@sprinterai/runtime 0.4.1 → 0.6.0

package/dist/tool/zod-to-json-schema.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-to-json-schema.test.js","sourceRoot":"","sources":["../../src/tool/zod-to-json-schema.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,QAAQ;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvD,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACnD,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC3B,CAAC,CAAC;QAEH,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACxB;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC1C;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;YACnB,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;gBAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;aACjB,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACzB;oBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;oBAC5B,oBAAoB,EAAE,KAAK;iBAC5B;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACtC,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE;aACvC;SACF,CAAC,CAAC;QACH,uDAAuD;QACvD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/webhook/index.d.ts

@@ -0,0 +1,4 @@
+export { signPayload, verifySignature } from './webhook-signer.js';
+export { createWebhookDelivery } from './webhook-delivery.js';
+export type { WebhookDeliveryOptions, WebhookDeliveryEngine } from './webhook-delivery.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/webhook/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/webhook/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/webhook/index.js

@@ -0,0 +1,3 @@
+export { signPayload, verifySignature } from './webhook-signer.js';
+export { createWebhookDelivery } from './webhook-delivery.js';
+//# sourceMappingURL=index.js.map

package/dist/webhook/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/webhook/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/webhook/webhook-delivery.d.ts

@@ -0,0 +1,12 @@
+import type { WebhookDeliveryInput, WebhookDeliveryResult, WebhookEndpointStore } from '@sprinterai/core';
+export interface WebhookDeliveryOptions {
+    store: WebhookEndpointStore;
+    /** Timeout per delivery request in milliseconds. Default: 10000 */
+    timeoutMs?: number;
+}
+export interface WebhookDeliveryEngine {
+    deliver(input: WebhookDeliveryInput): Promise<WebhookDeliveryResult[]>;
+}
+/** Create a delivery engine that sends webhooks for events. */
+export declare function createWebhookDelivery(options: WebhookDeliveryOptions): WebhookDeliveryEngine;
+//# sourceMappingURL=webhook-delivery.d.ts.map

package/dist/webhook/webhook-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery.d.ts","sourceRoot":"","sources":["../../src/webhook/webhook-delivery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAM1B,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;CACxE;AAED,+DAA+D;AAC/D,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAgH5F"}

package/dist/webhook/webhook-delivery.js

@@ -0,0 +1,102 @@
+import { signPayload } from './webhook-signer.js';
+const DEFAULT_TIMEOUT_MS = 10_000;
+/** Create a delivery engine that sends webhooks for events. */
+export function createWebhookDelivery(options) {
+    const { store, timeoutMs = DEFAULT_TIMEOUT_MS } = options;
+    return {
+        async deliver(input) {
+            const endpoints = await store.listEndpoints(input.tenantId, {
+                eventType: input.eventType,
+                enabledOnly: true,
+            });
+            if (endpoints.length === 0) {
+                return [];
+            }
+            const results = await Promise.allSettled(endpoints.map(async (endpoint) => {
+                const body = JSON.stringify({
+                    event: input.eventType,
+                    timestamp: new Date().toISOString(),
+                    data: input.payload,
+                });
+                const signature = signPayload(body, endpoint.secret);
+                const controller = new AbortController();
+                const timer = setTimeout(() => controller.abort(), timeoutMs);
+                const start = Date.now();
+                try {
+                    const response = await fetch(endpoint.url, {
+                        method: 'POST',
+                        headers: {
+                            'Content-Type': 'application/json',
+                            'X-Webhook-Signature': signature,
+                            'X-Webhook-Event': input.eventType,
+                        },
+                        body,
+                        // AbortController.signal type varies across Node.js/DOM environments
+                        signal: controller.signal,
+                    });
+                    const durationMs = Date.now() - start;
+                    if (response.ok) {
+                        await store.updateEndpointStatus(endpoint.id, {
+                            last_triggered_at: new Date().toISOString(),
+                        });
+                        return {
+                            endpointId: endpoint.id,
+                            url: endpoint.url,
+                            success: true,
+                            statusCode: response.status,
+                            durationMs,
+                        };
+                    }
+                    await store.updateEndpointStatus(endpoint.id, {
+                        last_triggered_at: new Date().toISOString(),
+                        failure_count: endpoint.failure_count + 1,
+                    });
+                    return {
+                        endpointId: endpoint.id,
+                        url: endpoint.url,
+                        success: false,
+                        statusCode: response.status,
+                        error: `HTTP ${response.status}`,
+                        durationMs,
+                    };
+                }
+                catch (err) {
+                    const durationMs = Date.now() - start;
+                    await store.updateEndpointStatus(endpoint.id, {
+                        failure_count: endpoint.failure_count + 1,
+                    });
+                    const errorMessage = err instanceof Error && err.name === 'AbortError'
+                        ? `Timeout after ${timeoutMs}ms`
+                        : err instanceof Error
+                            ? err.message
+                            : 'Unknown error';
+                    return {
+                        endpointId: endpoint.id,
+                        url: endpoint.url,
+                        success: false,
+                        error: errorMessage,
+                        durationMs,
+                    };
+                }
+                finally {
+                    clearTimeout(timer);
+                }
+            }));
+            return results.map((result) => {
+                if (result.status === 'fulfilled') {
+                    return result.value;
+                }
+                // This path should not be reached since the inner function catches all errors,
+                // but handle it defensively.
+                return {
+                    endpointId: 'unknown',
+                    url: 'unknown',
+                    success: false,
+                    error: result.reason instanceof Error ? result.reason.message : 'Unknown error',
+                    durationMs: 0,
+                };
+            });
+        },
+    };
+}
+//# sourceMappingURL=webhook-delivery.js.map

