@trigger.dev/core 4.5.11 → 4.5.12

package/dist/esm/v3/webhooks/index.js

@@ -0,0 +1,248 @@
+/**
+ * Preset verifier-config builders: the single source of truth for how each supported provider signs.
+ * The public SDK `webhooks.stripe()` producers wrap these (attaching provider + secretProvisioning +
+ * the phantom event type), and `@internal/webhook-sources` uses them to sign-and-verify its samples.
+ * These carry zero SDK dependency (pure `WebhookVerifierConfig` data), so they live in core.
+ */
+export function stripeVerifierConfig(opts) {
+    return {
+        scheme: "hmac",
+        algorithm: "sha256",
+        encoding: "hex",
+        signatureHeader: "stripe-signature",
+        signature: { itemSeparator: ",", fieldSeparator: "=", field: "v1" },
+        timestamp: {
+            source: { from: "signatureField", field: "t" },
+            toleranceSeconds: opts?.toleranceSeconds ?? 300,
+        },
+        signingString: { template: "{timestamp}.{body}" },
+        idempotencyField: { from: "body", name: "id" },
+    };
+}
+export function githubVerifierConfig() {
+    return {
+        scheme: "hmac",
+        algorithm: "sha256",
+        encoding: "hex",
+        signatureHeader: "x-hub-signature-256",
+        signature: { fieldSeparator: "=", field: "sha256" },
+        signingString: "raw",
+        idempotencyField: { from: "header", name: "x-github-delivery" },
+    };
+}
+export function svixVerifierConfig() {
+    return {
+        scheme: "hmac",
+        algorithm: "sha256",
+        encoding: "base64",
+        signatureHeader: "svix-signature",
+        signature: { itemSeparator: " ", fieldSeparator: ",", field: "v1" },
+        timestamp: { source: { from: "header", name: "svix-timestamp" }, toleranceSeconds: 300 },
+        signingString: {
+            template: "{id}.{timestamp}.{body}",
+            vars: { id: { from: "header", name: "svix-id" } },
+        },
+        secret: { encoding: "base64", stripPrefix: "whsec_" },
+        idempotencyField: { from: "header", name: "svix-id" },
+    };
+}
+export function squareVerifierConfig() {
+    return {
+        scheme: "hmac",
+        algorithm: "sha256",
+        encoding: "base64",
+        signatureHeader: "x-square-hmacsha256-signature",
+        signature: {},
+        signingString: { template: "{url}{body}", vars: { url: { from: "url" } } },
+        idempotencyField: { from: "body", name: "event_id" },
+    };
+}
+export function discordVerifierConfig(opts) {
+    return {
+        scheme: "asymmetric",
+        algorithm: "ed25519",
+        encoding: "hex",
+        signatureHeader: "x-signature-ed25519",
+        signature: {},
+        timestamp: { source: { from: "header", name: "x-signature-timestamp" } },
+        signingString: { template: "{timestamp}{body}" },
+        publicKeyEncoding: opts?.publicKeyEncoding ?? "raw-hex",
+    };
+}
+export const WEBHOOK_PRESET_IDS = [
+    "custom",
+    "stripe",
+    "github",
+    "svix",
+    "square",
+    "discord",
+];
+/**
+ * Generic HMAC verifier-config builder. The per-provider configs below are concise declarative calls;
+ * each names the signature header, how the signature (and optional timestamp) is parsed out of it, and
+ * the bytes that get signed. The engine signer/verifier are the single implementation.
+ */
+function hmacVerifierConfig(opts) {
+    const signature = {};
+    if (opts.itemSeparator)
+        signature.itemSeparator = opts.itemSeparator;
+    if (opts.field) {
+        signature.fieldSeparator = opts.fieldSeparator ?? "=";
+        signature.field = opts.field;
+    }
+    if (opts.trim)
+        signature.trim = true;
+    const config = {
+        scheme: "hmac",
+        algorithm: opts.algorithm ?? "sha256",
+        encoding: opts.encoding ?? "hex",
+        signatureHeader: opts.header,
+        signature,
+        signingString: opts.signingTemplate ? { template: opts.signingTemplate } : "raw",
+    };
+    if (opts.timestamp) {
+        config.timestamp = {
+            source: opts.timestamp.from === "header"
+                ? { from: "header", name: opts.timestamp.name }
+                : { from: "signatureField", field: opts.timestamp.field },
+            ...(opts.timestamp.unit ? { unit: opts.timestamp.unit } : {}),
+            ...(opts.toleranceSeconds ? { toleranceSeconds: opts.toleranceSeconds } : {}),
+        };
+    }
+    return config;
+}
+/**
+ * Per-provider verifier configs for providers whose signature is a plain HMAC variant that maps onto
+ * the config primitives (a different header name / prefix / signing template than the shared presets,
+ * but no new verifier capability). Each is round-trip tested in @internal/webhook-sources and wrapped
+ * by a `webhooks.X()` SDK producer. Providers needing asymmetric verification, hex-decoded keys, or
+ * URL+param signing are NOT here (they ship sample-only until the verifier gains those).
