent({
+                tx,
+                deliveryId,
+                payload,
+                publishIntegrationEventReceived: context.publishIntegrationEventReceived,
+                getIntegrationConnectionById: context.getIntegrationConnectionById
+            });
+        });
+    } catch (error) {
+        if (error instanceof SentryIssueDroppedError) {
+            logger().warn({
+                deliveryId,
+                err: error
+            }, `sentry webhook: ${error.message}, dropping`);
+            return recordAndDrop({
+                context,
+                reply,
+                deliveryId
+            });
+        }
+        throw error;
+    }
+    reply.code(204);
+    return null;
+}
+
+//# sourceMappingURL=issue-handler.js.map

package/dist/presentation/routes/issue-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/issue-handler.ts"],"sourcesContent":["import {sentryIssueWebhookSchema} from '@shipfox/api-integration-sentry-dto';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {FastifyReply} from 'fastify';\nimport {SentryIssueDroppedError} from '#core/errors.js';\nimport {handleSentryIssueEvent, normalizeSentryIssueAction} from '#core/webhook.js';\nimport type {SentryWebhookContext} from './webhook-context.js';\nimport {parseAndValidateOrDrop, recordAndDrop} from './webhook-delivery.js';\n\n// Validates an issue delivery, then publishes the mapped event in a transaction.\n// A malformed or unknown-action payload is recorded-and-dropped (204) before we\n// reach core. Core throws a SentryIssueDroppedError when the delivery references\n// state we cannot publish against (unknown/deleted installation, missing\n// connection); we record-and-drop those too. Any other error bubbles up.\nexport async function handleIssueResource(args: {\n  context: SentryWebhookContext;\n  reply: FastifyReply;\n  deliveryId: string;\n  rawBody: string;\n}): Promise<null> {\n  const {context, reply, deliveryId, rawBody} = args;\n\n  const payload = await parseAndValidateOrDrop({\n    schema: sentryIssueWebhookSchema,\n    normalize: normalizeSentryIssueAction,\n    rawBody,\n    deliveryId,\n    context,\n    reply,\n  });\n  if (!payload) return null;\n\n  try {\n    await context.coreDb().transaction(async (tx) => {\n      await handleSentryIssueEvent({\n        tx,\n        deliveryId,\n        payload,\n        publishIntegrationEventReceived: context.publishIntegrationEventReceived,\n        getIntegrationConnectionById: context.getIntegrationConnectionById,\n      });\n    });\n  } catch (error) {\n    if (error instanceof SentryIssueDroppedError) {\n      logger().warn({deliveryId, err: error}, `sentry webhook: ${error.message}, dropping`);\n      return recordAndDrop({context, reply, deliveryId});\n    }\n    throw error;\n  }\n\n  reply.code(204);\n  return null;\n}\n"],"names":["sentryIssueWebhookSchema","logger","SentryIssueDroppedError","handleSentryIssueEvent","normalizeSentryIssueAction","parseAndValidateOrDrop","recordAndDrop","handleIssueResource","args","context","reply","deliveryId","rawBody","payload","schema","normalize","coreDb","transaction","tx","publishIntegrationEventReceived","getIntegrationConnectionById","error","warn","err","message","code"],"mappings":"AAAA,SAAQA,wBAAwB,QAAO,sCAAsC;AAC7E,SAAQC,MAAM,QAAO,8BAA8B;AAEnD,SAAQC,uBAAuB,QAAO,kBAAkB;AACxD,SAAQC,sBAAsB,EAAEC,0BAA0B,QAAO,mBAAmB;AAEpF,SAAQC,sBAAsB,EAAEC,aAAa,QAAO,wBAAwB;AAE5E,iFAAiF;AACjF,gFAAgF;AAChF,iFAAiF;AACjF,yEAAyE;AACzE,yEAAyE;AACzE,OAAO,eAAeC,oBAAoBC,IAKzC;IACC,MAAM,EAACC,OAAO,EAAEC,KAAK,EAAEC,UAAU,EAAEC,OAAO,EAAC,GAAGJ;IAE9C,MAAMK,UAAU,MAAMR,uBAAuB;QAC3CS,QAAQd;QACRe,WAAWX;QACXQ;QACAD;QACAF;QACAC;IACF;IACA,IAAI,CAACG,SAAS,OAAO;IAErB,IAAI;QACF,MAAMJ,QAAQO,MAAM,GAAGC,WAAW,CAAC,OAAOC;YACxC,MAAMf,uBAAuB;gBAC3Be;gBACAP;gBACAE;gBACAM,iCAAiCV,QAAQU,+BAA+B;gBACxEC,8BAA8BX,QAAQW,4BAA4B;YACpE;QACF;IACF,EAAE,OAAOC,OAAO;QACd,IAAIA,iBAAiBnB,yBAAyB;YAC5CD,SAASqB,IAAI,CAAC;gBAACX;gBAAYY,KAAKF;YAAK,GAAG,CAAC,gBAAgB,EAAEA,MAAMG,OAAO,CAAC,UAAU,CAAC;YACpF,OAAOlB,cAAc;gBAACG;gBAASC;gBAAOC;YAAU;QAClD;QACA,MAAMU;IACR;IAEAX,MAAMe,IAAI,CAAC;IACX,OAAO;AACT"}