package/dist/webhook/webhook-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery.js","sourceRoot":"","sources":["../../src/webhook/webhook-delivery.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAYlC,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC;IAE1D,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAA2B;YACvC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC1D,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YAEH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAkC,EAAE;gBAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;oBAC1B,KAAK,EAAE,KAAK,CAAC,SAAS;oBACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,IAAI,EAAE,KAAK,CAAC,OAAO;iBACpB,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAEzB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE;wBACzC,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE;4BACP,cAAc,EAAE,kBAAkB;4BAClC,qBAAqB,EAAE,SAAS;4BAChC,iBAAiB,EAAE,KAAK,CAAC,SAAS;yBACnC;wBACD,IAAI;wBACJ,qEAAqE;wBACrE,MAAM,EAAE,UAAU,CAAC,MAAqB;qBACzC,CAAC,CAAC;oBAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;oBAEtC,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;wBAChB,MAAM,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE;4BAC5C,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;yBAC5C,CAAC,CAAC;wBAEH,OAAO;4BACL,UAAU,EAAE,QAAQ,CAAC,EAAE;4BACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,OAAO,EAAE,IAAI;4BACb,UAAU,EAAE,QAAQ,CAAC,MAAM;4BAC3B,UAAU;yBACX,CAAC;oBACJ,CAAC;oBAED,MAAM,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE;wBAC5C,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBAC3C,aAAa,EAAE,QAAQ,CAAC,aAAa,GAAG,CAAC;qBAC1C,CAAC,CAAC;oBAEH,OAAO;wBACL,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;wBACjB,OAAO,EAAE,KAAK;wBACd,UAAU,EAAE,QAAQ,CAAC,MAAM;wBAC3B,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;wBAChC,UAAU;qBACX,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;oBAEtC,MAAM,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,EAAE;wBAC5C,aAAa,EAAE,QAAQ,CAAC,aAAa,GAAG,CAAC;qBAC1C,CAAC,CAAC;oBAEH,MAAM,YAAY,GAChB,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;wBAC/C,CAAC,CAAC,iBAAiB,SAAS,IAAI;wBAChC,CAAC,CAAC,GAAG,YAAY,KAAK;4BACpB,CAAC,CAAC,GAAG,CAAC,OAAO;4BACb,CAAC,CAAC,eAAe,CAAC;oBAExB,OAAO;wBACL,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;wBACjB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,YAAY;wBACnB,UAAU;qBACX,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YAEF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC5B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAClC,OAAO,MAAM,CAAC,KAAK,CAAC;gBACtB,CAAC;gBACD,+EAA+E;gBAC/E,6BAA6B;gBAC7B,OAAO;oBACL,UAAU,EAAE,SAAS;oBACrB,GAAG,EAAE,SAAS;oBACd,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;oBAC/E,UAAU,EAAE,CAAC;iBACd,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/webhook/webhook-delivery.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=webhook-delivery.test.d.ts.map

