@spacebar_ai/moldclaw-core 2026.3.41 → 2026.3.44

package/dist/upsert-with-lock-C171GLaR.js

@@ -1,33 +0,0 @@
-import { T as AUTH_STORE_LOCK_OPTIONS, v as ensureAuthStoreFile, w as withFileLock, y as resolveAuthStorePath } from "./setup-binary-C17YnmA8.js";
-import { n as saveJsonFile, t as loadJsonFile } from "./json-file-C_oKBEVw.js";
-//#region src/agents/auth-profiles/upsert-with-lock.ts
-function coerceAuthProfileStore(raw) {
-	const record = raw && typeof raw === "object" ? raw : {};
-	const profiles = record.profiles && typeof record.profiles === "object" && !Array.isArray(record.profiles) ? { ...record.profiles } : {};
-	const order = record.order && typeof record.order === "object" && !Array.isArray(record.order) ? record.order : void 0;
-	const lastGood = record.lastGood && typeof record.lastGood === "object" && !Array.isArray(record.lastGood) ? record.lastGood : void 0;
-	const usageStats = record.usageStats && typeof record.usageStats === "object" && !Array.isArray(record.usageStats) ? record.usageStats : void 0;
-	return {
-		version: typeof record.version === "number" && Number.isFinite(record.version) ? record.version : 1,
-		profiles,
-		...order ? { order } : {},
-		...lastGood ? { lastGood } : {},
-		...usageStats ? { usageStats } : {}
-	};
-}
-async function upsertAuthProfileWithLock(params) {
-	const authPath = resolveAuthStorePath(params.agentDir);
-	ensureAuthStoreFile(authPath);
-	try {
-		return await withFileLock(authPath, AUTH_STORE_LOCK_OPTIONS, async () => {
-			const store = coerceAuthProfileStore(loadJsonFile(authPath));
-			store.profiles[params.profileId] = params.credential;
-			saveJsonFile(authPath, store);
-			return store;
-		});
-	} catch {
-		return null;
-	}
-}
-//#endregion
-export { upsertAuthProfileWithLock as t };

package/dist/usage-N3bxnbmt.js

@@ -1,115 +0,0 @@
-import { c as loadConfig } from "./io-CMfWWPXQ.js";
-import { t as createSubscriptionAuthHeaders } from "./auth-Byfp0flq.js";
-//#region src/subscription/mode.ts
-/**
-* Default AI Proxy endpoint
-*/
-const DEFAULT_AI_PROXY_ENDPOINT = "https://moldclaw-ai.jungwoo.workers.dev/v1";
-/**
-* Resolve the current subscription mode from config
-*
-* Checks multiple locations for backward compatibility:
-* 1. _moldclaw.subscriptionMode (internal)
-* 2. wizard.usageMode (Tauri app stores here)
-*
-* @param config - moldclaw config (optional, will load from disk if not provided)
-* @returns The subscription mode ("byok" or "subscription")
-*/
-function resolveSubscriptionMode(config) {
-	const cfg = config ?? loadConfig();
-	const internalMode = cfg?._moldclaw?.subscriptionMode;
-	if (internalMode === "subscription" || internalMode === "byok") return internalMode;
-	if ((cfg?.wizard)?.usageMode === "subscription") return "subscription";
-	return "byok";
-}
-/**
-* Check if the config is in subscription mode
-*
-* @param config - moldclaw config
-* @returns true if in subscription mode, false otherwise (BYOK)
-*/
-function isSubscriptionMode(config) {
-	return resolveSubscriptionMode(config) === "subscription";
-}
-/**
-* Resolve the AI Proxy endpoint from config
-*
-* @param config - moldclaw config
-* @returns The AI Proxy endpoint URL
-*/
-function resolveAiProxyEndpoint(config) {
-	return config?._moldclaw?.subscription?.endpoint ?? "https://moldclaw-ai.jungwoo.workers.dev/v1";
-}
-//#endregion
-//#region src/subscription/usage.ts
-/**
-* Subscription usage API client
-*
-* Fetches usage data from the AI Proxy service using device-identity authentication.