package/dist/presentation/routes/webhook-context.d.ts

@@ -0,0 +1,20 @@
+import type { GetIntegrationConnectionByIdFn, PublishIntegrationEventReceivedFn, RecordDeliveryOnlyFn, UpdateIntegrationConnectionLifecycleStatusFn } from '@shipfox/api-integration-core-dto';
+import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
+import type { SentryApiClient } from '#api/client.js';
+/**
+ * The capabilities a Sentry webhook handler needs from the rest of the system.
+ * `@shipfox/api-integration-core` owns and wires the core persistence in
+ * production; tests fake them with spies. Passing them in keeps the route
+ * decoupled from core's persistence and avoids a package dependency cycle. The
+ * Sentry client is injected too so the authoritative `installation.created` path
+ * can exchange the code, and tests can fake the exchange.
+ */
+export interface SentryWebhookContext {
+    sentry: SentryApiClient;
+    coreDb: () => NodePgDatabase<Record<string, unknown>>;
+    publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;
+    recordDeliveryOnly: RecordDeliveryOnlyFn;
+    getIntegrationConnectionById: GetIntegrationConnectionByIdFn;
+    updateConnectionLifecycleStatus: UpdateIntegrationConnectionLifecycleStatusFn;
+}
+//# sourceMappingURL=webhook-context.d.ts.map

package/dist/presentation/routes/webhook-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-context.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhook-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,8BAA8B,EAC9B,iCAAiC,EACjC,oBAAoB,EACpB,4CAA4C,EAC7C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,gBAAgB,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,eAAe,CAAC;IACxB,MAAM,EAAE,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,+BAA+B,EAAE,iCAAiC,CAAC;IACnE,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,4BAA4B,EAAE,8BAA8B,CAAC;IAC7D,+BAA+B,EAAE,4CAA4C,CAAC;CAC/E"}

package/dist/presentation/routes/webhook-context.js

@@ -0,0 +1,10 @@
+/**
+ * The capabilities a Sentry webhook handler needs from the rest of the system.
+ * `@shipfox/api-integration-core` owns and wires the core persistence in
+ * production; tests fake them with spies. Passing them in keeps the route
+ * decoupled from core's persistence and avoids a package dependency cycle. The
+ * Sentry client is injected too so the authoritative `installation.created` path
+ * can exchange the code, and tests can fake the exchange.
+ */ export { };
+
+//# sourceMappingURL=webhook-context.js.map

package/dist/presentation/routes/webhook-context.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/webhook-context.ts"],"sourcesContent":["import type {\n  GetIntegrationConnectionByIdFn,\n  PublishIntegrationEventReceivedFn,\n  RecordDeliveryOnlyFn,\n  UpdateIntegrationConnectionLifecycleStatusFn,\n} from '@shipfox/api-integration-core-dto';\nimport type {NodePgDatabase} from 'drizzle-orm/node-postgres';\nimport type {SentryApiClient} from '#api/client.js';\n\n/**\n * The capabilities a Sentry webhook handler needs from the rest of the system.\n * `@shipfox/api-integration-core` owns and wires the core persistence in\n * production; tests fake them with spies. Passing them in keeps the route\n * decoupled from core's persistence and avoids a package dependency cycle. The\n * Sentry client is injected too so the authoritative `installation.created` path\n * can exchange the code, and tests can fake the exchange.\n */\nexport interface SentryWebhookContext {\n  sentry: SentryApiClient;\n  coreDb: () => NodePgDatabase<Record<string, unknown>>;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n  updateConnectionLifecycleStatus: UpdateIntegrationConnectionLifecycleStatusFn;\n}\n"],"names":[],"mappings":"AASA;;;;;;;CAOC,GACD,WAOC"}

package/dist/presentation/routes/webhook-delivery.d.ts

@@ -0,0 +1,28 @@
+import type { FastifyReply } from 'fastify';
+import type { z } from 'zod';
+import type { SentryWebhookContext } from './webhook-context.js';
+export declare const SENTRY_PROVIDER = "sentry";
+/**
+ * Parses and validates a delivery body, recording-and-dropping it (HTTP 204) when
+ * the JSON is malformed or fails the schema (an unknown action falls here too).
+ * Returns the validated payload, or null when the delivery was dropped.
+ */
+export declare function parseAndValidateOrDrop<TSchema extends z.ZodType>(args: {
+    schema: TSchema;
+    rawBody: string;
+    deliveryId: string;
+    context: SentryWebhookContext;
+    reply: FastifyReply;
+    normalize?: (parsedJson: unknown) => unknown;
+}): Promise<z.infer<TSchema> | null>;
+/**
+ * Records the delivery for dedup and replies 204 without acting on it. A sustained
+ * non-2xx can degrade or disable the webhook on Sentry's side (a deliberate
+ * deviation from GitHub's 400), so deliveries we cannot use are acknowledged.
+ */
+export declare function recordAndDrop(args: {
+    context: SentryWebhookContext;
+    reply: FastifyReply;
+    deliveryId: string;
+}): Promise<null>;
+//# sourceMappingURL=webhook-delivery.d.ts.map

package/dist/presentation/routes/webhook-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhook-delivery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAC3B,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAE/D,eAAO,MAAM,eAAe,WAAW,CAAC;AAExC;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE;IAC5E,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC;CAC9C,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAuBnC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhB"}