package/dist/webhook/webhook-delivery.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery.test.d.ts","sourceRoot":"","sources":["../../src/webhook/webhook-delivery.test.ts"],"names":[],"mappings":""}

package/dist/webhook/webhook-delivery.test.js

@@ -0,0 +1,284 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { createWebhookDelivery } from './webhook-delivery.js';
+import { signPayload } from './webhook-signer.js';
+function createMockEndpoint(overrides = {}) {
+    return {
+        id: 'wh_1',
+        tenant_id: 'tenant_1',
+        url: 'https://example.com/webhook',
+        secret: 'test-secret',
+        events: ['entity.created'],
+        enabled: true,
+        failure_count: 0,
+        last_triggered_at: null,
+        created_at: '2025-01-01T00:00:00Z',
+        ...overrides,
+    };
+}
+function createMockStore(endpoints = []) {
+    const statusUpdates = [];
+    return {
+        statusUpdates,
+        async listEndpoints(tenantId, options) {
+            return endpoints.filter((ep) => {
+                if (ep.tenant_id !== tenantId)
+                    return false;
+                if (options?.enabledOnly && !ep.enabled)
+                    return false;
+                if (options?.eventType && !ep.events.includes(options.eventType))
+                    return false;
+                return true;
+            });
+        },
+        async getEndpoint(id) {
+            return endpoints.find((ep) => ep.id === id) ?? null;
+        },
+        async updateEndpointStatus(id, updates) {
+            statusUpdates.push({ id, updates });
+        },
+    };
+}
+describe('webhook-delivery', () => {
+    let originalFetch;
+    beforeEach(() => {
+        originalFetch = globalThis.fetch;
+    });
+    afterEach(() => {
+        globalThis.fetch = originalFetch;
+        vi.restoreAllMocks();
+    });
+    it('returns empty array when no endpoints match', async () => {
+        const store = createMockStore([]);
+        const engine = createWebhookDelivery({ store });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: { entityId: 'e_1' },
+        });
+        expect(results).toEqual([]);
+    });
+    it('delivers to a single endpoint successfully', async () => {
+        const endpoint = createMockEndpoint();
+        const store = createMockStore([endpoint]);
+        globalThis.fetch = vi.fn().mockResolvedValue({
+            ok: true,
+            status: 200,
+        });
+        const engine = createWebhookDelivery({ store });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: { entityId: 'e_1' },
+        });
+        expect(results).toHaveLength(1);
+        expect(results[0].success).toBe(true);
+        expect(results[0].statusCode).toBe(200);
+        expect(results[0].endpointId).toBe('wh_1');
+        expect(results[0].url).toBe('https://example.com/webhook');
+        expect(results[0].durationMs).toBeGreaterThanOrEqual(0);
+    });
+    it('sends correct headers and signed body', async () => {
+        const endpoint = createMockEndpoint();
+        const store = createMockStore([endpoint]);
+        let capturedHeaders = {};
+        let capturedBody = '';
+        globalThis.fetch = vi.fn().mockImplementation((_url, init) => {
+            capturedHeaders = Object.fromEntries(Object.entries(init.headers));
+            capturedBody = init.body;
+            return Promise.resolve({ ok: true, status: 200 });
+        });
+        const engine = createWebhookDelivery({ store });
+        await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: { entityId: 'e_1' },
+        });
+        expect(capturedHeaders['Content-Type']).toBe('application/json');
+        expect(capturedHeaders['X-Webhook-Event']).toBe('entity.created');
+        expect(capturedHeaders['X-Webhook-Signature']).toMatch(/^sha256=[0-9a-f]{64}$/);
+        // Verify the signature is valid
+        const expectedSig = signPayload(capturedBody, 'test-secret');
+        expect(capturedHeaders['X-Webhook-Signature']).toBe(expectedSig);
+        // Verify body structure
+        const parsed = JSON.parse(capturedBody);
+        expect(parsed.event).toBe('entity.created');
+        expect(parsed.timestamp).toBeTruthy();
+        expect(parsed.data).toEqual({ entityId: 'e_1' });
+    });
+    it('handles HTTP error responses', async () => {
+        const endpoint = createMockEndpoint();
+        const store = createMockStore([endpoint]);
+        globalThis.fetch = vi.fn().mockResolvedValue({
+            ok: false,
+            status: 500,
+        });
+        const engine = createWebhookDelivery({ store });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: { entityId: 'e_1' },
+        });
+        expect(results).toHaveLength(1);
+        expect(results[0].success).toBe(false);
+        expect(results[0].statusCode).toBe(500);
+        expect(results[0].error).toBe('HTTP 500');
+    });
+    it('handles network errors', async () => {
+        const endpoint = createMockEndpoint();
+        const store = createMockStore([endpoint]);
+        globalThis.fetch = vi.fn().mockRejectedValue(new Error('ECONNREFUSED'));
+        const engine = createWebhookDelivery({ store });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: { entityId: 'e_1' },
+        });
+        expect(results).toHaveLength(1);
+        expect(results[0].success).toBe(false);
+        expect(results[0].error).toBe('ECONNREFUSED');
+        expect(results[0].statusCode).toBeUndefined();
+    });
+    it('handles timeout via AbortController', async () => {
+        const endpoint = createMockEndpoint();
+        const store = createMockStore([endpoint]);
+        globalThis.fetch = vi.fn().mockImplementation((_url, init) => {
+            return new Promise((_resolve, reject) => {
+                init.signal?.addEventListener('abort', () => {
