@shipfox/api-integration-sentry 4.0.0 → 6.0.0

package/dist/presentation/routes/installation-handler.d.ts

@@ -1,9 +0,0 @@
-import type { FastifyReply } from 'fastify';
-import type { SentryWebhookContext } from './webhook-context.js';
-export declare function handleInstallationResource(args: {
-    context: SentryWebhookContext;
-    reply: FastifyReply;
-    deliveryId: string;
-    rawBody: string;
-}): Promise<null>;
-//# sourceMappingURL=installation-handler.d.ts.map

package/dist/presentation/routes/installation-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"installation-handler.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/installation-handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AAO1C,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAQ/D,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDhB"}

package/dist/presentation/routes/installation-handler.js

@@ -1,70 +0,0 @@
-import { sentryInstallationWebhookSchema } from '@shipfox/api-integration-sentry-dto';
-import { config } from '#config.js';
-import { handleSentryInstallationCreated, handleSentryInstallationDeleted } from '#core/webhook.js';
-import { getSentryInstallationByInstallationUuid, persistVerifiedUnclaimedInstallation } from '#db/installations.js';
-import { parseAndValidateOrDrop, SENTRY_PROVIDER } from './webhook-delivery.js';
-// Validates an installation lifecycle delivery, then applies it. `created` is the
-// authoritative install signal: it exchanges the single-use code and persists a
-// verified-unclaimed row (exchange outside any transaction; persist + delivery
-// record in one short transaction). `deleted` tombstones the install and disables
-// the connection in a single transaction.
-export async function handleInstallationResource(args) {
-    const { context, reply, deliveryId, rawBody } = args;
-    const payload = await parseAndValidateOrDrop({
-        schema: sentryInstallationWebhookSchema,
-        rawBody,
-        deliveryId,
-        context,
-        reply
-    });
-    if (!payload) return null;
-    const installation = payload.data.installation;
-    if (payload.action === 'deleted') {
-        await context.coreDb().transaction(async (tx)=>{
-            await handleSentryInstallationDeleted({
-                tx,
-                deliveryId,
-                installationUuid: installation.uuid,
-                recordDeliveryOnly: context.recordDeliveryOnly,
-                updateConnectionLifecycleStatus: context.updateConnectionLifecycleStatus
-            });
-        });
-        reply.code(204);
-        return null;
-    }
-    await handleSentryInstallationCreated({
-        deliveryId,
-        installationUuid: installation.uuid,
-        orgSlug: installation.organization?.slug,
-        code: installation.code,
-        sentry: context.sentry,
-        verifyInstall: config.SENTRY_APP_VERIFY_INSTALL,
-        getSentryInstallation: ({ installationUuid })=>getSentryInstallationByInstallationUuid(installationUuid),
-        persistUnclaimedAndRecordDelivery: ({ installationUuid, orgSlug, codeHash, deliveryId: id })=>context.coreDb().transaction(async (tx)=>{
-                const persisted = await persistVerifiedUnclaimedInstallation({
-                    installationUuid,
-                    orgSlug,
-                    codeHash
-                }, {
-                    tx
-                });
-                await context.recordDeliveryOnly({
-                    tx,
-                    provider: SENTRY_PROVIDER,
-                    deliveryId: id
-                });
-                return persisted;
-            }),
-        recordDelivery: (id)=>context.coreDb().transaction(async (tx)=>{
-                await context.recordDeliveryOnly({
-                    tx,
-                    provider: SENTRY_PROVIDER,
-                    deliveryId: id
-                });
-            })
-    });
-    reply.code(204);
-    return null;
-}
-
-//# sourceMappingURL=installation-handler.js.map