package/dist/presentation/routes/webhook-delivery.js

@@ -0,0 +1,56 @@
+import { logger } from '@shipfox/node-opentelemetry';
+export const SENTRY_PROVIDER = 'sentry';
+/**
+ * Parses and validates a delivery body, recording-and-dropping it (HTTP 204) when
+ * the JSON is malformed or fails the schema (an unknown action falls here too).
+ * Returns the validated payload, or null when the delivery was dropped.
+ */ export async function parseAndValidateOrDrop(args) {
+    const { schema, rawBody, deliveryId, context, reply, normalize } = args;
+    let parsedJson;
+    try {
+        parsedJson = JSON.parse(rawBody);
+    } catch (error) {
+        logger().warn({
+            deliveryId,
+            err: error
+        }, 'sentry webhook: payload JSON parse failed, dropping');
+        await recordAndDrop({
+            context,
+            reply,
+            deliveryId
+        });
+        return null;
+    }
+    const validated = schema.safeParse(normalize ? normalize(parsedJson) : parsedJson);
+    if (!validated.success) {
+        logger().warn({
+            deliveryId,
+            issues: validated.error.issues
+        }, 'sentry webhook: payload failed validation (or unknown action), dropping');
+        await recordAndDrop({
+            context,
+            reply,
+            deliveryId
+        });
+        return null;
+    }
+    return validated.data;
+}
+/**
+ * Records the delivery for dedup and replies 204 without acting on it. A sustained
+ * non-2xx can degrade or disable the webhook on Sentry's side (a deliberate
+ * deviation from GitHub's 400), so deliveries we cannot use are acknowledged.
+ */ export async function recordAndDrop(args) {
+    const { context, reply, deliveryId } = args;
+    await context.coreDb().transaction(async (tx)=>{
+        await context.recordDeliveryOnly({
+            tx,
+            provider: SENTRY_PROVIDER,
+            deliveryId
+        });
+    });
+    reply.code(204);
+    return null;
+}
+
+//# sourceMappingURL=webhook-delivery.js.map

package/dist/presentation/routes/webhook-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/webhook-delivery.ts"],"sourcesContent":["import {logger} from '@shipfox/node-opentelemetry';\nimport type {FastifyReply} from 'fastify';\nimport type {z} from 'zod';\nimport type {SentryWebhookContext} from './webhook-context.js';\n\nexport const SENTRY_PROVIDER = 'sentry';\n\n/**\n * Parses and validates a delivery body, recording-and-dropping it (HTTP 204) when\n * the JSON is malformed or fails the schema (an unknown action falls here too).\n * Returns the validated payload, or null when the delivery was dropped.\n */\nexport async function parseAndValidateOrDrop<TSchema extends z.ZodType>(args: {\n  schema: TSchema;\n  rawBody: string;\n  deliveryId: string;\n  context: SentryWebhookContext;\n  reply: FastifyReply;\n  normalize?: (parsedJson: unknown) => unknown;\n}): Promise<z.infer<TSchema> | null> {\n  const {schema, rawBody, deliveryId, context, reply, normalize} = args;\n\n  let parsedJson: unknown;\n  try {\n    parsedJson = JSON.parse(rawBody);\n  } catch (error) {\n    logger().warn({deliveryId, err: error}, 'sentry webhook: payload JSON parse failed, dropping');\n    await recordAndDrop({context, reply, deliveryId});\n    return null;\n  }\n\n  const validated = schema.safeParse(normalize ? normalize(parsedJson) : parsedJson);\n  if (!validated.success) {\n    logger().warn(\n      {deliveryId, issues: validated.error.issues},\n      'sentry webhook: payload failed validation (or unknown action), dropping',\n    );\n    await recordAndDrop({context, reply, deliveryId});\n    return null;\n  }\n\n  return validated.data;\n}\n\n/**\n * Records the delivery for dedup and replies 204 without acting on it. A sustained\n * non-2xx can degrade or disable the webhook on Sentry's side (a deliberate\n * deviation from GitHub's 400), so deliveries we cannot use are acknowledged.\n */\nexport async function recordAndDrop(args: {\n  context: SentryWebhookContext;\n  reply: FastifyReply;\n  deliveryId: string;\n}): Promise<null> {\n  const {context, reply, deliveryId} = args;\n  await context.coreDb().transaction(async (tx) => {\n    await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId});\n  });\n  reply.code(204);\n  return null;\n}\n"],"names":["logger","SENTRY_PROVIDER","parseAndValidateOrDrop","args","schema","rawBody","deliveryId","context","reply","normalize","parsedJson","JSON","parse","error","warn","err","recordAndDrop","validated","safeParse","success","issues","data","coreDb","transaction","tx","recordDeliveryOnly","provider","code"],"mappings":"AAAA,SAAQA,MAAM,QAAO,8BAA8B;AAKnD,OAAO,MAAMC,kBAAkB,SAAS;AAExC;;;;CAIC,GACD,OAAO,eAAeC,uBAAkDC,IAOvE;IACC,MAAM,EAACC,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAEC,OAAO,EAAEC,KAAK,EAAEC,SAAS,EAAC,GAAGN;IAEjE,IAAIO;IACJ,IAAI;QACFA,aAAaC,KAAKC,KAAK,CAACP;IAC1B,EAAE,OAAOQ,OAAO;QACdb,SAASc,IAAI,CAAC;YAACR;YAAYS,KAAKF;QAAK,GAAG;QACxC,MAAMG,cAAc;YAACT;YAASC;YAAOF;QAAU;QAC/C,OAAO;IACT;IAEA,MAAMW,YAAYb,OAAOc,SAAS,CAACT,YAAYA,UAAUC,cAAcA;IACvE,IAAI,CAACO,UAAUE,OAAO,EAAE;QACtBnB,SAASc,IAAI,CACX;YAACR;YAAYc,QAAQH,UAAUJ,KAAK,CAACO,MAAM;QAAA,GAC3C;QAEF,MAAMJ,cAAc;YAACT;YAASC;YAAOF;QAAU;QAC/C,OAAO;IACT;IAEA,OAAOW,UAAUI,IAAI;AACvB;AAEA;;;;CAIC,GACD,OAAO,eAAeL,cAAcb,IAInC;IACC,MAAM,EAACI,OAAO,EAAEC,KAAK,EAAEF,UAAU,EAAC,GAAGH;IACrC,MAAMI,QAAQe,MAAM,GAAGC,WAAW,CAAC,OAAOC;QACxC,MAAMjB,QAAQkB,kBAAkB,CAAC;YAACD;YAAIE,UAAUzB;YAAiBK;QAAU;IAC7E;IACAE,MAAMmB,IAAI,CAAC;IACX,OAAO;AACT"}