+                    const err = new Error('The operation was aborted');
+                    err.name = 'AbortError';
+                    reject(err);
+                });
+            });
+        });
+        const engine = createWebhookDelivery({ store, timeoutMs: 50 });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: { entityId: 'e_1' },
+        });
+        expect(results).toHaveLength(1);
+        expect(results[0].success).toBe(false);
+        expect(results[0].error).toBe('Timeout after 50ms');
+    });
+    it('delivers to multiple endpoints concurrently', async () => {
+        const endpoints = [
+            createMockEndpoint({ id: 'wh_1', url: 'https://a.example.com/hook' }),
+            createMockEndpoint({ id: 'wh_2', url: 'https://b.example.com/hook' }),
+            createMockEndpoint({ id: 'wh_3', url: 'https://c.example.com/hook' }),
+        ];
+        const store = createMockStore(endpoints);
+        globalThis.fetch = vi.fn().mockResolvedValue({ ok: true, status: 200 });
+        const engine = createWebhookDelivery({ store });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: { entityId: 'e_1' },
+        });
+        expect(results).toHaveLength(3);
+        expect(results.every((r) => r.success)).toBe(true);
+        expect(globalThis.fetch).toHaveBeenCalledTimes(3);
+    });
+    it('updates endpoint status on success', async () => {
+        const endpoint = createMockEndpoint();
+        const store = createMockStore([endpoint]);
+        globalThis.fetch = vi.fn().mockResolvedValue({ ok: true, status: 200 });
+        const engine = createWebhookDelivery({ store });
+        await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: {},
+        });
+        expect(store.statusUpdates).toHaveLength(1);
+        expect(store.statusUpdates[0].id).toBe('wh_1');
+        expect(store.statusUpdates[0].updates.last_triggered_at).toBeTruthy();
+        expect(store.statusUpdates[0].updates.failure_count).toBeUndefined();
+    });
+    it('increments failure_count on HTTP error', async () => {
+        const endpoint = createMockEndpoint({ failure_count: 2 });
+        const store = createMockStore([endpoint]);
+        globalThis.fetch = vi.fn().mockResolvedValue({ ok: false, status: 502 });
+        const engine = createWebhookDelivery({ store });
+        await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: {},
+        });
+        expect(store.statusUpdates).toHaveLength(1);
+        expect(store.statusUpdates[0].updates.failure_count).toBe(3);
+        expect(store.statusUpdates[0].updates.last_triggered_at).toBeTruthy();
+    });
+    it('increments failure_count on network error', async () => {
+        const endpoint = createMockEndpoint({ failure_count: 5 });
+        const store = createMockStore([endpoint]);
+        globalThis.fetch = vi.fn().mockRejectedValue(new Error('DNS lookup failed'));
+        const engine = createWebhookDelivery({ store });
+        await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: {},
+        });
+        expect(store.statusUpdates).toHaveLength(1);
+        expect(store.statusUpdates[0].updates.failure_count).toBe(6);
+    });
+    it('filters endpoints by tenant and event type', async () => {
+        const endpoints = [
+            createMockEndpoint({ id: 'wh_1', tenant_id: 'tenant_1', events: ['entity.created'] }),
+            createMockEndpoint({ id: 'wh_2', tenant_id: 'tenant_1', events: ['entity.deleted'] }),
+            createMockEndpoint({ id: 'wh_3', tenant_id: 'tenant_2', events: ['entity.created'] }),
+        ];
+        const store = createMockStore(endpoints);
+        globalThis.fetch = vi.fn().mockResolvedValue({ ok: true, status: 200 });
+        const engine = createWebhookDelivery({ store });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: {},
+        });
+        // Only wh_1 matches tenant_1 + entity.created
+        expect(results).toHaveLength(1);
+        expect(results[0].endpointId).toBe('wh_1');
+    });
+    it('skips disabled endpoints', async () => {
+        const endpoints = [
+            createMockEndpoint({ id: 'wh_1', enabled: true }),
+            createMockEndpoint({ id: 'wh_2', enabled: false }),
+        ];
+        const store = createMockStore(endpoints);
+        globalThis.fetch = vi.fn().mockResolvedValue({ ok: true, status: 200 });
+        const engine = createWebhookDelivery({ store });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: {},
+        });
+        expect(results).toHaveLength(1);
+        expect(results[0].endpointId).toBe('wh_1');
+    });
+    it('handles mixed success and failure across endpoints', async () => {
+        const endpoints = [
+            createMockEndpoint({ id: 'wh_1', url: 'https://good.example.com/hook' }),
+            createMockEndpoint({ id: 'wh_2', url: 'https://bad.example.com/hook' }),
+        ];
+        const store = createMockStore(endpoints);
+        let callCount = 0;
+        globalThis.fetch = vi.fn().mockImplementation(() => {
+            callCount++;
+            if (callCount === 1) {
+                return Promise.resolve({ ok: true, status: 200 });
+            }
+            return Promise.resolve({ ok: false, status: 503 });
+        });
+        const engine = createWebhookDelivery({ store });
+        const results = await engine.deliver({
+            tenantId: 'tenant_1',
+            eventType: 'entity.created',
+            payload: {},
+        });
+        expect(results).toHaveLength(2);
+        const successes = results.filter((r) => r.success);
+        const failures = results.filter((r) => !r.success);
+        expect(successes).toHaveLength(1);
+        expect(failures).toHaveLength(1);
+    });
+});
+//# sourceMappingURL=webhook-delivery.test.js.map