-*/
-/**
-* Calculate next month's first day (reset date)
-*/
-function calculateResetDate(period) {
-	const [year, month] = period.split("-").map(Number);
-	const nextMonth = month === 12 ? 1 : month + 1;
-	return `${month === 12 ? year + 1 : year}-${String(nextMonth).padStart(2, "0")}-01`;
-}
-/**
-* Fetch usage data from AI Proxy
-*
-* @param config - Optional moldClaw config (for custom endpoint)
-* @returns Usage info or error
-*/
-async function fetchUsage(config) {
-	const authResult = createSubscriptionAuthHeaders();
-	if (!authResult.success) return {
-		success: false,
-		error: `Authentication failed: ${authResult.error}`
-	};
-	const url = `${resolveAiProxyEndpoint(config)}/usage`;
-	try {
-		const response = await fetch(url, {
-			method: "GET",
-			headers: {
-				...authResult.headers,
-				Accept: "application/json"
-			}
-		});
-		if (!response.ok) {
-			const errorText = await response.text();
-			return {
-				success: false,
-				error: `API error ${response.status}: ${errorText}`
-			};
-		}
-		const apiResponse = await response.json();
-		return {
-			success: true,
-			data: {
-				tokens: {
-					used: apiResponse.usage.inputTokens + apiResponse.usage.outputTokens,
-					limit: apiResponse.limits.inputTokens + apiResponse.limits.outputTokens
-				},
-				requests: {
-					used: apiResponse.usage.requests,
-					limit: apiResponse.tier === "free" ? 1e3 : apiResponse.tier === "pro" ? 1e4 : 5e4
-				},
-				images: {
-					used: apiResponse.usage.imageGenerations,
-					limit: apiResponse.limits.imageGenerations
-				},
-				resetDate: calculateResetDate(apiResponse.period),
-				tier: apiResponse.tier,
-				period: apiResponse.period
-			}
-		};
-	} catch (error) {
-		return {
-			success: false,
-			error: error instanceof Error ? error.message : "Unknown fetch error"
-		};
-	}
-}
-//#endregion
-export { resolveSubscriptionMode as a, resolveAiProxyEndpoint as i, DEFAULT_AI_PROXY_ENDPOINT as n, isSubscriptionMode as r, fetchUsage as t };

package/dist/web-RdvT7gKa.js

@@ -1,112 +0,0 @@
-import "./redact-fatrROh9.js";
-import "./errors-DOJWZqNo.js";
-import "./unhandled-rejections-CTvNvnT0.js";
-import "./logger-BFfIIIKH.js";
-import "./paths-D6AgsMTU.js";
-import "./tmp-moldclaw-dir-DWF-d8qD.js";
-import "./theme-BSXzMzAA.js";
-import "./globals-DESrFYmC.js";
-import "./runtime-_tQz41uA.js";
-import "./ansi-BPhP6LBZ.js";
-import "./subsystem-CPmDTJ2P.js";
-import "./boolean-B6zcAynR.js";
-import "./env-D42cffog.js";
-import "./warning-filter-B1UOeM0G.js";
-import "./utils-C7ykRPCQ.js";
-import "./links-BcahUP5U.js";
-import "./setup-binary-C17YnmA8.js";
-import { Eo as pickWebChannel, Gn as monitorWebInbox, Oo as webAuthExists, So as WA_WEB_AUTH_DIR, Un as loginWeb, Wn as monitorWebChannel, Xn as createWaSocket, er as waitForWaConnection, tr as sendMessageWhatsApp, wo as logWebSelfId } from "./auth-profiles-1kPLbBwI.js";
-import "./model-selection-hL8i1Jbs.js";
-import "./agent-scope-C-YmLnnb.js";
-import "./boundary-file-read-tPYh_8fH.js";
-import "./logger-BGzLUitz.js";
-import "./exec-CvEtXqTZ.js";
-import "./workspace-CpWi5wPr.js";
-import "./io-CMfWWPXQ.js";
-import "./host-env-security-DQ2i_W12.js";
-import "./safe-text-Cnulee_z.js";
-import "./version-T8nMYUnU.js";
-import "./env-substitution-68cyvF5h.js";
-import "./config-state-h5jUoHya.js";
-import "./network-mode-BtWXzwYn.js";