package/dist/presentation/routes/webhook-request.d.ts

@@ -0,0 +1,10 @@
+import type { FastifyRequest } from 'fastify';
+export interface SentryWebhookRequest {
+    deliveryId: string;
+    resource: string;
+    signature: string;
+    signatureHeaderName: string;
+    rawBody: string;
+}
+export declare function parseSentryWebhookRequest(request: FastifyRequest): SentryWebhookRequest;
+//# sourceMappingURL=webhook-request.d.ts.map

package/dist/presentation/routes/webhook-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-request.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhook-request.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAQ5C,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAKD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,cAAc,GAAG,oBAAoB,CA8BvF"}

package/dist/presentation/routes/webhook-request.js

@@ -0,0 +1,56 @@
+import { Buffer } from 'node:buffer';
+import { ClientError } from '@shipfox/node-fastify';
+const REQUEST_ID_HEADER = 'request-id';
+const RESOURCE_HEADER = 'sentry-hook-resource';
+const SIGNATURE_HEADER = 'sentry-hook-signature';
+// Sentry has used both header names; accepting both keeps older deliveries verifiable.
+const LEGACY_SIGNATURE_HEADER = 'sentry-app-signature';
+// Extracts and structurally validates the parts every Sentry delivery must carry.
+// Throws ClientError for anything a genuine signed delivery would never omit; the
+// cryptographic signature check happens in the route once the secret is in hand.
+export function parseSentryWebhookRequest(request) {
+    const deliveryId = request.headers[REQUEST_ID_HEADER];
+    if (typeof deliveryId !== 'string' || !deliveryId) {
+        throw new ClientError('missing Request-ID header', 'missing-request-id');
+    }
+    const resource = request.headers[RESOURCE_HEADER];
+    if (typeof resource !== 'string' || !resource) {
+        throw new ClientError('missing Sentry-Hook-Resource header', 'missing-resource');
+    }
+    const signature = resolveSignature(request);
+    if (!signature) {
+        throw new ClientError('missing Sentry-Hook-Signature header', 'missing-signature', {
+            status: 401
+        });
+    }
+    const body = request.body;
+    if (!Buffer.isBuffer(body)) {
+        throw new ClientError('expected raw JSON body', 'invalid-body');
+    }
+    return {
+        deliveryId,
+        resource,
+        signature: signature.value,
+        signatureHeaderName: signature.headerName,
+        rawBody: body.toString('utf8')
+    };
+}
+function resolveSignature(request) {
+    const header = request.headers[SIGNATURE_HEADER];
+    if (typeof header === 'string' && header) {
+        return {
+            value: header,
+            headerName: SIGNATURE_HEADER
+        };
+    }
+    const legacyHeader = request.headers[LEGACY_SIGNATURE_HEADER];
+    if (typeof legacyHeader === 'string' && legacyHeader) {
+        return {
+            value: legacyHeader,
+            headerName: LEGACY_SIGNATURE_HEADER
+        };
+    }
+    return undefined;
+}
+
+//# sourceMappingURL=webhook-request.js.map