package/dist/webhook/webhook-delivery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-delivery.test.js","sourceRoot":"","sources":["../../src/webhook/webhook-delivery.test.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,SAAS,kBAAkB,CAAC,YAAsC,EAAE;IAClE,OAAO;QACL,EAAE,EAAE,MAAM;QACV,SAAS,EAAE,UAAU;QACrB,GAAG,EAAE,6BAA6B;QAClC,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,CAAC,gBAAgB,CAAC;QAC1B,OAAO,EAAE,IAAI;QACb,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,IAAI;QACvB,UAAU,EAAE,sBAAsB;QAClC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,YAA+B,EAAE;IAMxD,MAAM,aAAa,GAGd,EAAE,CAAC;IAER,OAAO;QACL,aAAa;QACb,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO;YACnC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC7B,IAAI,EAAE,CAAC,SAAS,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC5C,IAAI,OAAO,EAAE,WAAW,IAAI,CAAC,EAAE,CAAC,OAAO;oBAAE,OAAO,KAAK,CAAC;gBACtD,IAAI,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC/E,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,EAAE;YAClB,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,oBAAoB,CAAC,EAAE,EAAE,OAAO;YACpC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,aAAsC,CAAC;IAE3C,UAAU,CAAC,GAAG,EAAE;QACd,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,UAAU,CAAC,KAAK,GAAG,aAAa,CAAC;QACjC,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1C,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1C,IAAI,eAAe,GAA2B,EAAE,CAAC;QACjD,IAAI,YAAY,GAAG,EAAE,CAAC;QAEtB,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,IAAiB,EAAE,EAAE;YAChF,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAiC,CAAC,CAAC,CAAC;YAC7F,YAAY,GAAG,IAAI,CAAC,IAAc,CAAC;YACnC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjE,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClE,MAAM,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAEhF,gCAAgC;QAChC,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEjE,wBAAwB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAIrC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1C,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC3C,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1C,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1C,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,IAAiB,EAAE,EAAE;YAChF,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACtC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;oBAC1C,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBACnD,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,SAAS,GAAG;YAChB,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,4BAA4B,EAAE,CAAC;YACrE,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,4BAA4B,EAAE,CAAC;YACrE,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,4BAA4B,EAAE,CAAC;SACtE,CAAC;QACF,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1C,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,UAAU,EAAE,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1C,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,UAAU,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1C,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAE7E,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,SAAS,GAAG;YAChB,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrF,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrF,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;SACtF,CAAC;QACF,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,8CAA8C;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,SAAS,GAAG;YAChB,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACjD,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SACnD,CAAC;QACF,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,SAAS,GAAG;YAChB,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,+BAA+B,EAAE,CAAC;YACxE,kBAAkB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,8BAA8B,EAAE,CAAC;SACxE,CAAC;QACF,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAEzC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YACjD,SAAS,EAAE,CAAC;YACZ,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACnC,QAAQ,EAAE,UAAU;YACpB,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE;SACZ,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/webhook/webhook-signer.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Sign a payload string with HMAC-SHA256.
+ *
+ * Returns a hex-encoded signature prefixed with `sha256=`.
+ */
+export declare function signPayload(payload: string, secret: string): string;
+/**
+ * Verify a webhook signature using constant-time comparison.
+ *
+ * Prevents timing attacks by using crypto.timingSafeEqual.
+ * Returns false for malformed or mismatched signatures.
+ */
+export declare function verifySignature(payload: string, signature: string, secret: string): boolean;
+//# sourceMappingURL=webhook-signer.d.ts.map

