@trigger.dev/core 0.0.0-python-preview-20250226140121 → 0.0.0-rc-4-8-0-20261021151928

package/dist/commonjs/v3/schemas/webhookConfig.js

@@ -0,0 +1,290 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookVerifierResult = exports.WebhookDeliveryTargetResult = exports.WebhookDeliveryTargetStatus = exports.WebhookRoutingTarget = exports.WebhookVerifierArtifact = exports.WebhookGetHandshakeConfig = exports.WebhookResponseConfig = exports.WebhookHandshakeConfig = exports.WebhookVerifierConfig = exports.WebhookUrlSecretConfig = exports.WebhookSharedSecretConfig = exports.WebhookAsymmetricConfig = exports.WebhookHmacConfig = exports.WebhookFormPayload = exports.WebhookSigningString = exports.WebhookSecretTransform = exports.WebhookTimestampConfig = exports.WebhookSignatureExtraction = exports.WebhookValueSource = exports.WebhookIdempotencyField = exports.WebhookSecretProvisioning = void 0;
+const v4_1 = require("zod/v4");
+const zod_js_1 = require("../utils/zod.js");
+// Ingress webhook verification config. Kept in a LEAF module (imports only `z` and
+// the Zod compatibility helper) so it can be consumed by resources.ts / schemas.ts without dragging in the alert-webhook
+// `Webhook` union in webhooks.ts, which imports api.js (RunStatus). resources.ts is
+// imported by api.ts, so a resources -> webhooks -> api edge would be a module-init cycle.
+// Who supplies the signing secret / key, driving the dashboard Connect UI (NOT a provider-name
+// switch — it's data on the source). "provider": the provider generates it and you paste it in
+// (Stripe, Slack, Svix). "integrator": you choose it, so the dashboard can generate-and-reveal one
+// for you to paste into the provider (GitHub, GitLab). "either": offer both.
+exports.WebhookSecretProvisioning = v4_1.z.enum(["provider", "integrator", "either"]);
+// Q9: the provider delivery id can live in a header (GitHub x-github-delivery) or the body (Stripe id).
+exports.WebhookIdempotencyField = v4_1.z.object({
+    from: v4_1.z.enum(["header", "body"]),
+    name: v4_1.z.string(),
+});
+// ── Shared, data-only verification primitives (no per-provider code) ──
+// Where a scalar value comes from. Used for the timestamp and for signing-string template vars.
+// "signatureField" reads a field parsed out of the signature header (e.g. Stripe `t`).
+// "url" is the inbound request URL (e.g. Square signs `{url}{body}`). "constant" is a literal.
+/**
+ * A dotted path into the parsed JSON body. Segments that name the prototype chain are refused: the
+ * path is author-supplied and is followed on the server, both to read a value and, for the console's
+ * test-send, to write a fresh timestamp.
+ */
+const WebhookBodyPath = v4_1.z
+    .string()
+    .min(1)
+    .refine((path) => path
+    .split(".")
+    .every((segment) => segment !== "" && !["__proto__", "constructor", "prototype"].includes(segment)), {
+    message: "body path segments must be non-empty and must not name __proto__, constructor or prototype",
+});
+exports.WebhookValueSource = (0, zod_js_1.discriminatedUnion)("from", [
+    v4_1.z.object({
+        from: v4_1.z.literal("header"),
+        name: v4_1.z.string(),
+        /**
+         * Headers to read, in order, when `name` is missing or empty, e.g. Metronome's `X-Metronome-Date`
+         * falling back to `Date`. A signer still writes the value under `name`.
+         */
+        fallback: v4_1.z.array(v4_1.z.string()).optional(),
+    }),
+    v4_1.z.object({ from: v4_1.z.literal("signatureField"), field: v4_1.z.string() }),
+    v4_1.z.object({ from: v4_1.z.literal("body"), path: WebhookBodyPath }),
+    v4_1.z.object({ from: v4_1.z.literal("url") }),
+    v4_1.z.object({ from: v4_1.z.literal("constant"), value: v4_1.z.string() }),
+]);
+// How to pull the signature value(s) out of one header. All fields optional → the whole
+// header value IS the signature (Shopify, Linear). With fieldSeparator+field we select
+// named element(s): GitHub `sha256=<hex>`, Stripe `t=…,v1=…`, Svix `v1,<b64> v1,<b64>`.
+// Field extraction is multi-valued (rotation / signature lists) → the verifier accepts ANY match.
+exports.WebhookSignatureExtraction = v4_1.z.object({
+    itemSeparator: v4_1.z.string().optional(), // split header into elements: Stripe "," · Svix " "
+    fieldSeparator: v4_1.z.string().optional(), // split element into name<sep>value: "=" · Svix ","
+    field: v4_1.z.string().optional(), // element name carrying the signature: "v1" | "sha256" | "v0"
+    trim: v4_1.z.boolean().optional(), // trim each element (WorkOS "t=…, v1=…")
+});
+// Replay protection + a `{timestamp}` template var. Source is a header, an in-signature field
+// (Stripe `t`), or a body field (Linear `webhookTimestamp`). Unit defaults to seconds.
+exports.WebhookTimestampConfig = v4_1.z.object({
+    source: exports.WebhookValueSource,
+    unit: v4_1.z.enum(["seconds", "milliseconds"]).optional(),
+    /**
+     * How the value is written. `unix` (the default) is a number in `unit`; `iso8601` is an ISO 8601
+     * date-time (Plain's `webhookDeliveryAttemptTimestamp`); `http-date` is an RFC 1123 date
+     * (Metronome's `X-Metronome-Date`). `unit` only applies to `unix`.