-import "./registry-C1pRrsQl.js";
-import "./manifest-registry-DAd0SRAP.js";
-import "./ip-C4YAIpr4.js";
-import "./zod-schema.core-DvwgNmpd.js";
-import "./config-sW57gztj.js";
-import "./audit-fs-CMb-YUHX.js";
-import "./resolve-PSlwZjg3.js";
-import "./provider-web-search-CcUC9ktE.js";
-import "./text-runtime-Cfq-Uyx0.js";
-import "./workspace-dirs-x10McA9t.js";
-import "./config-BwkGZjD5.js";
-import "./tailnet-fFTz5Twr.js";
-import "./net-K181nxTH.js";
-import "./credentials-D-5Pb-aZ.js";
-import "./routes-4k2kpvoT.js";
-import "./frontmatter-Cgg0ICvh.js";
-import "./env-overrides-DBQl3LRc.js";
-import "./path-alias-guards-BtSO7sk7.js";
-import "./skills-CbB5b27M.js";
-import "./ports-Ca74cFb2.js";
-import "./ports-lsof-CoiADo0p.js";
-import "./ssh-tunnel-DsY-9yao.js";
-import "./image-ops-Ck_D_vpe.js";
-import "./fs-safe-CRXFoBmh.js";
-import "./mime-DGFQe4XX.js";
-import "./server-middleware-Djfoa1s0.js";
-import "./message-channel-DFE4FuE_.js";
-import "./resolve-route-CSHDsa_m.js";
-import "./internal-hooks-83AcmxP3.js";
-import "./lazy-runtime-BoGB4usD.js";
-import "./config-schema-BNU4GQh_.js";
-import "./method-scopes-CQE7-bZ-.js";
-import "./session-cost-usage-DWgQk6XT.js";
-import "./paths-ApLcu1Uu.js";
-import "./routing-DQ-fpTaA.js";
-import "./send-BuNhp8PH.js";
-import "./node-resolve-D5Hvcgyx.js";
-import "./provider-stream-DrUD69ai.js";
-import "./identity-file-sshkKKIr.js";
-import "./provider-models-BCId_Lfu.js";
-import "./secret-file-p1IhQzwJ.js";
-import "./logging-Dy7UYzIN.js";
-import "./runtime-env-BlEtPF6b.js";
-import "./registry-BFMbkmgR.js";
-import "./provider-onboard-Ca0TaNud.js";
-import "./model-definitions-Cyyzm6Kr.js";
-import "./usage-N3bxnbmt.js";
-import "./device-identity-CRfhC3_s.js";
-import "./auth-Byfp0flq.js";
-import "./subscription-BhZORXN9.js";
-import "./diagnostic-D96Xaqrj.js";
-import "./message-hook-mappers-CeiHXgSQ.js";
-import "./json-store--7cBPxTG.js";
-import "./call-ByEzDJ1_.js";
-import "./multimodal-BJBBn_4F.js";
-import "./memory-search-Cv1SBrn7.js";
-import "./query-expansion-D_Mm5Hhi.js";
-import "./search-manager-C7J7B3_a.js";
-import "./core-CvDzLs7B.js";
-import "./issue-format-B0SI57Es.js";
-import "./logging-CxP9suT8.js";
-import "./note-dOl5kPAy.js";
-import "./state-paths-DsMoTg25.js";
-import "./config-value-CtTWALxG.js";
-import "./command-secret-targets-BFF4x_RB.js";
-import "./brave-BoWimrLe.js";
-import "./provider-usage-D8EZpFz9.js";
-import "./perplexity-EZwC3y2b.js";
-import "./restart-stale-pids-CPF1_61W.js";
-import "./delivery-queue-BOf5wYIc.js";
-import "./pairing-token-bu1e6z6X.js";
-import "./accounts-J2OhhhQi.js";
-import "./process-runtime-D27SftX_.js";
-import "./audit-CIWW1Aqm.js";
-import "./cli-runtime-DTCHPjCi.js";
-import "./cli-utils-BCuSS4l6.js";
-import "./help-format-BFzPm_8V.js";
-import "./progress-Cwq59vgZ.js";
-import "./gateway-runtime-D89mSQPB.js";
-import "./channel-web-CkAHo0qr.js";
-export { WA_WEB_AUTH_DIR, createWaSocket, logWebSelfId, loginWeb, monitorWebChannel, monitorWebInbox, pickWebChannel, sendMessageWhatsApp, waitForWaConnection, webAuthExists };

package/dist/web-shared-HSGD3yGt.d.ts

@@ -1,45 +0,0 @@
-import { nS as GuardedFetchOptions, rS as GuardedFetchResult } from "./types-Ckufs_BY.js";
-
-//#region src/agents/tools/web-guarded-fetch.d.ts