package/dist/webhook/webhook-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-signer.d.ts","sourceRoot":"","sources":["../../src/webhook/webhook-signer.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAInE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAa3F"}

package/dist/webhook/webhook-signer.js

@@ -0,0 +1,31 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * Sign a payload string with HMAC-SHA256.
+ *
+ * Returns a hex-encoded signature prefixed with `sha256=`.
+ */
+export function signPayload(payload, secret) {
+    const hmac = createHmac('sha256', secret);
+    hmac.update(payload);
+    return `sha256=${hmac.digest('hex')}`;
+}
+/**
+ * Verify a webhook signature using constant-time comparison.
+ *
+ * Prevents timing attacks by using crypto.timingSafeEqual.
+ * Returns false for malformed or mismatched signatures.
+ */
+export function verifySignature(payload, signature, secret) {
+    const expected = signPayload(payload, secret);
+    // Both must be the same length for timingSafeEqual
+    if (signature.length !== expected.length) {
+        return false;
+    }
+    try {
+        return timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=webhook-signer.js.map

package/dist/webhook/webhook-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-signer.js","sourceRoot":"","sources":["../../src/webhook/webhook-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,MAAc;IACzD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IAChF,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAE9C,mDAAmD;IACnD,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/webhook/webhook-signer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=webhook-signer.test.d.ts.map

package/dist/webhook/webhook-signer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-signer.test.d.ts","sourceRoot":"","sources":["../../src/webhook/webhook-signer.test.ts"],"names":[],"mappings":""}