package/dist/presentation/routes/webhook-request.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/webhook-request.ts"],"sourcesContent":["import {Buffer} from 'node:buffer';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\n\nconst REQUEST_ID_HEADER = 'request-id';\nconst RESOURCE_HEADER = 'sentry-hook-resource';\nconst SIGNATURE_HEADER = 'sentry-hook-signature';\n// Sentry has used both header names; accepting both keeps older deliveries verifiable.\nconst LEGACY_SIGNATURE_HEADER = 'sentry-app-signature';\n\nexport interface SentryWebhookRequest {\n  deliveryId: string;\n  resource: string;\n  signature: string;\n  signatureHeaderName: string;\n  rawBody: string;\n}\n\n// Extracts and structurally validates the parts every Sentry delivery must carry.\n// Throws ClientError for anything a genuine signed delivery would never omit; the\n// cryptographic signature check happens in the route once the secret is in hand.\nexport function parseSentryWebhookRequest(request: FastifyRequest): SentryWebhookRequest {\n  const deliveryId = request.headers[REQUEST_ID_HEADER];\n  if (typeof deliveryId !== 'string' || !deliveryId) {\n    throw new ClientError('missing Request-ID header', 'missing-request-id');\n  }\n\n  const resource = request.headers[RESOURCE_HEADER];\n  if (typeof resource !== 'string' || !resource) {\n    throw new ClientError('missing Sentry-Hook-Resource header', 'missing-resource');\n  }\n\n  const signature = resolveSignature(request);\n  if (!signature) {\n    throw new ClientError('missing Sentry-Hook-Signature header', 'missing-signature', {\n      status: 401,\n    });\n  }\n\n  const body = request.body;\n  if (!Buffer.isBuffer(body)) {\n    throw new ClientError('expected raw JSON body', 'invalid-body');\n  }\n\n  return {\n    deliveryId,\n    resource,\n    signature: signature.value,\n    signatureHeaderName: signature.headerName,\n    rawBody: body.toString('utf8'),\n  };\n}\n\nfunction resolveSignature(\n  request: FastifyRequest,\n): {value: string; headerName: string} | undefined {\n  const header = request.headers[SIGNATURE_HEADER];\n  if (typeof header === 'string' && header) {\n    return {value: header, headerName: SIGNATURE_HEADER};\n  }\n  const legacyHeader = request.headers[LEGACY_SIGNATURE_HEADER];\n  if (typeof legacyHeader === 'string' && legacyHeader) {\n    return {value: legacyHeader, headerName: LEGACY_SIGNATURE_HEADER};\n  }\n  return undefined;\n}\n"],"names":["Buffer","ClientError","REQUEST_ID_HEADER","RESOURCE_HEADER","SIGNATURE_HEADER","LEGACY_SIGNATURE_HEADER","parseSentryWebhookRequest","request","deliveryId","headers","resource","signature","resolveSignature","status","body","isBuffer","value","signatureHeaderName","headerName","rawBody","toString","header","legacyHeader","undefined"],"mappings":"AAAA,SAAQA,MAAM,QAAO,cAAc;AACnC,SAAQC,WAAW,QAAO,wBAAwB;AAGlD,MAAMC,oBAAoB;AAC1B,MAAMC,kBAAkB;AACxB,MAAMC,mBAAmB;AACzB,uFAAuF;AACvF,MAAMC,0BAA0B;AAUhC,kFAAkF;AAClF,kFAAkF;AAClF,iFAAiF;AACjF,OAAO,SAASC,0BAA0BC,OAAuB;IAC/D,MAAMC,aAAaD,QAAQE,OAAO,CAACP,kBAAkB;IACrD,IAAI,OAAOM,eAAe,YAAY,CAACA,YAAY;QACjD,MAAM,IAAIP,YAAY,6BAA6B;IACrD;IAEA,MAAMS,WAAWH,QAAQE,OAAO,CAACN,gBAAgB;IACjD,IAAI,OAAOO,aAAa,YAAY,CAACA,UAAU;QAC7C,MAAM,IAAIT,YAAY,uCAAuC;IAC/D;IAEA,MAAMU,YAAYC,iBAAiBL;IACnC,IAAI,CAACI,WAAW;QACd,MAAM,IAAIV,YAAY,wCAAwC,qBAAqB;YACjFY,QAAQ;QACV;IACF;IAEA,MAAMC,OAAOP,QAAQO,IAAI;IACzB,IAAI,CAACd,OAAOe,QAAQ,CAACD,OAAO;QAC1B,MAAM,IAAIb,YAAY,0BAA0B;IAClD;IAEA,OAAO;QACLO;QACAE;QACAC,WAAWA,UAAUK,KAAK;QAC1BC,qBAAqBN,UAAUO,UAAU;QACzCC,SAASL,KAAKM,QAAQ,CAAC;IACzB;AACF;AAEA,SAASR,iBACPL,OAAuB;IAEvB,MAAMc,SAASd,QAAQE,OAAO,CAACL,iBAAiB;IAChD,IAAI,OAAOiB,WAAW,YAAYA,QAAQ;QACxC,OAAO;YAACL,OAAOK;YAAQH,YAAYd;QAAgB;IACrD;IACA,MAAMkB,eAAef,QAAQE,OAAO,CAACJ,wBAAwB;IAC7D,IAAI,OAAOiB,iBAAiB,YAAYA,cAAc;QACpD,OAAO;YAACN,OAAOM;YAAcJ,YAAYb;QAAuB;IAClE;IACA,OAAOkB;AACT"}

package/dist/presentation/routes/webhooks.d.ts

@@ -0,0 +1,5 @@
+import { type RouteGroup } from '@shipfox/node-fastify';
+import type { SentryWebhookContext } from './webhook-context.js';
+export type { SentryWebhookContext } from './webhook-context.js';
+export declare function createSentryWebhookRoutes(context: SentryWebhookContext): RouteGroup;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/presentation/routes/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,UAAU,EAGhB,MAAM,uBAAuB,CAAC;AAM/B,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAO/D,YAAY,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAE/D,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,GAAG,UAAU,CAqCnF"}