-type WebToolGuardedFetchOptions = Omit<GuardedFetchOptions, "mode" | "proxy" | "dangerouslyAllowEnvProxyWithoutPinnedDns"> & {
-  timeoutSeconds?: number;
-  useEnvProxy?: boolean;
-};
-type WebToolEndpointFetchOptions = Omit<WebToolGuardedFetchOptions, "policy" | "useEnvProxy">;
-declare function fetchWithWebToolsNetworkGuard(params: WebToolGuardedFetchOptions): Promise<GuardedFetchResult>;
-declare function withTrustedWebToolsEndpoint<T>(params: WebToolEndpointFetchOptions, run: (result: {
-  response: Response;
-  finalUrl: string;
-}) => Promise<T>): Promise<T>;
-declare function withStrictWebToolsEndpoint<T>(params: WebToolEndpointFetchOptions, run: (result: {
-  response: Response;
-  finalUrl: string;
-}) => Promise<T>): Promise<T>;
-//#endregion
-//#region src/agents/tools/web-shared.d.ts
-type CacheEntry<T> = {
-  value: T;
-  expiresAt: number;
-  insertedAt: number;
-};
-declare const DEFAULT_TIMEOUT_SECONDS = 30;
-declare const DEFAULT_CACHE_TTL_MINUTES = 15;
-declare function resolveTimeoutSeconds(value: unknown, fallback: number): number;
-declare function resolveCacheTtlMs(value: unknown, fallbackMinutes: number): number;
-declare function normalizeCacheKey(value: string): string;
-declare function readCache<T>(cache: Map<string, CacheEntry<T>>, key: string): {
-  value: T;
-  cached: boolean;
-} | null;
-declare function writeCache<T>(cache: Map<string, CacheEntry<T>>, key: string, value: T, ttlMs: number): void;
-declare function withTimeout(signal: AbortSignal | undefined, timeoutMs: number): AbortSignal;
-type ReadResponseTextResult = {
-  text: string;
-  truncated: boolean;
-  bytesRead: number;
-};
-declare function readResponseText(res: Response, options?: {
-  maxBytes?: number;
-}): Promise<ReadResponseTextResult>;
-//#endregion
-export { normalizeCacheKey as a, resolveCacheTtlMs as c, writeCache as d, fetchWithWebToolsNetworkGuard as f, ReadResponseTextResult as i, resolveTimeoutSeconds as l, withTrustedWebToolsEndpoint as m, DEFAULT_CACHE_TTL_MINUTES as n, readCache as o, withStrictWebToolsEndpoint as p, DEFAULT_TIMEOUT_SECONDS as r, readResponseText as s, CacheEntry as t, withTimeout as u };

package/dist/webhook-request-guards-CosLyl01.d.ts

@@ -1,76 +0,0 @@
-import { t as FixedWindowRateLimiter } from "./webhook-memory-guards-C5MrExwT.js";
-import { IncomingMessage, ServerResponse } from "node:http";
-
-//#region src/plugin-sdk/webhook-request-guards.d.ts
-type WebhookBodyReadProfile = "pre-auth" | "post-auth";
-type WebhookInFlightLimiter = {
-  tryAcquire: (key: string) => boolean;
-  release: (key: string) => void;
-  size: () => number;
-  clear: () => void;
-};
-/** Create an in-memory limiter that caps concurrent webhook handlers per key. */
-declare function createWebhookInFlightLimiter(options?: {
-  maxInFlightPerKey?: number;
-  maxTrackedKeys?: number;
-}): WebhookInFlightLimiter;
-/** Apply method, rate-limit, and content-type guards before a webhook handler reads the body. */
-declare function applyBasicWebhookRequestGuards(params: {
-  req: IncomingMessage;
-  res: ServerResponse;
-  allowMethods?: readonly string[];
-  rateLimiter?: FixedWindowRateLimiter;
-  rateLimitKey?: string;
-  nowMs?: number;
-  requireJsonContentType?: boolean;
-}): boolean;
-/** Start the shared webhook request lifecycle and return a release hook for in-flight tracking. */