package/dist/webhook/webhook-signer.test.js

@@ -0,0 +1,74 @@
+import { createHmac } from 'node:crypto';
+import { describe, it, expect } from 'vitest';
+import { signPayload, verifySignature } from './webhook-signer.js';
+describe('webhook-signer', () => {
+    const secret = 'test-webhook-secret-key';
+    const payload = JSON.stringify({ event: 'entity.created', data: { id: '123' } });
+    describe('signPayload', () => {
+        it('produces a sha256-prefixed hex signature', () => {
+            const sig = signPayload(payload, secret);
+            expect(sig).toMatch(/^sha256=[0-9a-f]{64}$/);
+        });
+        it('matches manual HMAC-SHA256 computation', () => {
+            const sig = signPayload(payload, secret);
+            const expected = createHmac('sha256', secret).update(payload).digest('hex');
+            expect(sig).toBe(`sha256=${expected}`);
+        });
+        it('produces deterministic output for same input', () => {
+            const sig1 = signPayload(payload, secret);
+            const sig2 = signPayload(payload, secret);
+            expect(sig1).toBe(sig2);
+        });
+        it('produces different signatures for different payloads', () => {
+            const sig1 = signPayload('payload-a', secret);
+            const sig2 = signPayload('payload-b', secret);
+            expect(sig1).not.toBe(sig2);
+        });
+        it('produces different signatures for different secrets', () => {
+            const sig1 = signPayload(payload, 'secret-a');
+            const sig2 = signPayload(payload, 'secret-b');
+            expect(sig1).not.toBe(sig2);
+        });
+        it('handles empty payload', () => {
+            const sig = signPayload('', secret);
+            expect(sig).toMatch(/^sha256=[0-9a-f]{64}$/);
+        });
+        it('handles empty secret', () => {
+            const sig = signPayload(payload, '');
+            expect(sig).toMatch(/^sha256=[0-9a-f]{64}$/);
+        });
+    });
+    describe('verifySignature', () => {
+        it('returns true for a valid signature', () => {
+            const sig = signPayload(payload, secret);
+            expect(verifySignature(payload, sig, secret)).toBe(true);
+        });
+        it('returns false for a wrong signature', () => {
+            expect(verifySignature(payload, 'sha256=0000000000000000000000000000000000000000000000000000000000000000', secret)).toBe(false);
+        });
+        it('returns false for a completely malformed signature', () => {
+            expect(verifySignature(payload, 'not-a-real-signature', secret)).toBe(false);
+        });
+        it('returns false for wrong secret', () => {
+            const sig = signPayload(payload, secret);
+            expect(verifySignature(payload, sig, 'wrong-secret')).toBe(false);
+        });
+        it('returns false for tampered payload', () => {
+            const sig = signPayload(payload, secret);
+            expect(verifySignature(payload + 'tampered', sig, secret)).toBe(false);
+        });
+        it('returns false for empty signature', () => {
+            expect(verifySignature(payload, '', secret)).toBe(false);
+        });
+        it('returns false for signature with wrong length', () => {
+            expect(verifySignature(payload, 'sha256=abc', secret)).toBe(false);
+        });
+        it('is consistent across multiple verifications', () => {
+            const sig = signPayload(payload, secret);
+            for (let i = 0; i < 10; i++) {
+                expect(verifySignature(payload, sig, secret)).toBe(true);
+            }
+        });
+    });
+});
+//# sourceMappingURL=webhook-signer.test.js.map

package/dist/webhook/webhook-signer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-signer.test.js","sourceRoot":"","sources":["../../src/webhook/webhook-signer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEhE,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,MAAM,GAAG,yBAAyB,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAEjF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEzC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE5E,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE1C,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAE9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAE9C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;YAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAEpC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAErC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEzC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,CACJ,eAAe,CACb,OAAO,EACP,yEAAyE,EACzE,MAAM,CACP,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEzC,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEzC,MAAM,CAAC,eAAe,CAAC,OAAO,GAAG,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/workflow/compile.js

@@ -100,7 +100,10 @@ function sortFieldsByDependency(fields) {
             if (!fieldSet.has(dep))
                 continue;
             inDegree.set(name, (inDegree.get(name) ?? 0) + 1);
-            dependents.get(dep).push(name);
+            const depList = dependents.get(dep);
+            if (depList) {
+                depList.push(name);
+            }
         }
     }
     const layers = [];