+ */
+export const webhookProviderConfigs = {
+    slack: {
+        secretProvisioning: "provider",
+        config: () => hmacVerifierConfig({
+            header: "x-slack-signature",
+            field: "v0",
+            signingTemplate: "v0:{timestamp}:{body}",
+            timestamp: { from: "header", name: "x-slack-request-timestamp" },
+            toleranceSeconds: 300,
+        }),
+    },
+    zoom: {
+        secretProvisioning: "provider",
+        config: () => hmacVerifierConfig({
+            header: "x-zm-signature",
+            field: "v0",
+            signingTemplate: "v0:{timestamp}:{body}",
+            timestamp: { from: "header", name: "x-zm-request-timestamp" },
+            toleranceSeconds: 300,
+        }),
+    },
+    calendly: {
+        secretProvisioning: "provider",
+        config: () => hmacVerifierConfig({
+            header: "calendly-webhook-signature",
+            itemSeparator: ",",
+            field: "v1",
+            signingTemplate: "{timestamp}.{body}",
+            timestamp: { from: "signatureField", field: "t" },
+            toleranceSeconds: 300,
+        }),
+    },
+    "cal-com": {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "x-cal-signature-256" }),
+    },
+    sentry: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "sentry-hook-signature" }),
+    },
+    pagerduty: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "x-pagerduty-signature", field: "v1" }),
+    },
+    vercel: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "x-vercel-signature", algorithm: "sha1" }),
+    },
+    linear: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "linear-signature" }),
+    },
+    notion: {
+        secretProvisioning: "provider",
+        config: () => hmacVerifierConfig({ header: "x-notion-signature", field: "sha256" }),
+    },
+    typeform: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "typeform-signature", field: "sha256", encoding: "base64" }),
+    },
+    docusign: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "x-docusign-signature-1", encoding: "base64" }),
+    },
+    jira: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "x-hub-signature", field: "sha256" }),
+    },
+    intercom: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "x-hub-signature", field: "sha1", algorithm: "sha1" }),
+    },
+    zendesk: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({
+            header: "x-zendesk-webhook-signature",
+            encoding: "base64",
+            signingTemplate: "{timestamp}{body}",
+            timestamp: { from: "header", name: "x-zendesk-webhook-signature-timestamp" },
+        }),
+    },
+    attio: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "attio-signature" }),
+    },
+    workos: {
+        secretProvisioning: "provider",
+        config: () => hmacVerifierConfig({
+            header: "workos-signature",
+            itemSeparator: ",",
+            field: "v1",
+            trim: true,
+            signingTemplate: "{timestamp}.{body}",
+            timestamp: { from: "signatureField", field: "t", unit: "milliseconds" },
+        }),
+    },
+    elevenlabs: {
+        secretProvisioning: "provider",
+        config: () => hmacVerifierConfig({
+            header: "elevenlabs-signature",
+            itemSeparator: ",",
+            field: "v0",
+            signingTemplate: "{timestamp}.{body}",
+            timestamp: { from: "signatureField", field: "t" },
+            toleranceSeconds: 1800,
+        }),
+    },
+    vapi: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "x-vapi-signature" }),
+    },
+    retell: {
+        secretProvisioning: "provider",
+        config: () => hmacVerifierConfig({
+            header: "x-retell-signature",
+            itemSeparator: ",",
+            field: "d",
+            signingTemplate: "{body}{timestamp}",
+            timestamp: { from: "signatureField", field: "v", unit: "milliseconds" },
+        }),
+    },
+    shopify: {
+        secretProvisioning: "integrator",
+        config: () => hmacVerifierConfig({ header: "x-shopify-hmac-sha256", encoding: "base64" }),
+    },
+};
+export * from "../schemas/webhookConfig.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/v3/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/v3/webhooks/index.