package/dist/presentation/routes/installation-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/presentation/routes/installation-handler.ts"],"sourcesContent":["import {sentryInstallationWebhookSchema} from '@shipfox/api-integration-sentry-dto';\nimport type {FastifyReply} from 'fastify';\nimport {config} from '#config.js';\nimport {handleSentryInstallationCreated, handleSentryInstallationDeleted} from '#core/webhook.js';\nimport {\n  getSentryInstallationByInstallationUuid,\n  persistVerifiedUnclaimedInstallation,\n} from '#db/installations.js';\nimport type {SentryWebhookContext} from './webhook-context.js';\nimport {parseAndValidateOrDrop, SENTRY_PROVIDER} from './webhook-delivery.js';\n\n// Validates an installation lifecycle delivery, then applies it. `created` is the\n// authoritative install signal: it exchanges the single-use code and persists a\n// verified-unclaimed row (exchange outside any transaction; persist + delivery\n// record in one short transaction). `deleted` tombstones the install and disables\n// the connection in a single transaction.\nexport async function handleInstallationResource(args: {\n  context: SentryWebhookContext;\n  reply: FastifyReply;\n  deliveryId: string;\n  rawBody: string;\n}): Promise<null> {\n  const {context, reply, deliveryId, rawBody} = args;\n\n  const payload = await parseAndValidateOrDrop({\n    schema: sentryInstallationWebhookSchema,\n    rawBody,\n    deliveryId,\n    context,\n    reply,\n  });\n  if (!payload) return null;\n\n  const installation = payload.data.installation;\n\n  if (payload.action === 'deleted') {\n    await context.coreDb().transaction(async (tx) => {\n      await handleSentryInstallationDeleted({\n        tx,\n        deliveryId,\n        installationUuid: installation.uuid,\n        recordDeliveryOnly: context.recordDeliveryOnly,\n        updateConnectionLifecycleStatus: context.updateConnectionLifecycleStatus,\n      });\n    });\n    reply.code(204);\n    return null;\n  }\n\n  await handleSentryInstallationCreated({\n    deliveryId,\n    installationUuid: installation.uuid,\n    orgSlug: installation.organization?.slug,\n    code: installation.code,\n    sentry: context.sentry,\n    verifyInstall: config.SENTRY_APP_VERIFY_INSTALL,\n    getSentryInstallation: ({installationUuid}) =>\n      getSentryInstallationByInstallationUuid(installationUuid),\n    persistUnclaimedAndRecordDelivery: ({installationUuid, orgSlug, codeHash, deliveryId: id}) =>\n      context.coreDb().transaction(async (tx) => {\n        const persisted = await persistVerifiedUnclaimedInstallation(\n          {installationUuid, orgSlug, codeHash},\n          {tx},\n        );\n        await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId: id});\n        return persisted;\n      }),\n    recordDelivery: (id) =>\n      context.coreDb().transaction(async (tx) => {\n        await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId: id});\n      }),\n  });\n\n  reply.code(204);\n  return null;\n}\n"],"names":["sentryInstallationWebhookSchema","config","handleSentryInstallationCreated","handleSentryInstallationDeleted","getSentryInstallationByInstallationUuid","persistVerifiedUnclaimedInstallation","parseAndValidateOrDrop","SENTRY_PROVIDER","handleInstallationResource","args","context","reply","deliveryId","rawBody","payload","schema","installation","data","action","coreDb","transaction","tx","installationUuid","uuid","recordDeliveryOnly","updateConnectionLifecycleStatus","code","orgSlug","organization","slug","sentry","verifyInstall","SENTRY_APP_VERIFY_INSTALL","getSentryInstallation","persistUnclaimedAndRecordDelivery","codeHash","id","persisted","provider","recordDelivery"],"mappings":"AAAA,SAAQA,+BAA+B,QAAO,sCAAsC;AAEpF,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,+BAA+B,EAAEC,+BAA+B,QAAO,mBAAmB;AAClG,SACEC,uCAAuC,EACvCC,oCAAoC,QAC/B,uBAAuB;AAE9B,SAAQC,sBAAsB,EAAEC,eAAe,QAAO,wBAAwB;AAE9E,kFAAkF;AAClF,gFAAgF;AAChF,+EAA+E;AAC/E,kFAAkF;AAClF,0CAA0C;AAC1C,OAAO,eAAeC,2BAA2BC,IAKhD;IACC,MAAM,EAACC,OAAO,EAAEC,KAAK,EAAEC,UAAU,EAAEC,OAAO,EAAC,GAAGJ;IAE9C,MAAMK,UAAU,MAAMR,uBAAuB;QAC3CS,QAAQf;QACRa;QACAD;QACAF;QACAC;IACF;IACA,IAAI,CAACG,SAAS,OAAO;IAErB,MAAME,eAAeF,QAAQG,IAAI,CAACD,YAAY;IAE9C,IAAIF,QAAQI,MAAM,KAAK,WAAW;QAChC,MAAMR,QAAQS,MAAM,GAAGC,WAAW,CAAC,OAAOC;YACxC,MAAMlB,gCAAgC;gBACpCkB;gBACAT;gBACAU,kBAAkBN,aAAaO,IAAI;gBACnCC,oBAAoBd,QAAQc,kBAAkB;gBAC9CC,iCAAiCf,QAAQe,+BAA+B;YAC1E;QACF;QACAd,MAAMe,IAAI,CAAC;QACX,OAAO;IACT;IAEA,MAAMxB,gCAAgC;QACpCU;QACAU,kBAAkBN,aAAaO,IAAI;QACnCI,SAASX,aAAaY,YAAY,EAAEC;QACpCH,MAAMV,aAAaU,IAAI;QACvBI,QAAQpB,QAAQoB,MAAM;QACtBC,eAAe9B,OAAO+B,yBAAyB;QAC/CC,uBAAuB,CAAC,EAACX,gBAAgB,EAAC,GACxClB,wCAAwCkB;QAC1CY,mCAAmC,CAAC,EAACZ,gBAAgB,EAAEK,OAAO,EAAEQ,QAAQ,EAAEvB,YAAYwB,EAAE,EAAC,GACvF1B,QAAQS,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBAClC,MAAMgB,YAAY,MAAMhC,qCACtB;oBAACiB;oBAAkBK;oBAASQ;gBAAQ,GACpC;oBAACd;gBAAE;gBAEL,MAAMX,QAAQc,kBAAkB,CAAC;oBAACH;oBAAIiB,UAAU/B;oBAAiBK,YAAYwB;gBAAE;gBAC/E,OAAOC;YACT;QACFE,gBAAgB,CAACH,KACf1B,QAAQS,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBAClC,MAAMX,QAAQc,kBAAkB,CAAC;oBAACH;oBAAIiB,UAAU/B;oBAAiBK,YAAYwB;gBAAE;YACjF;IACJ;IAEAzB,MAAMe,IAAI,CAAC;IACX,OAAO;AACT"}

package/dist/presentation/routes/issue-handler.d.ts

@@ -1,9 +0,0 @@
-import type { FastifyReply } from 'fastify';
-import type { SentryWebhookContext } from './webhook-context.js';
-export declare function handleIssueResource(args: {
-    context: SentryWebhookContext;
-    reply: FastifyReply;
-    deliveryId: string;
-    rawBody: string;
-}): Promise<null>;
-//# sourceMappingURL=issue-handler.d.ts.map

package/dist/presentation/routes/issue-handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"issue-handler.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/issue-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAQ/D,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB"}