+     */
+    format: v4_1.z.enum(["unix", "iso8601", "http-date"]).optional(),
+    toleranceSeconds: v4_1.z.number().optional(),
+});
+// The stored credential transform. Most providers use the secret as-is (utf8). Svix-family
+// secrets are `whsec_<base64>` and must be base64-decoded after stripping the prefix.
+exports.WebhookSecretTransform = v4_1.z.object({
+    encoding: v4_1.z.enum(["utf8", "base64"]).optional(),
+    stripPrefix: v4_1.z.string().optional(),
+});
+// The bytes that get signed. "raw" = the body verbatim. Otherwise a template with `{body}`,
+// `{timestamp}` (auto-bound) and any named `vars` (e.g. `{id}` for Svix, `{url}` for Square).
+exports.WebhookSigningString = v4_1.z.union([
+    v4_1.z.literal("raw"),
+    v4_1.z.object({
+        template: v4_1.z.string(),
+        vars: v4_1.z.record(v4_1.z.string(), exports.WebhookValueSource).optional(),
+    }),
+]);
+/**
+ * Body-parsing hint. Some providers send an event as JSON but a SECOND kind of callback (e.g. Slack
+ * interactivity) as `application/x-www-form-urlencoded` with the JSON in a single field (Slack: `payload`).
+ * When JSON parsing fails, the engine form-decodes and JSON-parses `field`'s value. The signature is over
+ * the raw body either way, so verification is unaffected. Generic (a field name), no provider code in the engine.
+ */
+exports.WebhookFormPayload = v4_1.z.object({
+    field: v4_1.z.string(),
+});
+/**
+ * An HTTP date (`Thu, 15 Oct 2026 12:00:00 GMT`) holds letters, digits, commas, spaces and colons, so
+ * an item separator made only of those characters can split one apart. Refuse that pairing for a
+ * timestamp read from a signature header field; any other separator (`;`) reads the date intact.
+ */
+function httpDateFitsSignatureHeader(config) {
+    const separator = config.signature?.itemSeparator;
+    if (config.timestamp?.format !== "http-date")
+        return true;
+    if (config.timestamp.source.from !== "signatureField" || !separator)
+        return true;
+    return !/^[A-Za-z0-9, :]+$/.test(separator);
+}
+const HTTP_DATE_SEPARATOR_ERROR = {
+    message: "an http-date timestamp in a signature header field needs an item separator that can't appear in a date (for example ';')",
+    path: ["timestamp", "format"],
+};
+exports.WebhookHmacConfig = v4_1.z
+    .object({
+    scheme: v4_1.z.literal("hmac"),
+    algorithm: v4_1.z.enum(["sha256", "sha1"]),
+    encoding: v4_1.z.enum(["hex", "base64"]), // explicit, no auto-detect (design decision 3)
+    signatureHeader: v4_1.z.string(),
+    /**
+     * More headers that can carry a signature over the same signing string, parsed like
+     * `signatureHeader` and matched as alternatives (e.g. Hookdeck's `x-hookdeck-signature-2`,
+     * signed with the previous secret during a rotation). `signatureHeader` is still required.
+     */
+    additionalSignatureHeaders: v4_1.z.array(v4_1.z.string()).max(4).optional(),
+    signature: exports.WebhookSignatureExtraction.optional(), // omit = bare whole-header value
+    timestamp: exports.WebhookTimestampConfig.optional(),
+    signingString: exports.WebhookSigningString,
+    secret: exports.WebhookSecretTransform.optional(), // omit = utf8, no prefix strip
+    idempotencyField: exports.WebhookIdempotencyField.optional(),
+    formPayload: exports.WebhookFormPayload.optional(),
+})
+    .refine(httpDateFitsSignatureHeader, HTTP_DATE_SEPARATOR_ERROR);
+// Asymmetric (public-key) signatures: the provider signs with a private key, we verify with
+// their public key. Same parsing/template primitives as HMAC; only the final verify differs.
+// Covers Discord (ed25519), SendGrid (ecdsa-p256), RSA providers. Dynamic key fetch (PayPal
+// cert URL / JWKS) is out of scope → the custom-bundle escape hatch.
+exports.WebhookAsymmetricConfig = v4_1.z
+    .object({
+    scheme: v4_1.z.literal("asymmetric"),
+    algorithm: v4_1.z.enum(["ed25519", "ecdsa-p256", "rsa-sha256"]),
+    encoding: v4_1.z.enum(["hex", "base64"]), // how the signature value is encoded
+    signatureHeader: v4_1.z.string(),
+    signature: exports.WebhookSignatureExtraction.optional(),
+    timestamp: exports.WebhookTimestampConfig.optional(),
+    signingString: exports.WebhookSigningString,
+    // How the stored public key is encoded: a PEM string, base64 of DER SPKI (SendGrid),
+    // or raw key bytes (ed25519 raw, Discord). Defaults to "pem".