-declare function beginWebhookRequestPipelineOrReject(params: {
-  req: IncomingMessage;
-  res: ServerResponse;
-  allowMethods?: readonly string[];
-  rateLimiter?: FixedWindowRateLimiter;
-  rateLimitKey?: string;
-  nowMs?: number;
-  requireJsonContentType?: boolean;
-  inFlightLimiter?: WebhookInFlightLimiter;
-  inFlightKey?: string;
-  inFlightLimitStatusCode?: number;
-  inFlightLimitMessage?: string;
-}): {
-  ok: true;
-  release: () => void;
-} | {
-  ok: false;
-};
-/** Read a webhook request body with bounded size/time limits and translate failures into responses. */
-declare function readWebhookBodyOrReject(params: {
-  req: IncomingMessage;
-  res: ServerResponse;
-  maxBytes?: number;
-  timeoutMs?: number;
-  profile?: WebhookBodyReadProfile;
-  invalidBodyMessage?: string;
-}): Promise<{
-  ok: true;
-  value: string;
-} | {
-  ok: false;
-}>;
-/** Read and parse a JSON webhook body, rejecting malformed or oversized payloads consistently. */
-declare function readJsonWebhookBodyOrReject(params: {
-  req: IncomingMessage;
-  res: ServerResponse;
-  maxBytes?: number;
-  timeoutMs?: number;
-  profile?: WebhookBodyReadProfile;
-  emptyObjectOnEmpty?: boolean;
-  invalidJsonMessage?: string;
-}): Promise<{
-  ok: true;
-  value: unknown;
-} | {
-  ok: false;
-}>;
-//#endregion
-export { readJsonWebhookBodyOrReject as a, createWebhookInFlightLimiter as i, applyBasicWebhookRequestGuards as n, readWebhookBodyOrReject as o, beginWebhookRequestPipelineOrReject as r, WebhookInFlightLimiter as t };

package/dist/webhook-targets-Bfnag-du.js

@@ -1,181 +0,0 @@
-import { _h as beginWebhookRequestPipelineOrReject, xs as registerPluginHttpRoute } from "./auth-profiles-1kPLbBwI.js";
-//#region src/plugin-sdk/webhook-path.ts
-/** Normalize webhook paths into the canonical registry form used by route lookup. */
-function normalizeWebhookPath(raw) {
-	const trimmed = raw.trim();
-	if (!trimmed) return "/";
-	const withSlash = trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
-	if (withSlash.length > 1 && withSlash.endsWith("/")) return withSlash.slice(0, -1);
-	return withSlash;
-}
-/** Resolve the effective webhook path from explicit path, URL, or default fallback. */
-function resolveWebhookPath(params) {
-	const trimmedPath = params.webhookPath?.trim();
-	if (trimmedPath) return normalizeWebhookPath(trimmedPath);
-	if (params.webhookUrl?.trim()) try {
-		return normalizeWebhookPath(new URL(params.webhookUrl).pathname || "/");
-	} catch {
-		return null;
-	}
-	return params.defaultPath ?? null;
-}
-//#endregion
-//#region src/plugin-sdk/webhook-targets.ts
-/** Register a webhook target and lazily install the matching plugin HTTP route on first use. */
-function registerWebhookTargetWithPluginRoute(params) {
-	return registerWebhookTarget(params.targetsByPath, params.target, {
-		onFirstPathTarget: ({ path }) => registerPluginHttpRoute({
-			...params.route,
-			path,
-			replaceExisting: params.route.replaceExisting ?? true
-		}),
-		onLastPathTargetRemoved: params.onLastPathTargetRemoved
-	});
-}
-const pathTeardownByTargetMap = /* @__PURE__ */ new WeakMap();
-function getPathTeardownMap(targetsByPath) {
-	const mapKey = targetsByPath;
-	const existing = pathTeardownByTargetMap.get(mapKey);
-	if (existing) return existing;
-	const created = /* @__PURE__ */ new Map();
-	pathTeardownByTargetMap.set(mapKey, created);