package/dist/presentation/routes/issue-handler.js

@@ -1,50 +0,0 @@
-import { sentryIssueWebhookSchema } from '@shipfox/api-integration-sentry-dto';
-import { logger } from '@shipfox/node-opentelemetry';
-import { SentryIssueDroppedError } from '#core/errors.js';
-import { handleSentryIssueEvent, normalizeSentryIssueAction } from '#core/webhook.js';
-import { parseAndValidateOrDrop, recordAndDrop } from './webhook-delivery.js';
-// Validates an issue delivery, then publishes the mapped event in a transaction.
-// A malformed or unknown-action payload is recorded-and-dropped (204) before we
-// reach core. Core throws a SentryIssueDroppedError when the delivery references
-// state we cannot publish against (unknown/deleted installation, missing
-// connection); we record-and-drop those too. Any other error bubbles up.
-export async function handleIssueResource(args) {
-    const { context, reply, deliveryId, rawBody } = args;
-    const payload = await parseAndValidateOrDrop({
-        schema: sentryIssueWebhookSchema,
-        normalize: normalizeSentryIssueAction,
-        rawBody,
-        deliveryId,
-        context,
-        reply
-    });
-    if (!payload) return null;
-    try {
-        await context.coreDb().transaction(async (tx)=>{
-            await handleSentryIssueEvent({
-                tx,
-                deliveryId,
-                payload,
-                publishIntegrationEventReceived: context.publishIntegrationEventReceived,
-                getIntegrationConnectionById: context.getIntegrationConnectionById
-            });
-        });
-    } catch (error) {
-        if (error instanceof SentryIssueDroppedError) {
-            logger().warn({
-                deliveryId,
-                err: error
-            }, `sentry webhook: ${error.message}, dropping`);
-            return recordAndDrop({
-                context,
-                reply,
-                deliveryId
-            });
-        }
-        throw error;
-    }
-    reply.code(204);
-    return null;
-}
-
-//# sourceMappingURL=issue-handler.js.map

package/dist/presentation/routes/issue-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/presentation/routes/issue-handler.ts"],"sourcesContent":["import {sentryIssueWebhookSchema} from '@shipfox/api-integration-sentry-dto';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {FastifyReply} from 'fastify';\nimport {SentryIssueDroppedError} from '#core/errors.js';\nimport {handleSentryIssueEvent, normalizeSentryIssueAction} from '#core/webhook.js';\nimport type {SentryWebhookContext} from './webhook-context.js';\nimport {parseAndValidateOrDrop, recordAndDrop} from './webhook-delivery.js';\n\n// Validates an issue delivery, then publishes the mapped event in a transaction.\n// A malformed or unknown-action payload is recorded-and-dropped (204) before we\n// reach core. Core throws a SentryIssueDroppedError when the delivery references\n// state we cannot publish against (unknown/deleted installation, missing\n// connection); we record-and-drop those too. Any other error bubbles up.\nexport async function handleIssueResource(args: {\n  context: SentryWebhookContext;\n  reply: FastifyReply;\n  deliveryId: string;\n  rawBody: string;\n}): Promise<null> {\n  const {context, reply, deliveryId, rawBody} = args;\n\n  const payload = await parseAndValidateOrDrop({\n    schema: sentryIssueWebhookSchema,\n    normalize: normalizeSentryIssueAction,\n    rawBody,\n    deliveryId,\n    context,\n    reply,\n  });\n  if (!payload) return null;\n\n  try {\n    await context.coreDb().transaction(async (tx) => {\n      await handleSentryIssueEvent({\n        tx,\n        deliveryId,\n        payload,\n        publishIntegrationEventReceived: context.publishIntegrationEventReceived,\n        getIntegrationConnectionById: context.getIntegrationConnectionById,\n      });\n    });\n  } catch (error) {\n    if (error instanceof SentryIssueDroppedError) {\n      logger().warn({deliveryId, err: error}, `sentry webhook: ${error.message}, dropping`);\n      return recordAndDrop({context, reply, deliveryId});\n    }\n    throw error;\n  }\n\n  reply.code(204);\n  return null;\n}\n"],"names":["sentryIssueWebhookSchema","logger","SentryIssueDroppedError","handleSentryIssueEvent","normalizeSentryIssueAction","parseAndValidateOrDrop","recordAndDrop","handleIssueResource","args","context","reply","deliveryId","rawBody","payload","schema","normalize","coreDb","transaction","tx","publishIntegrationEventReceived","getIntegrationConnectionById","error","warn","err","message","code"],"mappings":"AAAA,SAAQA,wBAAwB,QAAO,sCAAsC;AAC7E,SAAQC,MAAM,QAAO,8BAA8B;AAEnD,SAAQC,uBAAuB,QAAO,kBAAkB;AACxD,SAAQC,sBAAsB,EAAEC,0BAA0B,QAAO,mBAAmB;AAEpF,SAAQC,sBAAsB,EAAEC,aAAa,QAAO,wBAAwB;AAE5E,iFAAiF;AACjF,gFAAgF;AAChF,iFAAiF;AACjF,yEAAyE;AACzE,yEAAyE;AACzE,OAAO,eAAeC,oBAAoBC,IAKzC;IACC,MAAM,EAACC,OAAO,EAAEC,KAAK,EAAEC,UAAU,EAAEC,OAAO,EAAC,GAAGJ;IAE9C,MAAMK,UAAU,MAAMR,uBAAuB;QAC3CS,QAAQd;QACRe,WAAWX;QACXQ;QACAD;QACAF;QACAC;IACF;IACA,IAAI,CAACG,SAAS,OAAO;IAErB,IAAI;QACF,MAAMJ,QAAQO,MAAM,GAAGC,WAAW,CAAC,OAAOC;YACxC,MAAMf,uBAAuB;gBAC3Be;gBACAP;gBACAE;gBACAM,iCAAiCV,QAAQU,+BAA+B;gBACxEC,8BAA8BX,QAAQW,4BAA4B;YACpE;QACF;IACF,EAAE,OAAOC,OAAO;QACd,IAAIA,iBAAiBnB,yBAAyB;YAC5CD,SAASqB,IAAI,CAAC;gBAACX;gBAAYY,KAAKF;YAAK,GAAG,CAAC,gBAAgB,EAAEA,MAAMG,OAAO,CAAC,UAAU,CAAC;YACpF,OAAOlB,cAAc;gBAACG;gBAASC;gBAAOC;YAAU;QAClD;QACA,MAAMU;IACR;IAEAX,MAAMe,IAAI,CAAC;IACX,OAAO;AACT"}