+    publicKeyEncoding: v4_1.z.enum(["pem", "spki-der-base64", "raw-hex", "raw-base64"]).optional(),
+    idempotencyField: exports.WebhookIdempotencyField.optional(),
+})
+    .refine(httpDateFitsSignatureHeader, HTTP_DATE_SEPARATOR_ERROR);
+exports.WebhookSharedSecretConfig = v4_1.z.object({
+    scheme: v4_1.z.literal("shared-secret"),
+    placement: v4_1.z.enum(["header", "bearer", "basic", "body"]),
+    fieldName: v4_1.z.string().optional(),
+    idempotencyField: exports.WebhookIdempotencyField.optional(),
+});
+exports.WebhookUrlSecretConfig = v4_1.z.object({
+    scheme: v4_1.z.literal("url-secret"),
+    placement: v4_1.z.enum(["query", "path"]),
+    paramName: v4_1.z.string(),
+    idempotencyField: exports.WebhookIdempotencyField.optional(),
+});
+exports.WebhookVerifierConfig = (0, zod_js_1.discriminatedUnion)("scheme", [
+    exports.WebhookHmacConfig,
+    exports.WebhookSharedSecretConfig,
+    exports.WebhookUrlSecretConfig,
+    exports.WebhookAsymmetricConfig,
+]);
+// ── Provider handshake: a signed request that must get a synchronous echo, not a recorded/routed
+// delivery (Slack url_verification, Discord PING). Generic + data-only: if the verified body's
+// `matchPath` equals `matchValue`, ingest responds 200 with the body's `respondPath` value. ──
+exports.WebhookHandshakeConfig = v4_1.z.object({
+    /** Dotted path into the body, e.g. "type". Compared as a string, so a numeric 0 matches "0". */
+    matchPath: v4_1.z.string(),
+    /** e.g. "url_verification", or "0" for a numeric PING type. */
+    matchValue: v4_1.z.string(),
+    /** Dotted path whose value is echoed as the text body, e.g. "challenge". Unset: empty body. */
+    respondPath: v4_1.z.string().optional(),
+    /** Status of the answer. Default 200; 204 always answers without a body. */
+    respondStatus: v4_1.z.union([v4_1.z.literal(200), v4_1.z.literal(204)]).optional(),
+});
+/**
+ * The status codes the ingress answers a provider with, for providers that require something other
+ * than 200 JSON on success and 400 on a bad signature. Data-only: the ingress reads it off the
+ * artifact and never knows which provider asked for it.
+ */
+exports.WebhookResponseConfig = v4_1.z.object({
+    /** Status for a recorded or deduplicated delivery. 204 sends no body. Default 200 with a JSON body. */
+    acceptedStatus: v4_1.z.union([v4_1.z.literal(200), v4_1.z.literal(202), v4_1.z.literal(204)]).optional(),
+    /**
+     * Body for a recorded or deduplicated delivery. `"empty"` answers with no body, for providers
+     * that show a non-empty reply to the user (Slack slash commands). Default `"json"`.
+     */
+    acceptedBody: v4_1.z.enum(["json", "empty"]).optional(),
+    /** Status when signature verification fails. Default 400. */
+    rejectedStatus: v4_1.z.union([v4_1.z.literal(400), v4_1.z.literal(401), v4_1.z.literal(403)]).optional(),
+});
+/**
+ * A provider's GET verification of the endpoint URL (Meta's `hub.*` flow): the ingress answers a GET
+ * whose `tokenParam` equals the endpoint's dedicated verify token by echoing `challengeParam` as text, and
+ * records nothing. Data-only and provider-neutral; the query parameter names are the whole contract.
+ */
+exports.WebhookGetHandshakeConfig = v4_1.z
+    .object({
+    /** Query parameter that must equal `matchValue` for the request to count, e.g. "hub.mode". */
+    matchParam: v4_1.z.string().min(1).optional(),
+    /** e.g. "subscribe". Required when matchParam is set. */
+    matchValue: v4_1.z.string().optional(),
+    /** Query parameter carrying the endpoint's dedicated verify token, not its signing secret. */
+    tokenParam: v4_1.z.string().min(1),
+    /** Query parameter whose value is echoed as the plain-text 200 body. */
+    challengeParam: v4_1.z.string().min(1),
+})
+    .refine((config) => (config.matchParam === undefined) === (config.matchValue === undefined), {
+    message: "matchParam and matchValue must be supplied together",
+    path: ["matchParam"],
+});
+// ── Verifier artifact: data-only tagged union stored on WebhookEndpoint.verifierArtifact ──
+exports.WebhookVerifierArtifact = (0, zod_js_1.discriminatedUnion)("kind", [
+    v4_1.z.object({
+        kind: v4_1.z.literal("config"),
+        config: exports.WebhookVerifierConfig,
+        handshake: exports.WebhookHandshakeConfig.optional(),
+        getHandshake: exports.WebhookGetHandshakeConfig.optional(),
+        response: exports.WebhookResponseConfig.optional(),
+    }),
+    v4_1.z.object({
+        kind: v4_1.z.literal("preset"),
+        preset: v4_1.z.string(),
+        config: exports.WebhookVerifierConfig,
+        handshake: exports.WebhookHandshakeConfig.optional(),
+        getHandshake: exports.WebhookGetHandshakeConfig.optional(),
+        response: exports.WebhookResponseConfig.optional(),
+    }),
+    v4_1.z.object({ kind: v4_1.z.literal("bundle"), bundleUrl: v4_1.z.string(), hash: v4_1.z.string() }), // P3 seam
+]);
+/**
+ * One subscriber of a shared endpoint. `id` is the descriptor that declared it (the `webhook()` id, or
+ * `agentId:eventId` / `agentId:connectorId` for a session subscriber) and is unique within the endpoint.
+ * `filter` is this subscriber's own delivery filter; the session variant's `startOn` separately gates
+ * session creation.