-	return created;
-}
-/** Add a normalized target to a path bucket and clean up route state when the last target leaves. */
-function registerWebhookTarget(targetsByPath, target, opts) {
-	const key = normalizeWebhookPath(target.path);
-	const normalizedTarget = {
-		...target,
-		path: key
-	};
-	const existing = targetsByPath.get(key) ?? [];
-	if (existing.length === 0) {
-		const onFirstPathResult = opts?.onFirstPathTarget?.({
-			path: key,
-			target: normalizedTarget
-		});
-		if (typeof onFirstPathResult === "function") getPathTeardownMap(targetsByPath).set(key, onFirstPathResult);
-	}
-	targetsByPath.set(key, [...existing, normalizedTarget]);
-	let isActive = true;
-	const unregister = () => {
-		if (!isActive) return;
-		isActive = false;
-		const updated = (targetsByPath.get(key) ?? []).filter((entry) => entry !== normalizedTarget);
-		if (updated.length > 0) {
-			targetsByPath.set(key, updated);
-			return;
-		}
-		targetsByPath.delete(key);
-		const teardown = getPathTeardownMap(targetsByPath).get(key);
-		if (teardown) {
-			getPathTeardownMap(targetsByPath).delete(key);
-			teardown();
-		}
-		opts?.onLastPathTargetRemoved?.({ path: key });
-	};
-	return {
-		target: normalizedTarget,
-		unregister
-	};
-}
-/** Resolve all registered webhook targets for the incoming request path. */
-function resolveWebhookTargets(req, targetsByPath) {
-	const path = normalizeWebhookPath(new URL(req.url ?? "/", "http://localhost").pathname);
-	const targets = targetsByPath.get(path);
-	if (!targets || targets.length === 0) return null;
-	return {
-		path,
-		targets
-	};
-}
-/** Run common webhook guards, then dispatch only when the request path resolves to live targets. */
-async function withResolvedWebhookRequestPipeline(params) {
-	const resolved = resolveWebhookTargets(params.req, params.targetsByPath);
-	if (!resolved) return false;
-	const inFlightKey = typeof params.inFlightKey === "function" ? params.inFlightKey({
-		req: params.req,
-		path: resolved.path,
-		targets: resolved.targets
-	}) : params.inFlightKey ?? `${resolved.path}:${params.req.socket?.remoteAddress ?? "unknown"}`;
-	const requestLifecycle = beginWebhookRequestPipelineOrReject({
-		req: params.req,
-		res: params.res,
-		allowMethods: params.allowMethods,
-		rateLimiter: params.rateLimiter,
-		rateLimitKey: params.rateLimitKey,
-		nowMs: params.nowMs,
-		requireJsonContentType: params.requireJsonContentType,
-		inFlightLimiter: params.inFlightLimiter,
-		inFlightKey,
-		inFlightLimitStatusCode: params.inFlightLimitStatusCode,
-		inFlightLimitMessage: params.inFlightLimitMessage
-	});
-	if (!requestLifecycle.ok) return true;
-	try {
-		await params.handle(resolved);
-		return true;
-	} finally {
-		requestLifecycle.release();
-	}
-}
-function updateMatchedWebhookTarget(matched, target) {
-	if (matched) return {
-		ok: false,
-		result: { kind: "ambiguous" }
-	};
-	return {
-		ok: true,
-		matched: target
-	};
-}
-function finalizeMatchedWebhookTarget(matched) {
-	if (!matched) return { kind: "none" };
-	return {
-		kind: "single",
-		target: matched
-	};
-}
-/** Match exactly one synchronous target or report whether resolution was empty or ambiguous. */
-function resolveSingleWebhookTarget(targets, isMatch) {
-	let matched;
-	for (const target of targets) {
-		if (!isMatch(target)) continue;