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AAEH,MAAM,UAAU,oBAAoB,CAAC,IAAoC;IACvE,OAAO;QACL,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,KAAK;QACf,eAAe,EAAE,kBAAkB;QACnC,SAAS,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE;QACnE,SAAS,EAAE;YACT,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE;YAC9C,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,IAAI,GAAG;SAChD;QACD,aAAa,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE;QACjD,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,KAAK;QACf,eAAe,EAAE,qBAAqB;QACtC,SAAS,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE;QACnD,aAAa,EAAE,KAAK;QACpB,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,gBAAgB;QACjC,SAAS,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE;QACnE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE;QACxF,aAAa,EAAE;YACb,QAAQ,EAAE,yBAAyB;YACnC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SAClD;QACD,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;QACrD,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,QAAQ;QAClB,eAAe,EAAE,+BAA+B;QAChD,SAAS,EAAE,EAAE;QACb,aAAa,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1E,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAErC;IACC,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,KAAK;QACf,eAAe,EAAE,qBAAqB;QACtC,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE;QACxE,aAAa,EAAE,EAAE,QAAQ,EAAE,mBAAmB,EAAE;QAChD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,IAAI,SAAS;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;CACD,CAAC;AAGX;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAa3B;IACC,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,IAAI,IAAI,CAAC,aAAa;QAAE,SAAS,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACrE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,SAAS,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC;QACtD,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,IAAI;QAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;IAErC,MAAM,MAAM,GAAsB;QAChC,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,QAAQ;QACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,eAAe,EAAE,IAAI,CAAC,MAAM;QAC5B,SAAS;QACT,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,KAAK;KACjF,CAAC;IAEF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,CAAC,SAAS,GAAG;YACjB,MAAM,EACJ,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;gBAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE;gBAC/C,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE;YAC7D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,KAAK,EAAE;QACL,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC;YACjB,MAAM,EAAE,mBAAmB;YAC3B,KAAK,EAAE,IAAI;YACX,eAAe,EAAE,uBAAuB;YACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,EAAE;YAChE,gBAAgB,EAAE,GAAG;SACtB,CAAC;KACL;IACD,IAAI,EAAE;QACJ,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC;YACjB,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE,IAAI;YACX,eAAe,EAAE,uBAAuB;YACxC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,wBAAwB,EAAE;YAC7D,gBAAgB,EAAE,GAAG;SACtB,CAAC;KACL;IACD,QAAQ,EAAE;QACR,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC;YACjB,MAAM,EAAE,4BAA4B;YACpC,aAAa,EAAE,GAAG;YAClB,KAAK,EAAE,IAAI;YACX,eAAe,EAAE,oBAAoB;YACrC,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE;YACjD,gBAAgB,EAAE,GAAG;SACtB,CAAC;KACL;IACD,SAAS,EAAE;QACT,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;KACpE;IACD,MAAM,EAAE;QACN,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;KACtE;IACD,SAAS,EAAE;QACT,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KACnF;IACD,MAAM,EAAE;QACN,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;KACtF;IACD,MAAM,EAAE;QACN,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;KACjE;IACD,MAAM,EAAE;QACN,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;KACpF;IACD,QAAQ,EAAE;QACR,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAC5F;IACD,QAAQ,EAAE;QACR,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAC3F;IACD,IAAI,EAAE;QACJ,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;KACjF;IACD,QAAQ,EAAE;QACR,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;KACtF;IACD,OAAO,EAAE;QACP,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC;YACjB,MAAM,EAAE,6BAA6B;YACrC,QAAQ,EAAE,QAAQ;YAClB,eAAe,EAAE,mBAAmB;YACpC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,uCAAuC,EAAE;SAC7E,CAAC;KACL;IACD,KAAK,EAAE;QACL,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;KAChE;IACD,MAAM,EAAE;QACN,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC;YACjB,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,GAAG;YAClB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,IAAI;YACV,eAAe,EAAE,oBAAoB;YACrC,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE;SACxE,CAAC;KACL;IACD,UAAU,EAAE;QACV,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC;YACjB,MAAM,EAAE,sBAAsB;YAC9B,aAAa,EAAE,GAAG;YAClB,KAAK,EAAE,IAAI;YACX,eAAe,EAAE,oBAAoB;YACrC,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE;YACjD,gBAAgB,EAAE,IAAI;SACvB,CAAC;KACL;IACD,IAAI,EAAE;QACJ,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;KACjE;IACD,MAAM,EAAE;QACN,kBAAkB,EAAE,UAAU;QAC9B,MAAM,EAAE,GAAG,EAAE,CACX,kBAAkB,CAAC;YACjB,MAAM,EAAE,oBAAoB;YAC5B,aAAa,EAAE,GAAG;YAClB,KAAK,EAAE,GAAG;YACV,eAAe,EAAE,mBAAmB;YACpC,SAAS,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE;SACxE,CAAC;KACL;IACD,OAAO,EAAE;QACP,kBAAkB,EAAE,YAAY;QAChC,MAAM,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAC1F;CAIF,CAAC;AAIF,cAAc,6BAA6B,CAAC"}