+ */
+exports.WebhookRoutingTarget = (0, zod_js_1.discriminatedUnion)("type", [
+    v4_1.z.object({
+        type: v4_1.z.literal("task"),
+        id: v4_1.z.string().min(1),
+        taskId: v4_1.z.string(),
+        filter: v4_1.z.string().optional(),
+    }),
+    v4_1.z.object({
+        type: v4_1.z.literal("session"),
+        id: v4_1.z.string().min(1),
+        taskIdentifier: v4_1.z.string(),
+        keyTemplate: v4_1.z.string(),
+        deliverAs: v4_1.z.enum(["action", "message"]),
+        actionType: v4_1.z.string().optional(),
+        connectorId: v4_1.z.string().optional(),
+        triggerConfigTemplate: v4_1.z.record(v4_1.z.string(), v4_1.z.unknown()).optional(),
+        startOn: v4_1.z.string().optional(),
+        filter: v4_1.z.string().optional(),
+    }),
+]);
+exports.WebhookDeliveryTargetStatus = v4_1.z.enum(["PENDING", "FILTERED", "SUCCEEDED", "FAILED"]);
+/** One target's outcome for one delivery, stored on `WebhookDelivery.targets`. */
+exports.WebhookDeliveryTargetResult = v4_1.z.object({
+    id: v4_1.z.string(),
+    type: v4_1.z.enum(["task", "session", "waiter"]),
+    status: exports.WebhookDeliveryTargetStatus,
+    reason: v4_1.z.string().optional(),
+    runId: v4_1.z.string().optional(),
+    error: v4_1.z.string().optional(),
+    /** For a session target: how it was delivered, kept so the result reads the same after a redeploy. */
+    deliverAs: v4_1.z.enum(["action", "message"]).optional(),
+    /** On a replay's target: the task the replay was authorized to reach. If the subscriber now points elsewhere, it fails instead of running. */
+    taskId: v4_1.z.string().optional(),
+    /** On the delivery's one waiter entry: how many waiters it matched, resumed and failed to resume. */
+    waiters: v4_1.z.object({ matched: v4_1.z.number(), resumed: v4_1.z.number(), failed: v4_1.z.number() }).optional(),
+});
+// ── Data-only verdict the engine verifier returns (M5 consumes) ──
+exports.WebhookVerifierResult = v4_1.z.object({
+    ok: v4_1.z.boolean(),
+    idempotencyKey: v4_1.z.string(),
+    parsedEvent: v4_1.z.unknown().optional(),
+    error: v4_1.z.string().optional(),
+});
+//# sourceMappingURL=webhookConfig.js.map

package/dist/commonjs/v3/schemas/webhookConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookConfig.js","sourceRoot":"","sources":["../../../../src/v3/schemas/webhookConfig.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAC3B,4CAAqD;AAGrD,mFAAmF;AACnF,yHAAyH;AACzH,oFAAoF;AACpF,2FAA2F;AAE3F,+FAA+F;AAC/F,+FAA+F;AAC/F,mGAAmG;AACnG,6EAA6E;AAChE,QAAA,yBAAyB,GAAG,MAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGtF,wGAAwG;AAC3F,QAAA,uBAAuB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH,yEAAyE;AAEzE,gGAAgG;AAChG,uFAAuF;AACvF,+FAA+F;AAC/F;;;;GAIG;AACH,MAAM,eAAe,GAAG,MAAC;KACtB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,IAAI;KACD,KAAK,CAAC,GAAG,CAAC;KACV,KAAK,CACJ,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,KAAK,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACjF,EACL;IACE,OAAO,EACL,4FAA4F;CAC/F,CACF,CAAC;AAES,QAAA,kBAAkB,GAAG,IAAA,2BAAkB,EAAC,MAAM,EAAE;IAC3D,MAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE;QAChB;;;WAGG;QACH,QAAQ,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;IACF,MAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,MAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC5D,MAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IACpC,MAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC7D,CAAC,CAAC;AAGH,wFAAwF;AACxF,uFAAuF;AACvF,wFAAwF;AACxF,kGAAkG;AACrF,QAAA,0BAA0B,GAAG,MAAC,CAAC,MAAM,CAAC;IACjD,aAAa,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,oDAAoD;IAC1F,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,oDAAoD;IAC3F,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,8DAA8D;IAC5F,IAAI,EAAE,MAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,yCAAyC;CACxE,CAAC,CAAC;AAGH,8FAA8F;AAC9F,uFAAuF;AAC1E,QAAA,sBAAsB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,QAAA,kBAAkB;IAC1B,IAAI,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD;;;;OAIG;IACH,MAAM,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,gBAAgB,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,2FAA2F;AAC3F,sFAAsF;AACzE,QAAA,sBAAsB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,4FAA4F;AAC5F,8FAA8F;AACjF,QAAA,oBAAoB,GAAG,MAAC,CAAC,KAAK,CAAC;IAC1C,MAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChB,MAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,MAAC,CAAC,MAAM,EAAE;QACpB,IAAI,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,QAAA,kBAAkB,CAAC,CAAC,QAAQ,EAAE;KAC1D,CAAC;CACH,CAAC,CAAC;AAGH;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG,MAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAGH;;;;GAIG;AACH,SAAS,2BAA2B,CAAC,MAGpC;IACC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC;IAClD,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACjF,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,yBAAyB,GAAG;IAChC,OAAO,EACL,0HAA0H;IAC5H,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;CAC9B,CAAC;AAEW,QAAA,iBAAiB,GAAG,MAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,MAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACzB,SAAS,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,+CAA+C;IACpF,eAAe,EAAE,MAAC,CAAC,MAAM,EAAE;IAC3B;;;;OAIG;IACH,0BAA0B,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjE,SAAS,EAAE,QAAA,0BAA0B,CAAC,QAAQ,EAAE,EAAE,iCAAiC;IACnF,SAAS,EAAE,QAAA,sBAAsB,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,QAAA,oBAAoB;IACnC,MAAM,EAAE,QAAA,sBAAsB,CAAC,QAAQ,EAAE,EAAE,+BAA+B;IAC1E,gBAAgB,EAAE,QAAA,uBAAuB,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,QAAA,kBAAkB,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;AAGlE,4FAA4F;AAC5F,6FAA6F;AAC7F,4FAA4F;AAC5F,qEAAqE;AACxD,QAAA,uBAAuB,GAAG,MAAC;KACrC,MAAM,CAAC;IACN,MAAM,EAAE,MAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC/B,SAAS,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC1D,QAAQ,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,qCAAqC;IAC1E,eAAe,EAAE,MAAC,CAAC,MAAM,EAAE;IAC3B,SAAS,EAAE,QAAA,0BAA0B,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,QAAA,sBAAsB,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,QAAA,oBAAoB;IACnC,qFAAqF;IACrF,8DAA8D;IAC9D,iBAAiB,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzF,gBAAgB,EAAE,QAAA,uBAAuB,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;AAGrD,QAAA,yBAAyB,GAAG,MAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,MAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAClC,SAAS,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACxD,SAAS,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,gBAAgB,EAAE,QAAA,uBAAuB,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGU,QAAA,sBAAsB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,MAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC/B,SAAS,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,SAAS,EAAE,MAAC,CAAC,MAAM,EAAE;IACrB,gBAAgB,EAAE,QAAA,uBAAuB,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAGU,QAAA,qBAAqB,GAAG,IAAA,2BAAkB,EAAC,QAAQ,EAAE;IAChE,QAAA,iBAAiB;IACjB,QAAA,yBAAyB;IACzB,QAAA,sBAAsB;IACtB,QAAA,uBAAuB;CACxB,CAAC,CAAC;AAGH,kGAAkG;AAClG,+FAA+F;AAC/F,+FAA+F;AAClF,QAAA,sBAAsB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC7C,gGAAgG;IAChG,SAAS,EAAE,MAAC,CAAC,MAAM,EAAE;IACrB,+DAA+D;IAC/D,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE;IACtB,+FAA+F;IAC/F,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,4EAA4E;IAC5E,aAAa,EAAE,MAAC,CAAC,KAAK,CAAC,CAAC,MAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpE,CAAC,CAAC;AAGH;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC5C,uGAAuG;IACvG,cAAc,EAAE,MAAC,CAAC,KAAK,CAAC,CAAC,MAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpF;;;OAGG;IACH,YAAY,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClD,6DAA6D;IAC7D,cAAc,EAAE,MAAC,CAAC,KAAK,CAAC,CAAC,MAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrF,CAAC,CAAC;AAGH;;;;GAIG;AACU,QAAA,yBAAyB,GAAG,MAAC;KACvC,MAAM,CAAC;IACN,8FAA8F;IAC9F,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,yDAAyD;IACzD,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,8FAA8F;IAC9F,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,wEAAwE;IACxE,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC;KACD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,EAAE;IAC3F,OAAO,EAAE,qDAAqD;IAC9D,IAAI,EAAE,CAAC,YAAY,CAAC;CACrB,CAAC,CAAC;AAGL,6FAA6F;AAChF,QAAA,uBAAuB,GAAG,IAAA,2BAAkB,EAAC,MAAM,EAAE;IAChE,MAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,QAAA,qBAAqB;QAC7B,SAAS,EAAE,QAAA,sBAAsB,CAAC,QAAQ,EAAE;QAC5C,YAAY,EAAE,QAAA,yBAAyB,CAAC,QAAQ,EAAE;QAClD,QAAQ,EAAE,QAAA,qBAAqB,CAAC,QAAQ,EAAE;KAC3C,CAAC;IACF,MAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,QAAA,qBAAqB;QAC7B,SAAS,EAAE,QAAA,sBAAsB,CAAC,QAAQ,EAAE;QAC5C,YAAY,EAAE,QAAA,yBAAyB,CAAC,QAAQ,EAAE;QAClD,QAAQ,EAAE,QAAA,qBAAqB,CAAC,QAAQ,EAAE;KAC3C,CAAC;IACF,MAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU;CAC7F,CAAC,CAAC;AAGH;;;;;GAKG;AACU,QAAA,oBAAoB,GAAG,IAAA,2BAAkB,EAAC,MAAM,EAAE;IAC7D,MAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,MAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE;QAC1B,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE;QACvB,SAAS,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxC,UAAU,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,WAAW,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,qBAAqB,EAAE,MAAC,CAAC,MAAM,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QACnE,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;CACH,CAAC,CAAC;AASU,QAAA,2BAA2B,GAAG,MAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGlG,kFAAkF;AACrE,QAAA,2BAA2B,GAAG,MAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,EAAE,QAAA,2BAA2B;IACnC,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,sGAAsG;IACtG,SAAS,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,8IAA8I;IAC9I,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,qGAAqG;IACrG,OAAO,EAAE,MAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/F,CAAC,CAAC;AAGH,oEAAoE;AACvD,QAAA,qBAAqB,GAAG,MAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,MAAC,CAAC,OAAO,EAAE;IACf,cAAc,EAAE,MAAC,CAAC,MAAM,EAAE;IAC1B,WAAW,EAAE,MAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC"}

package/dist/commonjs/v3/schemas/webhookFilter.d.ts

@@ -0,0 +1,148 @@
+import { z } from "zod/v4";
+export declare const FilterOp: z.ZodEnum<{
+    contains: "contains";
+    endsWith: "endsWith";
+    eq: "eq";
+    gt: "gt";
+    gte: "gte";
+    in: "in";
+    lt: "lt";
+    lte: "lte";
+    neq: "neq";
+    nin: "nin";
+    startsWith: "startsWith";
+}>;
+export type FilterOp = z.infer<typeof FilterOp>;
+export declare const FilterScalar: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+export type FilterScalar = z.infer<typeof FilterScalar>;
+export declare const FilterValue: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>]>;
+export type FilterValue = z.infer<typeof FilterValue>;
+export type FilterAst = {
+    kind: "and";
+    clauses: FilterAst[];
+} | {
+    kind: "or";
+    clauses: FilterAst[];
+} | {
+    kind: "clause";