package/dist/presentation/routes/webhook-delivery.d.ts

@@ -1,28 +0,0 @@
-import type { FastifyReply } from 'fastify';
-import type { z } from 'zod';
-import type { SentryWebhookContext } from './webhook-context.js';
-export declare const SENTRY_PROVIDER = "sentry";
-/**
- * Parses and validates a delivery body, recording-and-dropping it (HTTP 204) when
- * the JSON is malformed or fails the schema (an unknown action falls here too).
- * Returns the validated payload, or null when the delivery was dropped.
- */
-export declare function parseAndValidateOrDrop<TSchema extends z.ZodType>(args: {
-    schema: TSchema;
-    rawBody: string;
-    deliveryId: string;
-    context: SentryWebhookContext;
-    reply: FastifyReply;
-    normalize?: (parsedJson: unknown) => unknown;
-}): Promise<z.infer<TSchema> | null>;
-/**
- * Records the delivery for dedup and replies 204 without acting on it. A sustained
- * non-2xx can degrade or disable the webhook on Sentry's side (a deliberate
- * deviation from GitHub's 400), so deliveries we cannot use are acknowledged.
- */
-export declare function recordAndDrop(args: {
-    context: SentryWebhookContext;
-    reply: FastifyReply;
-    deliveryId: string;
-}): Promise<null>;
-//# sourceMappingURL=webhook-delivery.d.ts.map

package/dist/presentation/routes/webhook-delivery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"webhook-delivery.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhook-delivery.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAC3B,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAE/D,eAAO,MAAM,eAAe,WAAW,CAAC;AAExC;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE;IAC5E,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC;CAC9C,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAuBnC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhB"}

package/dist/presentation/routes/webhook-delivery.js

@@ -1,56 +0,0 @@
-import { logger } from '@shipfox/node-opentelemetry';
-export const SENTRY_PROVIDER = 'sentry';
-/**
- * Parses and validates a delivery body, recording-and-dropping it (HTTP 204) when
- * the JSON is malformed or fails the schema (an unknown action falls here too).
- * Returns the validated payload, or null when the delivery was dropped.
- */ export async function parseAndValidateOrDrop(args) {
-    const { schema, rawBody, deliveryId, context, reply, normalize } = args;
-    let parsedJson;
-    try {
-        parsedJson = JSON.parse(rawBody);
-    } catch (error) {
-        logger().warn({
-            deliveryId,
-            err: error
-        }, 'sentry webhook: payload JSON parse failed, dropping');
-        await recordAndDrop({
-            context,
-            reply,
-            deliveryId
-        });
-        return null;
-    }
-    const validated = schema.safeParse(normalize ? normalize(parsedJson) : parsedJson);
-    if (!validated.success) {
-        logger().warn({
-            deliveryId,
-            issues: validated.error.issues
-        }, 'sentry webhook: payload failed validation (or unknown action), dropping');
-        await recordAndDrop({
-            context,
-            reply,
-            deliveryId
-        });
-        return null;
-    }
-    return validated.data;
-}
-/**
- * Records the delivery for dedup and replies 204 without acting on it. A sustained
- * non-2xx can degrade or disable the webhook on Sentry's side (a deliberate
- * deviation from GitHub's 400), so deliveries we cannot use are acknowledged.
- */ export async function recordAndDrop(args) {
-    const { context, reply, deliveryId } = args;
-    await context.coreDb().transaction(async (tx)=>{
-        await context.recordDeliveryOnly({
-            tx,
-            provider: SENTRY_PROVIDER,
-            deliveryId
-        });
-    });
-    reply.code(204);
-    return null;
-}
-
-//# sourceMappingURL=webhook-delivery.js.map