-		const updated = updateMatchedWebhookTarget(matched, target);
-		if (!updated.ok) return updated.result;
-		matched = updated.matched;
-	}
-	return finalizeMatchedWebhookTarget(matched);
-}
-/** Async variant of single-target resolution for auth checks that need I/O. */
-async function resolveSingleWebhookTargetAsync(targets, isMatch) {
-	let matched;
-	for (const target of targets) {
-		if (!await isMatch(target)) continue;
-		const updated = updateMatchedWebhookTarget(matched, target);
-		if (!updated.ok) return updated.result;
-		matched = updated.matched;
-	}
-	return finalizeMatchedWebhookTarget(matched);
-}
-/** Resolve an authorized target and send the standard unauthorized or ambiguous response on failure. */
-async function resolveWebhookTargetWithAuthOrReject(params) {
-	return resolveWebhookTargetMatchOrReject(params, await resolveSingleWebhookTargetAsync(params.targets, async (target) => Boolean(await params.isMatch(target))));
-}
-/** Synchronous variant of webhook auth resolution for cheap in-memory match checks. */
-function resolveWebhookTargetWithAuthOrRejectSync(params) {
-	return resolveWebhookTargetMatchOrReject(params, resolveSingleWebhookTarget(params.targets, params.isMatch));
-}
-function resolveWebhookTargetMatchOrReject(params, match) {
-	if (match.kind === "single") return match.target;
-	if (match.kind === "ambiguous") {
-		params.res.statusCode = params.ambiguousStatusCode ?? 401;
-		params.res.end(params.ambiguousMessage ?? "ambiguous webhook target");
-		return null;
-	}
-	params.res.statusCode = params.unauthorizedStatusCode ?? 401;
-	params.res.end(params.unauthorizedMessage ?? "unauthorized");
-	return null;
-}
-//#endregion
-export { resolveWebhookTargetWithAuthOrRejectSync as a, normalizeWebhookPath as c, resolveWebhookTargetWithAuthOrReject as i, resolveWebhookPath as l, registerWebhookTargetWithPluginRoute as n, resolveWebhookTargets as o, resolveSingleWebhookTarget as r, withResolvedWebhookRequestPipeline as s, registerWebhookTarget as t };

package/dist/webhook-targets-Di17rt8e.d.ts

@@ -1,106 +0,0 @@
-import { t as FixedWindowRateLimiter } from "./webhook-memory-guards-C5MrExwT.js";
-import { t as WebhookInFlightLimiter } from "./webhook-request-guards-CosLyl01.js";
-import { n as registerPluginHttpRoute } from "./http-registry-DYskWhOr.js";
-import { IncomingMessage, ServerResponse } from "node:http";
-
-//#region src/plugin-sdk/webhook-path.d.ts
-/** Normalize webhook paths into the canonical registry form used by route lookup. */
-declare function normalizeWebhookPath(raw: string): string;
-/** Resolve the effective webhook path from explicit path, URL, or default fallback. */
-declare function resolveWebhookPath(params: {
-  webhookPath?: string;
-  webhookUrl?: string;
-  defaultPath?: string | null;
-}): string | null;
-//#endregion
-//#region src/plugin-sdk/webhook-targets.d.ts
-type RegisteredWebhookTarget<T> = {
-  target: T;
-  unregister: () => void;
-};
-type RegisterWebhookTargetOptions<T extends {
-  path: string;
-}> = {
-  onFirstPathTarget?: (params: {
-    path: string;
-    target: T;
-  }) => void | (() => void);
-  onLastPathTargetRemoved?: (params: {
-    path: string;
-  }) => void;
-};
-type RegisterPluginHttpRouteParams = Parameters<typeof registerPluginHttpRoute>[0];
-type RegisterWebhookPluginRouteOptions = Omit<RegisterPluginHttpRouteParams, "path" | "fallbackPath">;