+    path: string;
+    op: FilterOp;
+    value?: FilterValue;
+    valueRef?: string;
+} | {
+    kind: "quantifier";
+    mode: "any" | "all";
+    path: string;
+    clause: {
+        path: string;
+        op: FilterOp;
+        value: FilterValue;
+    };
+};
+export declare const FILTER_AST_VERSION = 1;
+export declare const FilterAst: z.ZodType<FilterAst>;
+export type WebhookFilterMeta = {
+    externalRef: string;
+    tenantId: string;
+    id: string;
+    source: string;
+    deliveryId: string;
+};
+type FilterError<M extends string> = `✖ ${M}`;
+type Invalid = {
+    readonly "~webhookFilterInvalid": true;
+};
+type IsValidFilterPath<P extends string> = P extends "" | `.${string}` | `${string}.` | `${string}..${string}` ? false : true;
+type KnownValue<T> = unknown extends T ? unknown : NonNullable<T>;
+/** Resolves per union member, so a path only some members have still resolves. */
+type MemberPathValue<T, P extends string> = unknown extends T ? unknown : NonNullable<T> extends infer M ? M extends unknown ? P extends `${infer H}.${infer R}` ? H extends keyof M ? MemberPathValue<M[H], R> : Invalid : P extends keyof M ? KnownValue<M[P]> : Invalid : never : never;
+type PathValue<T, P extends string> = IsValidFilterPath<P> extends false ? Invalid : [Exclude<MemberPathValue<T, P>, Invalid>] extends [never] ? Invalid : Exclude<MemberPathValue<T, P>, Invalid>;
+type ResolveFilterPath<TEvent, P extends string> = IsValidFilterPath<P> extends false ? Invalid : P extends `event.${infer R}` ? PathValue<TEvent, R> : P extends `header.${string}` ? string : P extends `webhook.${infer R}` ? PathValue<WebhookFilterMeta, R> : Invalid;
+type FilterLiteralType<Lit extends string> = Lit extends `'${infer S}'` ? S : Lit extends `${infer N extends number}` ? N : Lit extends "true" ? true : Lit extends "false" ? false : Lit extends "null" ? null : Invalid;
+/** `null` is valid on every field: the server matches it against a missing field as well as a null one. */
+type CheckValue<F, Lit extends string, P extends string> = Lit extends "null" ? true : [FilterLiteralType<Lit>] extends [Invalid] ? FilterError<`cannot parse value: ${Lit}`> : [FilterLiteralType<Lit>] extends [F] ? true : FilterError<`value ${Lit} is not valid for ${P}`>;
+type CheckNum<F, Lit extends string, P extends string> = [
+    Extract<unknown extends F ? number : F, number>
+] extends [never] ? FilterError<`${P} is not numeric`> : Lit extends `${number}` ? true : FilterError<`${P} needs a number`>;
+type CheckStr<F, Lit extends string, P extends string> = [
+    Extract<unknown extends F ? string : F, string>
+] extends [never] ? FilterError<`${P} is not a string`> : Lit extends `'${string}'` ? true : FilterError<`${P} op needs a string literal`>;
+type TrimItem<S extends string> = S extends ` ${infer R}` ? TrimItem<R> : S extends `${infer L} ` ? TrimItem<L> : S;
+type CheckInItems<F, Items extends string, P extends string> = Items extends `${infer Head},${infer Tail}` ? CheckValue<F, TrimItem<Head>, P> extends true ? CheckInItems<F, Tail, P> : CheckValue<F, TrimItem<Head>, P> : CheckValue<F, TrimItem<Items>, P>;
+type CheckIn<F, Lit extends string, P extends string> = Lit extends `[${infer Items}]` ? CheckInItems<F, Items, P> : FilterError<`${P} "in" expects a [list]`>;
+type CheckOp<F, Op extends string, Lit extends string, P extends string> = Op extends "==" | "!=" ? CheckValue<F, Lit, P> : Op extends ">" | "<" | ">=" | "<=" ? CheckNum<F, Lit, P> : Op extends "startsWith" | "endsWith" | "contains" ? CheckStr<F, Lit, P> : Op extends "in" ? CheckIn<F, Lit, P> : FilterError<`unknown operator: ${Op}`>;
+type IsFilterPath<S extends string> = S extends `event.${string}` | `header.${string}` | `webhook.${string}` ? true : false;
+type CheckFieldToField<TEvent, F, Op extends string, Rhs extends string, P extends string> = Op extends "==" | "!=" | ">" | "<" | ">=" | "<=" ? ResolveFilterPath<TEvent, Rhs> extends infer RF ? [RF] extends [Invalid] ? FilterError<`unknown field: ${Rhs}`> : [RF] extends [F] ? true : [F] extends [RF] ? true : FilterError<`${P} and ${Rhs} are not comparable`> : never : FilterError<`operator "${Op}" does not support a field reference`>;
+type LeafCheck<TEvent, P extends string, Op extends string, Lit extends string> = ResolveFilterPath<TEvent, P> extends infer F ? [F] extends [Invalid] ? FilterError<`unknown field: ${P}`> : IsFilterPath<Lit> extends true ? CheckFieldToField<TEvent, F, Op, Lit, P> : CheckOp<F, Op, Lit, P> : never;
+type ElementOf<T> = unknown extends T ? unknown : T extends readonly (infer E)[] ? E : never;
+/** The array a quantifier reads: a field, or the event itself (`event any (...)`) when the body is an array. */
+type ResolveQuantifierArray<TEvent, ArrP extends string> = ArrP extends "event" ? TEvent : ResolveFilterPath<TEvent, ArrP>;
+type CheckQuantifier<TEvent, ArrP extends string, SubP extends string, Op extends string, Lit extends string> = ResolveQuantifierArray<TEvent, ArrP> extends infer Arr ? [Arr] extends [Invalid] ? FilterError<`unknown field: ${ArrP}`> : [ElementOf<Arr>] extends [never] ? FilterError<`${ArrP} is not an array`> : PathValue<ElementOf<Arr>, SubP> extends infer SF ? [SF] extends [Invalid] ? FilterError<`unknown field: ${SubP} (in ${ArrP})`> : CheckOp<SF, Op, Lit, SubP> : never : never;
+type OddQuotes<S extends string, Odd extends boolean = false> = S extends `${string}'${infer R}` ? OddQuotes<R, Odd extends true ? false : true> : Odd;
+type Unclosed<S extends string> = OddQuotes<S> extends true ? true : S extends `${string}[${infer After}` ? After extends `${string}]${string}` ? false : true : false;