package/dist/presentation/routes/webhook-delivery.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/presentation/routes/webhook-delivery.ts"],"sourcesContent":["import {logger} from '@shipfox/node-opentelemetry';\nimport type {FastifyReply} from 'fastify';\nimport type {z} from 'zod';\nimport type {SentryWebhookContext} from './webhook-context.js';\n\nexport const SENTRY_PROVIDER = 'sentry';\n\n/**\n * Parses and validates a delivery body, recording-and-dropping it (HTTP 204) when\n * the JSON is malformed or fails the schema (an unknown action falls here too).\n * Returns the validated payload, or null when the delivery was dropped.\n */\nexport async function parseAndValidateOrDrop<TSchema extends z.ZodType>(args: {\n  schema: TSchema;\n  rawBody: string;\n  deliveryId: string;\n  context: SentryWebhookContext;\n  reply: FastifyReply;\n  normalize?: (parsedJson: unknown) => unknown;\n}): Promise<z.infer<TSchema> | null> {\n  const {schema, rawBody, deliveryId, context, reply, normalize} = args;\n\n  let parsedJson: unknown;\n  try {\n    parsedJson = JSON.parse(rawBody);\n  } catch (error) {\n    logger().warn({deliveryId, err: error}, 'sentry webhook: payload JSON parse failed, dropping');\n    await recordAndDrop({context, reply, deliveryId});\n    return null;\n  }\n\n  const validated = schema.safeParse(normalize ? normalize(parsedJson) : parsedJson);\n  if (!validated.success) {\n    logger().warn(\n      {deliveryId, issues: validated.error.issues},\n      'sentry webhook: payload failed validation (or unknown action), dropping',\n    );\n    await recordAndDrop({context, reply, deliveryId});\n    return null;\n  }\n\n  return validated.data;\n}\n\n/**\n * Records the delivery for dedup and replies 204 without acting on it. A sustained\n * non-2xx can degrade or disable the webhook on Sentry's side (a deliberate\n * deviation from GitHub's 400), so deliveries we cannot use are acknowledged.\n */\nexport async function recordAndDrop(args: {\n  context: SentryWebhookContext;\n  reply: FastifyReply;\n  deliveryId: string;\n}): Promise<null> {\n  const {context, reply, deliveryId} = args;\n  await context.coreDb().transaction(async (tx) => {\n    await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId});\n  });\n  reply.code(204);\n  return null;\n}\n"],"names":["logger","SENTRY_PROVIDER","parseAndValidateOrDrop","args","schema","rawBody","deliveryId","context","reply","normalize","parsedJson","JSON","parse","error","warn","err","recordAndDrop","validated","safeParse","success","issues","data","coreDb","transaction","tx","recordDeliveryOnly","provider","code"],"mappings":"AAAA,SAAQA,MAAM,QAAO,8BAA8B;AAKnD,OAAO,MAAMC,kBAAkB,SAAS;AAExC;;;;CAIC,GACD,OAAO,eAAeC,uBAAkDC,IAOvE;IACC,MAAM,EAACC,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAEC,OAAO,EAAEC,KAAK,EAAEC,SAAS,EAAC,GAAGN;IAEjE,IAAIO;IACJ,IAAI;QACFA,aAAaC,KAAKC,KAAK,CAACP;IAC1B,EAAE,OAAOQ,OAAO;QACdb,SAASc,IAAI,CAAC;YAACR;YAAYS,KAAKF;QAAK,GAAG;QACxC,MAAMG,cAAc;YAACT;YAASC;YAAOF;QAAU;QAC/C,OAAO;IACT;IAEA,MAAMW,YAAYb,OAAOc,SAAS,CAACT,YAAYA,UAAUC,cAAcA;IACvE,IAAI,CAACO,UAAUE,OAAO,EAAE;QACtBnB,SAASc,IAAI,CACX;YAACR;YAAYc,QAAQH,UAAUJ,KAAK,CAACO,MAAM;QAAA,GAC3C;QAEF,MAAMJ,cAAc;YAACT;YAASC;YAAOF;QAAU;QAC/C,OAAO;IACT;IAEA,OAAOW,UAAUI,IAAI;AACvB;AAEA;;;;CAIC,GACD,OAAO,eAAeL,cAAcb,IAInC;IACC,MAAM,EAACI,OAAO,EAAEC,KAAK,EAAEF,UAAU,EAAC,GAAGH;IACrC,MAAMI,QAAQe,MAAM,GAAGC,WAAW,CAAC,OAAOC;QACxC,MAAMjB,QAAQkB,kBAAkB,CAAC;YAACD;YAAIE,UAAUzB;YAAiBK;QAAU;IAC7E;IACAE,MAAMmB,IAAI,CAAC;IACX,OAAO;AACT"}

package/dist/presentation/routes/webhook-request.d.ts

@@ -1,10 +0,0 @@
-import type { FastifyRequest } from 'fastify';
-export interface SentryWebhookRequest {
-    deliveryId: string;
-    resource: string;
-    signature: string;
-    signatureHeaderName: string;
-    rawBody: string;
-}
-export declare function parseSentryWebhookRequest(request: FastifyRequest): SentryWebhookRequest;
-//# sourceMappingURL=webhook-request.d.ts.map

package/dist/presentation/routes/webhook-request.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"webhook-request.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhook-request.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,SAAS,CAAC;AAQ5C,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB;AAKD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,cAAc,GAAG,oBAAoB,CA8BvF"}

package/dist/presentation/routes/webhook-request.js

@@ -1,56 +0,0 @@
-import { Buffer } from 'node:buffer';
-import { ClientError } from '@shipfox/node-fastify';
-const REQUEST_ID_HEADER = 'request-id';
-const RESOURCE_HEADER = 'sentry-hook-resource';
-const SIGNATURE_HEADER = 'sentry-hook-signature';
-// Sentry has used both header names; accepting both keeps older deliveries verifiable.
-const LEGACY_SIGNATURE_HEADER = 'sentry-app-signature';
-// Extracts and structurally validates the parts every Sentry delivery must carry.
-// Throws ClientError for anything a genuine signed delivery would never omit; the
-// cryptographic signature check happens in the route once the secret is in hand.
-export function parseSentryWebhookRequest(request) {
-    const deliveryId = request.headers[REQUEST_ID_HEADER];
-    if (typeof deliveryId !== 'string' || !deliveryId) {
-        throw new ClientError('missing Request-ID header', 'missing-request-id');
-    }
-    const resource = request.headers[RESOURCE_HEADER];
-    if (typeof resource !== 'string' || !resource) {
-        throw new ClientError('missing Sentry-Hook-Resource header', 'missing-resource');
-    }
-    const signature = resolveSignature(request);
-    if (!signature) {
-        throw new ClientError('missing Sentry-Hook-Signature header', 'missing-signature', {
-            status: 401
-        });
-    }
-    const body = request.body;
-    if (!Buffer.isBuffer(body)) {
-        throw new ClientError('expected raw JSON body', 'invalid-body');
-    }
-    return {
-        deliveryId,
-        resource,
-        signature: signature.value,
-        signatureHeaderName: signature.headerName,
-        rawBody: body.toString('utf8')
-    };
-}
-function resolveSignature(request) {
-    const header = request.headers[SIGNATURE_HEADER];
-    if (typeof header === 'string' && header) {
-        return {
-            value: header,
-            headerName: SIGNATURE_HEADER
-        };
-    }
-    const legacyHeader = request.headers[LEGACY_SIGNATURE_HEADER];
-    if (typeof legacyHeader === 'string' && legacyHeader) {
-        return {
-            value: legacyHeader,
-            headerName: LEGACY_SIGNATURE_HEADER
-        };
-    }
-    return undefined;
-}
-
-//# sourceMappingURL=webhook-request.js.map