package/dist/esm/v3/workers/populateEnv.js

@@ -11,7 +11,7 @@ export function populateEnv(envObject, options = {}) {
     }
     // Set process.env values
     for (const key of Object.keys(envObject)) {
-        if (Object.prototype.hasOwnProperty.call(process.env, key)) {
+        if (Object.hasOwn(process.env, key)) {
             if (override) {
                 process.env[key] = envObject[key];
                 if (debug) {
@@ -29,7 +29,7 @@ export function populateEnv(envObject, options = {}) {
     if (previousEnv) {
         // if there are any keys in previousEnv that are not in envObject, remove them from process.env
         for (const key of Object.keys(previousEnv)) {
-            if (!Object.prototype.hasOwnProperty.call(envObject, key)) {
+            if (!Object.hasOwn(envObject, key)) {
                 delete process.env[key];
             }
         }

package/dist/esm/v3/workers/populateEnv.js.map

@@ -1 +1 @@
-{"version":3,"file":"populateEnv.js","sourceRoot":"","sources":["../../../../src/v3/workers/populateEnv.ts"],"names":[],"mappings":"AAuBA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,SAAiC,EACjC,OAAO,GAAuB,EAAE;IAEhC,MAAM,EAAE,QAAQ,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEjE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC3D,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAElC,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,0CAA0C,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,8CAA8C,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,+FAA+F;QAC/F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"populateEnv.js","sourceRoot":"","sources":["../../../../src/v3/workers/populateEnv.ts"],"names":[],"mappings":"AAuBA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,SAAiC,EACjC,OAAO,GAAuB,EAAE;IAEhC,MAAM,EAAE,QAAQ,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEjE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAElC,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,0CAA0C,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,8CAA8C,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,+FAA+F;QAC/F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/esm/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "4.5.11";
+export const VERSION = "4.5.12";
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trigger.dev/core",
-  "version": "4.5.11",
+  "version": "4.5.12",
   "description": "Core code used across the Trigger.dev SDK and platform",
   "license": "MIT",
   "publishConfig": {
@@ -25,6 +25,7 @@
       "./logger": "./src/logger.ts",
       "./utils": "./src/utils.ts",
       "./schemas": "./src/schemas/index.ts",
+      "./webhooks": "./src/v3/webhooks/index.ts",
       "./types": "./src/types.ts",
       "./v3": "./src/v3/index.ts",
       "./v3/tracer": "./src/v3/tracer.ts",
@@ -74,6 +75,9 @@
       "schemas": [
         "dist/commonjs/schemas/index.d.ts"
       ],
+      "webhooks": [
+        "dist/commonjs/v3/webhooks/index.d.ts"
+      ],
       "types": [
         "dist/commonjs/types.d.ts"
       ],
@@ -198,32 +202,25 @@
     "@opentelemetry/sdk-metrics": "2.7.1",
     "@opentelemetry/sdk-trace-base": "2.7.1",
     "@opentelemetry/sdk-trace-node": "2.7.1",
-    "@opentelemetry/semantic-conventions": "1.41.1",
     "@s2-dev/streamstore": "0.25.0",
     "dequal": "^2.0.3",
     "eventsource": "^3.0.5",
     "eventsource-parser": "^3.0.0",
-    "execa": "^8.0.1",
     "humanize-duration": "^3.27.3",
     "jose": "^5.4.0",
-    "nanoid": "3.3.8",
+    "nanoid": "3.3.18",
     "prom-client": "^15.1.0",
-    "socket.io": "4.7.4",
     "socket.io-client": "4.7.5",
     "std-env": "^3.8.1",
     "tinyexec": "^0.3.2",
     "uncrypto": "^0.1.3",
     "zod": "3.25.76",
-    "zod-error": "1.5.0",
     "zod-validation-error": "^1.5.0"
   },
   "devDependencies": {
-    "@ai-sdk/provider-utils": "^1.0.22",
     "@arethetypeswrong/cli": "^0.18.5",
     "@epic-web/test-server": "^0.1.0",
     "@types/humanize-duration": "^3.27.1",
-    "@types/lodash.get": "^4.4.9",
-    "@types/readable-stream": "^4.0.14",
     "ai": "^6.0.0",
     "ai-v7": "npm:ai@7.0.0-canary.159",
     "defu": "^6.1.4",
@@ -233,6 +230,7 @@
     "ts-essentials": "10.0.1",
     "tshy": "^4.1.3",
     "tsx": "4.17.0",
+    "@internal/testcontainers": "0.0.1",
     "@trigger.dev/database": "0.0.2"
   },
   "engines": {
@@ -284,6 +282,17 @@
         "default": "./dist/commonjs/schemas/index.js"
       }
     },
+    "./webhooks": {
+      "import": {
+        "@triggerdotdev/source": "./src/v3/webhooks/index.ts",
+        "types": "./dist/esm/v3/webhooks/index.d.ts",
+        "default": "./dist/esm/v3/webhooks/index.js"
+      },
+      "require": {
+        "types": "./dist/commonjs/v3/webhooks/index.d.ts",
+        "default": "./dist/commonjs/v3/webhooks/index.js"
+      }
+    },
     "./types": {
       "import": {
         "@triggerdotdev/source": "./src/types.ts",