+/** Splits on spaces, keeping a quoted string or a `[list]` that contains spaces as one token. */
+type SplitOnSpaces<S extends string, Acc extends string[] = []> = S extends `${infer H} ${infer R}` ? Unclosed<H> extends true ? TokenizeJoin<R, H, Acc> : SplitOnSpaces<R, [...Acc, H]> : [...Acc, S];
+type TokenizeJoin<S extends string, Cur extends string, Acc extends string[]> = S extends `${infer H} ${infer R}` ? Unclosed<`${Cur} ${H}`> extends true ? TokenizeJoin<R, `${Cur} ${H}`, Acc> : SplitOnSpaces<R, [...Acc, `${Cur} ${H}`]> : [...Acc, `${Cur} ${S}`];
+type SplitClose<S extends string, Post extends string[] = []> = S extends `${infer L})` ? SplitClose<L, [")", ...Post]> : S extends "" ? Post : [S, ...Post];
+type SplitOpen<S extends string, Pre extends string[] = []> = S extends `(${infer R}` ? SplitOpen<R, [...Pre, "("]> : [...Pre, ...SplitClose<S>];
+type SplitParens<Tk extends string[], Acc extends string[] = []> = Tk extends [
+    infer H extends string,
+    ...infer R extends string[]
+] ? SplitParens<R, [...Acc, ...(H extends `'${string}'` ? [H] : SplitOpen<H>)]> : Acc;
+type Tokenize<S extends string> = SplitParens<SplitOnSpaces<S>>;
+type InItemTypes<Items extends string, Acc = never> = Items extends `${infer Head},${infer Tail}` ? InItemTypes<Tail, Acc | FilterLiteralType<TrimItem<Head>>> : Acc | FilterLiteralType<TrimItem<Items>>;
+type LooseEqKind<V> = V extends string ? string : V extends number ? number : unknown;
+/**
+ * Drops a member only when its field can never equal `V` under the server's coercing `==`: the field
+ * is missing, or holds only values of `V`'s own primitive kind that differ from it.
+ */
+type NarrowTo<T, P extends string, V> = V extends unknown ? T extends unknown ? Exclude<MemberPathValue<T, P>, Invalid> extends infer F ? [V] extends [F] ? T : [F] extends [LooseEqKind<V>] ? never : T : never : never : never;
+/**
+ * The server's `==` also matches a null field for `null`, `'null'` and `0`, so those never narrow,
+ * nor does a number literal TypeScript can't type exactly (`0.0`, `-0`), which reads as `number`.
+ */
+type NarrowEq<T, P extends string, V> = unknown extends T ? T : number extends V ? T : [Extract<V, null | "null" | 0>] extends [never] ? NarrowTo<T, P, V> : T;
+type NarrowLeaf<T, P extends string, Op extends string, Lit extends string> = P extends `event.${infer R}` ? Op extends "==" ? IsFilterPath<Lit> extends true ? T : NarrowEq<T, R, FilterLiteralType<Lit>> : Op extends "in" ? Lit extends `[${infer Items}]` ? NarrowEq<T, R, InItemTypes<Items>> : T : T : T;
+type Frame = [unknown, unknown];
+/**
+ * `Cur` is the event the current `&&` chain has narrowed to. Each paren group (and the whole filter)
+ * is a frame of [the type the group started from, the union of its finished `||` branches]. A valid
+ * filter scans to `[narrowed event]`, an invalid one to its error.
+ */
+type Scan<Cur, Tk extends string[], Frames extends Frame[], Expect extends "operand" | "operator"> = Expect extends "operand" ? Tk extends ["(", ...infer Rest extends string[]] ? Scan<Cur, Rest, [[Cur, never], ...Frames], "operand"> : Tk extends [")" | "&&" | "||", ...string[]] ? FilterError<`unexpected "${Tk[0] & string}"`> : Tk extends [
+    infer ArrP extends string,
+    "any" | "all",
+    "(",
+    infer SubP extends string,
+    infer SubOp extends string,
+    infer SubLit extends string,
+    ")",
+    ...infer Rest extends string[]
+] ? CheckQuantifier<Cur, ArrP, SubP, SubOp, SubLit> extends infer R ? R extends true ? Scan<Cur, Rest, Frames, "operator"> : R : never : Tk extends [
+    infer P extends string,
+    "not",
+    "in",
+    infer Lit extends string,
+    ...infer Rest extends string[]
+] ? ResolveFilterPath<Cur, P> extends infer F ? [F] extends [Invalid] ? FilterError<`unknown field: ${P}`> : CheckIn<F, Lit, P> extends infer R ? R extends true ? Scan<Cur, Rest, Frames, "operator"> : R : never : never : Tk extends [
+    infer P extends string,
+    infer Op extends string,
+    infer Lit extends string,
+    ...infer Rest extends string[]
+] ? LeafCheck<Cur, P, Op, Lit> extends infer R ? R extends true ? Scan<NarrowLeaf<Cur, P, Op, Lit>, Rest, Frames, "operator"> : R : never : FilterError<`incomplete clause`> : Tk extends [] ? Frames extends [[unknown, infer Done]] ? [Done | Cur] : FilterError<`unbalanced parens (missing ")")`> : Tk extends ["&&", ...infer Rest extends string[]] ? Scan<Cur, Rest, Frames, "operand"> : Tk extends ["||", ...infer Rest extends string[]] ? Frames extends [[infer Base, infer Done], ...infer Outer extends Frame[]] ? Scan<Base, Rest, [[Base, Done | Cur], ...Outer], "operand"> : never : Tk extends [")", ...infer Rest extends string[]] ? Frames extends [
+    [
+        unknown,
+        infer Done
+    ],
+    infer Next extends Frame,
+    ...infer Outer extends Frame[]
+] ? Scan<Done | Cur, Rest, [Next, ...Outer], "operator"> : FilterError<`unmatched ")"`> : FilterError<`expected && or ||, got "${Tk[0] & string}"`>;
+type ScanFilter<TEvent, S extends string> = Scan<TEvent, Tokenize<S>, [[TEvent, never]], "operand">;
+export type ValidateWebhookFilter<TEvent, S extends string> = string extends S ? S : ScanFilter<TEvent, S> extends [unknown] ? S : ScanFilter<TEvent, S>;
+/**
+ * The event a handler sees once the filter `S` has passed: the members of a union event that the
+ * filter's `event.<path> == <literal>` (or `in [...]`) clauses select, or `TEvent` when the filter
+ * doesn't narrow it (or isn't a literal).