package/dist/presentation/routes/webhook-request.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/presentation/routes/webhook-request.ts"],"sourcesContent":["import {Buffer} from 'node:buffer';\nimport {ClientError} from '@shipfox/node-fastify';\nimport type {FastifyRequest} from 'fastify';\n\nconst REQUEST_ID_HEADER = 'request-id';\nconst RESOURCE_HEADER = 'sentry-hook-resource';\nconst SIGNATURE_HEADER = 'sentry-hook-signature';\n// Sentry has used both header names; accepting both keeps older deliveries verifiable.\nconst LEGACY_SIGNATURE_HEADER = 'sentry-app-signature';\n\nexport interface SentryWebhookRequest {\n  deliveryId: string;\n  resource: string;\n  signature: string;\n  signatureHeaderName: string;\n  rawBody: string;\n}\n\n// Extracts and structurally validates the parts every Sentry delivery must carry.\n// Throws ClientError for anything a genuine signed delivery would never omit; the\n// cryptographic signature check happens in the route once the secret is in hand.\nexport function parseSentryWebhookRequest(request: FastifyRequest): SentryWebhookRequest {\n  const deliveryId = request.headers[REQUEST_ID_HEADER];\n  if (typeof deliveryId !== 'string' || !deliveryId) {\n    throw new ClientError('missing Request-ID header', 'missing-request-id');\n  }\n\n  const resource = request.headers[RESOURCE_HEADER];\n  if (typeof resource !== 'string' || !resource) {\n    throw new ClientError('missing Sentry-Hook-Resource header', 'missing-resource');\n  }\n\n  const signature = resolveSignature(request);\n  if (!signature) {\n    throw new ClientError('missing Sentry-Hook-Signature header', 'missing-signature', {\n      status: 401,\n    });\n  }\n\n  const body = request.body;\n  if (!Buffer.isBuffer(body)) {\n    throw new ClientError('expected raw JSON body', 'invalid-body');\n  }\n\n  return {\n    deliveryId,\n    resource,\n    signature: signature.value,\n    signatureHeaderName: signature.headerName,\n    rawBody: body.toString('utf8'),\n  };\n}\n\nfunction resolveSignature(\n  request: FastifyRequest,\n): {value: string; headerName: string} | undefined {\n  const header = request.headers[SIGNATURE_HEADER];\n  if (typeof header === 'string' && header) {\n    return {value: header, headerName: SIGNATURE_HEADER};\n  }\n  const legacyHeader = request.headers[LEGACY_SIGNATURE_HEADER];\n  if (typeof legacyHeader === 'string' && legacyHeader) {\n    return {value: legacyHeader, headerName: LEGACY_SIGNATURE_HEADER};\n  }\n  return undefined;\n}\n"],"names":["Buffer","ClientError","REQUEST_ID_HEADER","RESOURCE_HEADER","SIGNATURE_HEADER","LEGACY_SIGNATURE_HEADER","parseSentryWebhookRequest","request","deliveryId","headers","resource","signature","resolveSignature","status","body","isBuffer","value","signatureHeaderName","headerName","rawBody","toString","header","legacyHeader","undefined"],"mappings":"AAAA,SAAQA,MAAM,QAAO,cAAc;AACnC,SAAQC,WAAW,QAAO,wBAAwB;AAGlD,MAAMC,oBAAoB;AAC1B,MAAMC,kBAAkB;AACxB,MAAMC,mBAAmB;AACzB,uFAAuF;AACvF,MAAMC,0BAA0B;AAUhC,kFAAkF;AAClF,kFAAkF;AAClF,iFAAiF;AACjF,OAAO,SAASC,0BAA0BC,OAAuB;IAC/D,MAAMC,aAAaD,QAAQE,OAAO,CAACP,kBAAkB;IACrD,IAAI,OAAOM,eAAe,YAAY,CAACA,YAAY;QACjD,MAAM,IAAIP,YAAY,6BAA6B;IACrD;IAEA,MAAMS,WAAWH,QAAQE,OAAO,CAACN,gBAAgB;IACjD,IAAI,OAAOO,aAAa,YAAY,CAACA,UAAU;QAC7C,MAAM,IAAIT,YAAY,uCAAuC;IAC/D;IAEA,MAAMU,YAAYC,iBAAiBL;IACnC,IAAI,CAACI,WAAW;QACd,MAAM,IAAIV,YAAY,wCAAwC,qBAAqB;YACjFY,QAAQ;QACV;IACF;IAEA,MAAMC,OAAOP,QAAQO,IAAI;IACzB,IAAI,CAACd,OAAOe,QAAQ,CAACD,OAAO;QAC1B,MAAM,IAAIb,YAAY,0BAA0B;IAClD;IAEA,OAAO;QACLO;QACAE;QACAC,WAAWA,UAAUK,KAAK;QAC1BC,qBAAqBN,UAAUO,UAAU;QACzCC,SAASL,KAAKM,QAAQ,CAAC;IACzB;AACF;AAEA,SAASR,iBACPL,OAAuB;IAEvB,MAAMc,SAASd,QAAQE,OAAO,CAACL,iBAAiB;IAChD,IAAI,OAAOiB,WAAW,YAAYA,QAAQ;QACxC,OAAO;YAACL,OAAOK;YAAQH,YAAYd;QAAgB;IACrD;IACA,MAAMkB,eAAef,QAAQE,OAAO,CAACJ,wBAAwB;IAC7D,IAAI,OAAOiB,iBAAiB,YAAYA,cAAc;QACpD,OAAO;YAACN,OAAOM;YAAcJ,YAAYb;QAAuB;IAClE;IACA,OAAOkB;AACT"}