package/dist/presentation/routes/webhooks.js

@@ -0,0 +1,71 @@
+import { ClientError, defineRoute, rawBodyPlugin, WEBHOOK_BODY_LIMIT } from '@shipfox/node-fastify';
+import { logger } from '@shipfox/node-opentelemetry';
+import { config } from '#config.js';
+import { verifySentrySignature } from '#core/signature.js';
+import { handleInstallationResource } from './installation-handler.js';
+import { handleIssueResource } from './issue-handler.js';
+import { recordAndDrop } from './webhook-delivery.js';
+import { parseSentryWebhookRequest } from './webhook-request.js';
+const ISSUE_RESOURCE = 'issue';
+const INSTALLATION_RESOURCE = 'installation';
+export function createSentryWebhookRoutes(context) {
+    const webhookRoute = defineRoute({
+        method: 'POST',
+        path: '/',
+        auth: [],
+        description: 'Sentry integration webhook receiver.',
+        options: {
+            bodyLimit: WEBHOOK_BODY_LIMIT
+        },
+        handler: (request, reply)=>{
+            const { deliveryId, resource, signature, signatureHeaderName, rawBody } = parseSentryWebhookRequest(request);
+            if (!verifySentrySignature({
+                rawBody,
+                signature,
+                secret: config.SENTRY_APP_CLIENT_SECRET
+            })) {
+                throw new ClientError('invalid signature', 'invalid-signature', {
+                    status: 401
+                });
+            }
+            logger().debug({
+                deliveryId,
+                signatureHeader: signatureHeaderName
+            }, 'sentry webhook: signature verified');
+            if (resource === ISSUE_RESOURCE) {
+                return handleIssueResource({
+                    context,
+                    reply,
+                    deliveryId,
+                    rawBody
+                });
+            }
+            if (resource === INSTALLATION_RESOURCE) {
+                return handleInstallationResource({
+                    context,
+                    reply,
+                    deliveryId,
+                    rawBody
+                });
+            }
+            // Unsupported resources are acknowledged so Sentry does not retry or disable the app.
+            return recordAndDrop({
+                context,
+                reply,
+                deliveryId
+            });
+        }
+    });
+    return {
+        prefix: '/webhooks/integrations/sentry',
+        auth: [],
+        plugins: [
+            rawBodyPlugin
+        ],
+        routes: [
+            webhookRoute
+        ]
+    };
+}
+
+//# sourceMappingURL=webhooks.js.map

package/dist/presentation/routes/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {\n  ClientError,\n  defineRoute,\n  type RouteGroup,\n  rawBodyPlugin,\n  WEBHOOK_BODY_LIMIT,\n} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {config} from '#config.js';\nimport {verifySentrySignature} from '#core/signature.js';\nimport {handleInstallationResource} from './installation-handler.js';\nimport {handleIssueResource} from './issue-handler.js';\nimport type {SentryWebhookContext} from './webhook-context.js';\nimport {recordAndDrop} from './webhook-delivery.js';\nimport {parseSentryWebhookRequest} from './webhook-request.js';\n\nconst ISSUE_RESOURCE = 'issue';\nconst INSTALLATION_RESOURCE = 'installation';\n\nexport type {SentryWebhookContext} from './webhook-context.js';\n\nexport function createSentryWebhookRoutes(context: SentryWebhookContext): RouteGroup {\n  const webhookRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Sentry integration webhook receiver.',\n    options: {bodyLimit: WEBHOOK_BODY_LIMIT},\n    handler: (request, reply) => {\n      const {deliveryId, resource, signature, signatureHeaderName, rawBody} =\n        parseSentryWebhookRequest(request);\n\n      if (!verifySentrySignature({rawBody, signature, secret: config.SENTRY_APP_CLIENT_SECRET})) {\n        throw new ClientError('invalid signature', 'invalid-signature', {status: 401});\n      }\n      logger().debug(\n        {deliveryId, signatureHeader: signatureHeaderName},\n        'sentry webhook: signature verified',\n      );\n\n      if (resource === ISSUE_RESOURCE) {\n        return handleIssueResource({context, reply, deliveryId, rawBody});\n      }\n      if (resource === INSTALLATION_RESOURCE) {\n        return handleInstallationResource({context, reply, deliveryId, rawBody});\n      }\n\n      // Unsupported resources are acknowledged so Sentry does not retry or disable the app.\n      return recordAndDrop({context, reply, deliveryId});\n    },\n  });\n\n  return {\n    prefix: '/webhooks/integrations/sentry',\n    auth: [],\n    plugins: [rawBodyPlugin],\n    routes: [webhookRoute],\n  };\n}\n"],"names":["ClientError","defineRoute","rawBodyPlugin","WEBHOOK_BODY_LIMIT","logger","config","verifySentrySignature","handleInstallationResource","handleIssueResource","recordAndDrop","parseSentryWebhookRequest","ISSUE_RESOURCE","INSTALLATION_RESOURCE","createSentryWebhookRoutes","context","webhookRoute","method","path","auth","description","options","bodyLimit","handler","request","reply","deliveryId","resource","signature","signatureHeaderName","rawBody","secret","SENTRY_APP_CLIENT_SECRET","status","debug","signatureHeader","prefix","plugins","routes"],"mappings":"AAAA,SACEA,WAAW,EACXC,WAAW,EAEXC,aAAa,EACbC,kBAAkB,QACb,wBAAwB;AAC/B,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,qBAAqB,QAAO,qBAAqB;AACzD,SAAQC,0BAA0B,QAAO,4BAA4B;AACrE,SAAQC,mBAAmB,QAAO,qBAAqB;AAEvD,SAAQC,aAAa,QAAO,wBAAwB;AACpD,SAAQC,yBAAyB,QAAO,uBAAuB;AAE/D,MAAMC,iBAAiB;AACvB,MAAMC,wBAAwB;AAI9B,OAAO,SAASC,0BAA0BC,OAA6B;IACrE,MAAMC,eAAed,YAAY;QAC/Be,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbC,SAAS;YAACC,WAAWlB;QAAkB;QACvCmB,SAAS,CAACC,SAASC;YACjB,MAAM,EAACC,UAAU,EAAEC,QAAQ,EAAEC,SAAS,EAAEC,mBAAmB,EAAEC,OAAO,EAAC,GACnEnB,0BAA0Ba;YAE5B,IAAI,CAACjB,sBAAsB;gBAACuB;gBAASF;gBAAWG,QAAQzB,OAAO0B,wBAAwB;YAAA,IAAI;gBACzF,MAAM,IAAI/B,YAAY,qBAAqB,qBAAqB;oBAACgC,QAAQ;gBAAG;YAC9E;YACA5B,SAAS6B,KAAK,CACZ;gBAACR;gBAAYS,iBAAiBN;YAAmB,GACjD;YAGF,IAAIF,aAAaf,gBAAgB;gBAC/B,OAAOH,oBAAoB;oBAACM;oBAASU;oBAAOC;oBAAYI;gBAAO;YACjE;YACA,IAAIH,aAAad,uBAAuB;gBACtC,OAAOL,2BAA2B;oBAACO;oBAASU;oBAAOC;oBAAYI;gBAAO;YACxE;YAEA,sFAAsF;YACtF,OAAOpB,cAAc;gBAACK;gBAASU;gBAAOC;YAAU;QAClD;IACF;IAEA,OAAO;QACLU,QAAQ;QACRjB,MAAM,EAAE;QACRkB,SAAS;YAAClC;SAAc;QACxBmC,QAAQ;YAACtB;SAAa;IACxB;AACF"}