+ */
+export type NarrowWebhookEvent<TEvent, S extends string> = string extends S ? TEvent : ScanFilter<TEvent, S> extends [infer Narrowed] ? Narrowed : TEvent;
+export {};

package/dist/commonjs/v3/schemas/webhookFilter.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FilterAst = exports.FILTER_AST_VERSION = exports.FilterValue = exports.FilterScalar = exports.FilterOp = void 0;
+const v4_1 = require("zod/v4");
+// Webhook delivery filter: server-side predicate gating routing. LEAF module (imports only `z`).
+// ── Runtime AST (stored on WebhookEndpoint.filterAst; produced by the engine parser) ──
+exports.FilterOp = v4_1.z.enum([
+    "eq",
+    "neq",
+    "gt",
+    "lt",
+    "gte",
+    "lte",
+    "in",
+    "nin",
+    "startsWith",
+    "endsWith",
+    "contains",
+]);
+exports.FilterScalar = v4_1.z.union([v4_1.z.string(), v4_1.z.number(), v4_1.z.boolean(), v4_1.z.null()]);
+exports.FilterValue = v4_1.z.union([exports.FilterScalar, v4_1.z.array(exports.FilterScalar)]);
+// Bump when the AST shape changes; a stored AST with a different version is re-parsed from `filter`.
+exports.FILTER_AST_VERSION = 1;
+exports.FilterAst = v4_1.z.lazy(() => v4_1.z.union([
+    v4_1.z.object({ kind: v4_1.z.literal("and"), clauses: v4_1.z.array(exports.FilterAst) }),
+    v4_1.z.object({ kind: v4_1.z.literal("or"), clauses: v4_1.z.array(exports.FilterAst) }),
+    v4_1.z.object({
+        kind: v4_1.z.literal("clause"),
+        path: v4_1.z.string(),
+        op: exports.FilterOp,
+        value: exports.FilterValue.optional(),
+        valueRef: v4_1.z.string().optional(),
+    }),
+    v4_1.z.object({
+        kind: v4_1.z.literal("quantifier"),
+        mode: v4_1.z.enum(["any", "all"]),
+        path: v4_1.z.string(),
+        clause: v4_1.z.object({ path: v4_1.z.string(), op: exports.FilterOp, value: exports.FilterValue }),
+    }),
+]));
+//# sourceMappingURL=webhookFilter.js.map

package/dist/commonjs/v3/schemas/webhookFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhookFilter.js","sourceRoot":"","sources":["../../../../src/v3/schemas/webhookFilter.ts"],"names":[],"mappings":";;;AAAA,+BAA2B;AAE3B,iGAAiG;AAEjG,yFAAyF;AAE5E,QAAA,QAAQ,GAAG,MAAC,CAAC,IAAI,CAAC;IAC7B,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,YAAY;IACZ,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAGU,QAAA,YAAY,GAAG,MAAC,CAAC,KAAK,CAAC,CAAC,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,MAAC,CAAC,OAAO,EAAE,EAAE,MAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAGxE,QAAA,WAAW,GAAG,MAAC,CAAC,KAAK,CAAC,CAAC,QAAA,YAAY,EAAE,MAAC,CAAC,KAAK,CAAC,QAAA,YAAY,CAAC,CAAC,CAAC,CAAC;AAgB1E,qGAAqG;AACxF,QAAA,kBAAkB,GAAG,CAAC,CAAC;AAEvB,QAAA,SAAS,GAAyB,MAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACzD,MAAC,CAAC,KAAK,CAAC;IACN,MAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,QAAA,SAAS,CAAC,EAAE,CAAC;IACjE,MAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAC,CAAC,KAAK,CAAC,QAAA,SAAS,CAAC,EAAE,CAAC;IAChE,MAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE;QAChB,EAAE,EAAE,QAAA,QAAQ;QACZ,KAAK,EAAE,QAAA,WAAW,CAAC,QAAQ,EAAE;QAC7B,QAAQ,EAAE,MAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,MAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,MAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7B,IAAI,EAAE,MAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5B,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,MAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,QAAA,QAAQ,EAAE,KAAK,EAAE,QAAA,WAAW,EAAE,CAAC;KACzE,CAAC;CACH,CAAC,CACH,CAAC"}