package/src/presentation/routes/installation-handler.ts

@@ -1,76 +0,0 @@
-import {sentryInstallationWebhookSchema} from '@shipfox/api-integration-sentry-dto';
-import type {FastifyReply} from 'fastify';
-import {config} from '#config.js';
-import {handleSentryInstallationCreated, handleSentryInstallationDeleted} from '#core/webhook.js';
-import {
-  getSentryInstallationByInstallationUuid,
-  persistVerifiedUnclaimedInstallation,
-} from '#db/installations.js';
-import type {SentryWebhookContext} from './webhook-context.js';
-import {parseAndValidateOrDrop, SENTRY_PROVIDER} from './webhook-delivery.js';
-
-// Validates an installation lifecycle delivery, then applies it. `created` is the
-// authoritative install signal: it exchanges the single-use code and persists a
-// verified-unclaimed row (exchange outside any transaction; persist + delivery
-// record in one short transaction). `deleted` tombstones the install and disables
-// the connection in a single transaction.
-export async function handleInstallationResource(args: {
-  context: SentryWebhookContext;
-  reply: FastifyReply;
-  deliveryId: string;
-  rawBody: string;
-}): Promise<null> {
-  const {context, reply, deliveryId, rawBody} = args;
-
-  const payload = await parseAndValidateOrDrop({
-    schema: sentryInstallationWebhookSchema,
-    rawBody,
-    deliveryId,
-    context,
-    reply,
-  });
-  if (!payload) return null;
-
-  const installation = payload.data.installation;
-
-  if (payload.action === 'deleted') {
-    await context.coreDb().transaction(async (tx) => {
-      await handleSentryInstallationDeleted({
-        tx,
-        deliveryId,
-        installationUuid: installation.uuid,
-        recordDeliveryOnly: context.recordDeliveryOnly,
-        updateConnectionLifecycleStatus: context.updateConnectionLifecycleStatus,
-      });
-    });
-    reply.code(204);
-    return null;
-  }
-
-  await handleSentryInstallationCreated({
-    deliveryId,
-    installationUuid: installation.uuid,
-    orgSlug: installation.organization?.slug,
-    code: installation.code,
-    sentry: context.sentry,
-    verifyInstall: config.SENTRY_APP_VERIFY_INSTALL,
-    getSentryInstallation: ({installationUuid}) =>
-      getSentryInstallationByInstallationUuid(installationUuid),
-    persistUnclaimedAndRecordDelivery: ({installationUuid, orgSlug, codeHash, deliveryId: id}) =>
-      context.coreDb().transaction(async (tx) => {
-        const persisted = await persistVerifiedUnclaimedInstallation(
-          {installationUuid, orgSlug, codeHash},
-          {tx},
-        );
-        await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId: id});
-        return persisted;
-      }),
-    recordDelivery: (id) =>
-      context.coreDb().transaction(async (tx) => {
-        await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId: id});
-      }),
-  });
-
-  reply.code(204);
-  return null;
-}

package/src/presentation/routes/issue-handler.ts

@@ -1,52 +0,0 @@
-import {sentryIssueWebhookSchema} from '@shipfox/api-integration-sentry-dto';
-import {logger} from '@shipfox/node-opentelemetry';
-import type {FastifyReply} from 'fastify';
-import {SentryIssueDroppedError} from '#core/errors.js';
-import {handleSentryIssueEvent, normalizeSentryIssueAction} from '#core/webhook.js';
-import type {SentryWebhookContext} from './webhook-context.js';
-import {parseAndValidateOrDrop, recordAndDrop} from './webhook-delivery.js';
-
-// Validates an issue delivery, then publishes the mapped event in a transaction.
-// A malformed or unknown-action payload is recorded-and-dropped (204) before we
-// reach core. Core throws a SentryIssueDroppedError when the delivery references
-// state we cannot publish against (unknown/deleted installation, missing
-// connection); we record-and-drop those too. Any other error bubbles up.
-export async function handleIssueResource(args: {
-  context: SentryWebhookContext;
-  reply: FastifyReply;
-  deliveryId: string;
-  rawBody: string;
-}): Promise<null> {
-  const {context, reply, deliveryId, rawBody} = args;
-
-  const payload = await parseAndValidateOrDrop({
-    schema: sentryIssueWebhookSchema,
-    normalize: normalizeSentryIssueAction,
-    rawBody,
-    deliveryId,
-    context,
-    reply,
-  });
-  if (!payload) return null;
-
-  try {
-    await context.coreDb().transaction(async (tx) => {
-      await handleSentryIssueEvent({
-        tx,
-        deliveryId,
-        payload,
-        publishIntegrationEventReceived: context.publishIntegrationEventReceived,
-        getIntegrationConnectionById: context.getIntegrationConnectionById,
-      });
-    });
-  } catch (error) {
-    if (error instanceof SentryIssueDroppedError) {
-      logger().warn({deliveryId, err: error}, `sentry webhook: ${error.message}, dropping`);
-      return recordAndDrop({context, reply, deliveryId});
-    }
-    throw error;
-  }
-
-  reply.code(204);
-  return null;
-}