package/dist/temporal/activities/index.d.ts

@@ -0,0 +1,5 @@
+import { pruneUnclaimedSentryInstallationsActivity } from './prune-unclaimed-installations.js';
+export declare function createSentryMaintenanceActivities(): {
+    pruneUnclaimedSentryInstallationsActivity: typeof pruneUnclaimedSentryInstallationsActivity;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/temporal/activities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/temporal/activities/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,yCAAyC,EAAC,MAAM,oCAAoC,CAAC;AAE7F,wBAAgB,iCAAiC;;EAIhD"}

package/dist/temporal/activities/index.js

@@ -0,0 +1,8 @@
+import { pruneUnclaimedSentryInstallationsActivity } from './prune-unclaimed-installations.js';
+export function createSentryMaintenanceActivities() {
+    return {
+        pruneUnclaimedSentryInstallationsActivity
+    };
+}
+
+//# sourceMappingURL=index.js.map

package/dist/temporal/activities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/temporal/activities/index.ts"],"sourcesContent":["import {pruneUnclaimedSentryInstallationsActivity} from './prune-unclaimed-installations.js';\n\nexport function createSentryMaintenanceActivities() {\n  return {\n    pruneUnclaimedSentryInstallationsActivity,\n  };\n}\n"],"names":["pruneUnclaimedSentryInstallationsActivity","createSentryMaintenanceActivities"],"mappings":"AAAA,SAAQA,yCAAyC,QAAO,qCAAqC;AAE7F,OAAO,SAASC;IACd,OAAO;QACLD;IACF;AACF"}

package/dist/temporal/activities/prune-unclaimed-installations.d.ts

@@ -0,0 +1,4 @@
+export declare function pruneUnclaimedSentryInstallationsActivity(): Promise<{
+    tombstoned: number;
+}>;
+//# sourceMappingURL=prune-unclaimed-installations.d.ts.map

package/dist/temporal/activities/prune-unclaimed-installations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prune-unclaimed-installations.d.ts","sourceRoot":"","sources":["../../../src/temporal/activities/prune-unclaimed-installations.ts"],"names":[],"mappings":"AAKA,wBAAsB,yCAAyC,IAAI,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,CAAC,CAK/F"}

package/dist/temporal/activities/prune-unclaimed-installations.js

@@ -0,0 +1,11 @@
+import { config } from '#config.js';
+import { pruneUnclaimedSentryInstallations } from '#db/installations.js';
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+export async function pruneUnclaimedSentryInstallationsActivity() {
+    const olderThan = new Date(Date.now() - config.SENTRY_UNCLAIMED_INSTALLATION_RETENTION_DAYS * MS_PER_DAY);
+    return await pruneUnclaimedSentryInstallations({
+        olderThan
+    });
+}
+
+//# sourceMappingURL=prune-unclaimed-installations.js.map

package/dist/temporal/activities/prune-unclaimed-installations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/temporal/activities/prune-unclaimed-installations.ts"],"sourcesContent":["import {config} from '#config.js';\nimport {pruneUnclaimedSentryInstallations} from '#db/installations.js';\n\nconst MS_PER_DAY = 24 * 60 * 60 * 1000;\n\nexport async function pruneUnclaimedSentryInstallationsActivity(): Promise<{tombstoned: number}> {\n  const olderThan = new Date(\n    Date.now() - config.SENTRY_UNCLAIMED_INSTALLATION_RETENTION_DAYS * MS_PER_DAY,\n  );\n  return await pruneUnclaimedSentryInstallations({olderThan});\n}\n"],"names":["config","pruneUnclaimedSentryInstallations","MS_PER_DAY","pruneUnclaimedSentryInstallationsActivity","olderThan","Date","now","SENTRY_UNCLAIMED_INSTALLATION_RETENTION_DAYS"],"mappings":"AAAA,SAAQA,MAAM,QAAO,aAAa;AAClC,SAAQC,iCAAiC,QAAO,uBAAuB;AAEvE,MAAMC,aAAa,KAAK,KAAK,KAAK;AAElC,OAAO,eAAeC;IACpB,MAAMC,YAAY,IAAIC,KACpBA,KAAKC,GAAG,KAAKN,OAAOO,4CAA4C,GAAGL;IAErE,OAAO,MAAMD,kCAAkC;QAACG;IAAS;AAC3D"}