-/** Register a webhook target and lazily install the matching plugin HTTP route on first use. */
-declare function registerWebhookTargetWithPluginRoute<T extends {
-  path: string;
-}>(params: {
-  targetsByPath: Map<string, T[]>;
-  target: T;
-  route: RegisterWebhookPluginRouteOptions;
-  onLastPathTargetRemoved?: RegisterWebhookTargetOptions<T>["onLastPathTargetRemoved"];
-}): RegisteredWebhookTarget<T>;
-/** Add a normalized target to a path bucket and clean up route state when the last target leaves. */
-declare function registerWebhookTarget<T extends {
-  path: string;
-}>(targetsByPath: Map<string, T[]>, target: T, opts?: RegisterWebhookTargetOptions<T>): RegisteredWebhookTarget<T>;
-/** Resolve all registered webhook targets for the incoming request path. */
-declare function resolveWebhookTargets<T>(req: IncomingMessage, targetsByPath: Map<string, T[]>): {
-  path: string;
-  targets: T[];
-} | null;
-/** Run common webhook guards, then dispatch only when the request path resolves to live targets. */
-declare function withResolvedWebhookRequestPipeline<T>(params: {
-  req: IncomingMessage;
-  res: ServerResponse;
-  targetsByPath: Map<string, T[]>;
-  allowMethods?: readonly string[];
-  rateLimiter?: FixedWindowRateLimiter;
-  rateLimitKey?: string;
-  nowMs?: number;
-  requireJsonContentType?: boolean;
-  inFlightLimiter?: WebhookInFlightLimiter;
-  inFlightKey?: string | ((args: {
-    req: IncomingMessage;
-    path: string;
-    targets: T[];
-  }) => string);
-  inFlightLimitStatusCode?: number;
-  inFlightLimitMessage?: string;
-  handle: (args: {
-    path: string;
-    targets: T[];
-  }) => Promise<boolean | void> | boolean | void;
-}): Promise<boolean>;
-type WebhookTargetMatchResult<T> = {
-  kind: "none";
-} | {
-  kind: "single";
-  target: T;
-} | {
-  kind: "ambiguous";
-};
-/** Match exactly one synchronous target or report whether resolution was empty or ambiguous. */
-declare function resolveSingleWebhookTarget<T>(targets: readonly T[], isMatch: (target: T) => boolean): WebhookTargetMatchResult<T>;
-/** Resolve an authorized target and send the standard unauthorized or ambiguous response on failure. */
-declare function resolveWebhookTargetWithAuthOrReject<T>(params: {
-  targets: readonly T[];
-  res: ServerResponse;
-  isMatch: (target: T) => boolean | Promise<boolean>;
-  unauthorizedStatusCode?: number;
-  unauthorizedMessage?: string;
-  ambiguousStatusCode?: number;
-  ambiguousMessage?: string;
-}): Promise<T | null>;
-/** Synchronous variant of webhook auth resolution for cheap in-memory match checks. */
-declare function resolveWebhookTargetWithAuthOrRejectSync<T>(params: {
-  targets: readonly T[];
-  res: ServerResponse;
-  isMatch: (target: T) => boolean;
-  unauthorizedStatusCode?: number;
-  unauthorizedMessage?: string;
-  ambiguousStatusCode?: number;
-  ambiguousMessage?: string;
-}): T | null;
-//#endregion
-export { resolveSingleWebhookTarget as a, resolveWebhookTargets as c, resolveWebhookPath as d, registerWebhookTargetWithPluginRoute as i, withResolvedWebhookRequestPipeline as l, RegisterWebhookTargetOptions as n, resolveWebhookTargetWithAuthOrReject as o, registerWebhookTarget as r, resolveWebhookTargetWithAuthOrRejectSync as s, RegisterWebhookPluginRouteOptions as t, normalizeWebhookPath as u };