package/src/presentation/routes/webhook-delivery.ts

@@ -1,61 +0,0 @@
-import {logger} from '@shipfox/node-opentelemetry';
-import type {FastifyReply} from 'fastify';
-import type {z} from 'zod';
-import type {SentryWebhookContext} from './webhook-context.js';
-
-export const SENTRY_PROVIDER = 'sentry';
-
-/**
- * Parses and validates a delivery body, recording-and-dropping it (HTTP 204) when
- * the JSON is malformed or fails the schema (an unknown action falls here too).
- * Returns the validated payload, or null when the delivery was dropped.
- */
-export async function parseAndValidateOrDrop<TSchema extends z.ZodType>(args: {
-  schema: TSchema;
-  rawBody: string;
-  deliveryId: string;
-  context: SentryWebhookContext;
-  reply: FastifyReply;
-  normalize?: (parsedJson: unknown) => unknown;
-}): Promise<z.infer<TSchema> | null> {
-  const {schema, rawBody, deliveryId, context, reply, normalize} = args;
-
-  let parsedJson: unknown;
-  try {
-    parsedJson = JSON.parse(rawBody);
-  } catch (error) {
-    logger().warn({deliveryId, err: error}, 'sentry webhook: payload JSON parse failed, dropping');
-    await recordAndDrop({context, reply, deliveryId});
-    return null;
-  }
-
-  const validated = schema.safeParse(normalize ? normalize(parsedJson) : parsedJson);
-  if (!validated.success) {
-    logger().warn(
-      {deliveryId, issues: validated.error.issues},
-      'sentry webhook: payload failed validation (or unknown action), dropping',
-    );
-    await recordAndDrop({context, reply, deliveryId});
-    return null;
-  }
-
-  return validated.data;
-}
-
-/**
- * Records the delivery for dedup and replies 204 without acting on it. A sustained
- * non-2xx can degrade or disable the webhook on Sentry's side (a deliberate
- * deviation from GitHub's 400), so deliveries we cannot use are acknowledged.
- */
-export async function recordAndDrop(args: {
-  context: SentryWebhookContext;
-  reply: FastifyReply;
-  deliveryId: string;
-}): Promise<null> {
-  const {context, reply, deliveryId} = args;
-  await context.coreDb().transaction(async (tx) => {
-    await context.recordDeliveryOnly({tx, provider: SENTRY_PROVIDER, deliveryId});
-  });
-  reply.code(204);
-  return null;
-}

package/src/presentation/routes/webhook-request.ts

@@ -1,66 +0,0 @@
-import {Buffer} from 'node:buffer';
-import {ClientError} from '@shipfox/node-fastify';
-import type {FastifyRequest} from 'fastify';
-
-const REQUEST_ID_HEADER = 'request-id';
-const RESOURCE_HEADER = 'sentry-hook-resource';
-const SIGNATURE_HEADER = 'sentry-hook-signature';
-// Sentry has used both header names; accepting both keeps older deliveries verifiable.
-const LEGACY_SIGNATURE_HEADER = 'sentry-app-signature';
-
-export interface SentryWebhookRequest {
-  deliveryId: string;
-  resource: string;
-  signature: string;
-  signatureHeaderName: string;
-  rawBody: string;
-}
-
-// Extracts and structurally validates the parts every Sentry delivery must carry.
-// Throws ClientError for anything a genuine signed delivery would never omit; the
-// cryptographic signature check happens in the route once the secret is in hand.
-export function parseSentryWebhookRequest(request: FastifyRequest): SentryWebhookRequest {
-  const deliveryId = request.headers[REQUEST_ID_HEADER];
-  if (typeof deliveryId !== 'string' || !deliveryId) {
-    throw new ClientError('missing Request-ID header', 'missing-request-id');
-  }
-
-  const resource = request.headers[RESOURCE_HEADER];
-  if (typeof resource !== 'string' || !resource) {
-    throw new ClientError('missing Sentry-Hook-Resource header', 'missing-resource');
-  }
-
-  const signature = resolveSignature(request);
-  if (!signature) {
-    throw new ClientError('missing Sentry-Hook-Signature header', 'missing-signature', {
-      status: 401,
-    });
-  }
-
-  const body = request.body;
-  if (!Buffer.isBuffer(body)) {
-    throw new ClientError('expected raw JSON body', 'invalid-body');
-  }
-
-  return {
-    deliveryId,
-    resource,
-    signature: signature.value,
-    signatureHeaderName: signature.headerName,
-    rawBody: body.toString('utf8'),
-  };
-}
-
-function resolveSignature(
-  request: FastifyRequest,
-): {value: string; headerName: string} | undefined {
-  const header = request.headers[SIGNATURE_HEADER];
-  if (typeof header === 'string' && header) {
-    return {value: header, headerName: SIGNATURE_HEADER};
-  }
-  const legacyHeader = request.headers[LEGACY_SIGNATURE_HEADER];
-  if (typeof legacyHeader === 'string' && legacyHeader) {
-    return {value: legacyHeader, headerName: LEGACY_SIGNATURE_HEADER};
-  }
-  return undefined;
-}