package/dist/temporal/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const SENTRY_MAINTENANCE_TASK_QUEUE = "integrations-sentry-maintenance";
+//# sourceMappingURL=constants.d.ts.map

package/dist/temporal/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/temporal/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,6BAA6B,oCAAoC,CAAC"}

package/dist/temporal/constants.js

@@ -0,0 +1,3 @@
+export const SENTRY_MAINTENANCE_TASK_QUEUE = 'integrations-sentry-maintenance';
+
+//# sourceMappingURL=constants.js.map

package/dist/temporal/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/temporal/constants.ts"],"sourcesContent":["export const SENTRY_MAINTENANCE_TASK_QUEUE = 'integrations-sentry-maintenance';\n"],"names":["SENTRY_MAINTENANCE_TASK_QUEUE"],"mappings":"AAAA,OAAO,MAAMA,gCAAgC,kCAAkC"}

package/dist/temporal/workflows/index.d.ts

@@ -0,0 +1,2 @@
+export { pruneUnclaimedSentryInstallationsCron } from './prune-unclaimed-installations-cron.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/temporal/workflows/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/temporal/workflows/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,qCAAqC,EAAC,MAAM,yCAAyC,CAAC"}

package/dist/temporal/workflows/index.js

@@ -0,0 +1,3 @@
+export { pruneUnclaimedSentryInstallationsCron } from './prune-unclaimed-installations-cron.js';
+
+//# sourceMappingURL=index.js.map

package/dist/temporal/workflows/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/temporal/workflows/index.ts"],"sourcesContent":["export {pruneUnclaimedSentryInstallationsCron} from './prune-unclaimed-installations-cron.js';\n"],"names":["pruneUnclaimedSentryInstallationsCron"],"mappings":"AAAA,SAAQA,qCAAqC,QAAO,0CAA0C"}

package/dist/temporal/workflows/prune-unclaimed-installations-cron.d.ts

@@ -0,0 +1,2 @@
+export declare function pruneUnclaimedSentryInstallationsCron(): Promise<void>;
+//# sourceMappingURL=prune-unclaimed-installations-cron.d.ts.map

package/dist/temporal/workflows/prune-unclaimed-installations-cron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prune-unclaimed-installations-cron.d.ts","sourceRoot":"","sources":["../../../src/temporal/workflows/prune-unclaimed-installations-cron.ts"],"names":[],"mappings":"AASA,wBAAsB,qCAAqC,IAAI,OAAO,CAAC,IAAI,CAAC,CAK3E"}

package/dist/temporal/workflows/prune-unclaimed-installations-cron.js

@@ -0,0 +1,14 @@
+import { log, proxyActivities } from '@temporalio/workflow';
+const { pruneUnclaimedSentryInstallationsActivity } = proxyActivities({
+    startToCloseTimeout: '5 minutes'
+});
+export async function pruneUnclaimedSentryInstallationsCron() {
+    const { tombstoned } = await pruneUnclaimedSentryInstallationsActivity();
+    if (tombstoned > 0) {
+        log.info('Tombstoned stale unclaimed Sentry installations', {
+            tombstoned
+        });
+    }
+}
+
+//# sourceMappingURL=prune-unclaimed-installations-cron.js.map

package/dist/temporal/workflows/prune-unclaimed-installations-cron.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/temporal/workflows/prune-unclaimed-installations-cron.ts"],"sourcesContent":["import {log, proxyActivities} from '@temporalio/workflow';\nimport type {createSentryMaintenanceActivities} from '../activities/index.js';\n\nconst {pruneUnclaimedSentryInstallationsActivity} = proxyActivities<\n  ReturnType<typeof createSentryMaintenanceActivities>\n>({\n  startToCloseTimeout: '5 minutes',\n});\n\nexport async function pruneUnclaimedSentryInstallationsCron(): Promise<void> {\n  const {tombstoned} = await pruneUnclaimedSentryInstallationsActivity();\n  if (tombstoned > 0) {\n    log.info('Tombstoned stale unclaimed Sentry installations', {tombstoned});\n  }\n}\n"],"names":["log","proxyActivities","pruneUnclaimedSentryInstallationsActivity","startToCloseTimeout","pruneUnclaimedSentryInstallationsCron","tombstoned","info"],"mappings":"AAAA,SAAQA,GAAG,EAAEC,eAAe,QAAO,uBAAuB;AAG1D,MAAM,EAACC,yCAAyC,EAAC,GAAGD,gBAElD;IACAE,qBAAqB;AACvB;AAEA,OAAO,eAAeC;IACpB,MAAM,EAACC,UAAU,EAAC,GAAG,MAAMH;IAC3B,IAAIG,aAAa,GAAG;QAClBL,IAAIM,IAAI,CAAC,mDAAmD;YAACD;QAAU;IACzE;AACF"}