package/dist/commonjs/debounce.d.ts

@@ -1,2 +0,0 @@
-/** A very simple debounce. Will only execute after the specified delay has elapsed since the last call. */
-export declare function debounce(func: (...args: any[]) => void, delayMs: number): (...args: any[]) => void;

package/dist/commonjs/debounce.js

@@ -1,19 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.debounce = debounce;
-/** A very simple debounce. Will only execute after the specified delay has elapsed since the last call. */
-function debounce(func, delayMs) {
-    let timeoutId = null;
-    return (...args) => {
-        // Clear any existing timeout
-        if (timeoutId) {
-            clearTimeout(timeoutId);
-        }
-        // Set a new timeout with the latest args
-        timeoutId = setTimeout(() => {
-            func(...args);
-            timeoutId = null;
-        }, delayMs);
-    };
-}
-//# sourceMappingURL=debounce.js.map

package/dist/commonjs/debounce.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debounce.js","sourceRoot":"","sources":["../../src/debounce.ts"],"names":[],"mappings":";;;AAAA,2GAA2G;AAC3G,kBACE,IAA8B,EAC9B,OAAe;IAEf,IAAI,SAAS,GAA0B,IAAI,CAAC;IAE5C,OAAO,CAAC,GAAG,IAAW,EAAE,EAAE;QACxB,6BAA6B;QAC7B,IAAI,SAAS,EAAE,CAAC;YACd,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QAED,yCAAyC;QACzC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACd,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC;AACJ,CAAC"}

package/dist/commonjs/v3/utils/safeAsyncLocalStorage.d.ts

@@ -1,7 +0,0 @@
-export declare class SafeAsyncLocalStorage<T> {
-    private storage;
-    constructor();
-    enterWith(context: T): void;
-    runWith<R extends (...args: any[]) => Promise<any>>(context: T, fn: R): Promise<ReturnType<R>>;
-    getStore(): T | undefined;
-}

package/dist/commonjs/v3/utils/safeAsyncLocalStorage.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SafeAsyncLocalStorage = void 0;
-const node_async_hooks_1 = require("node:async_hooks");
-class SafeAsyncLocalStorage {
-    storage;
-    constructor() {
-        this.storage = new node_async_hooks_1.AsyncLocalStorage();
-    }
-    enterWith(context) {
-        this.storage.enterWith(context);
-    }
-    runWith(context, fn) {
-        return this.storage.run(context, fn);
-    }
-    getStore() {
-        return this.storage.getStore();
-    }
-}
-exports.SafeAsyncLocalStorage = SafeAsyncLocalStorage;
-//# sourceMappingURL=safeAsyncLocalStorage.js.map

package/dist/commonjs/v3/utils/safeAsyncLocalStorage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"safeAsyncLocalStorage.js","sourceRoot":"","sources":["../../../../src/v3/utils/safeAsyncLocalStorage.ts"],"names":[],"mappings":";;;AAAA,uDAAqD;AAErD;IACU,OAAO,CAAuB;IAEtC;QACE,IAAI,CAAC,OAAO,GAAG,IAAI,oCAAiB,EAAK,CAAC;IAC5C,CAAC;IAED,SAAS,CAAC,OAAU;QAClB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,CAA6C,OAAU,EAAE,EAAK;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;CACF"}

package/dist/esm/debounce.d.ts

@@ -1,2 +0,0 @@
-/** A very simple debounce. Will only execute after the specified delay has elapsed since the last call. */
-export declare function debounce(func: (...args: any[]) => void, delayMs: number): (...args: any[]) => void;

package/dist/esm/debounce.js

@@ -1,16 +0,0 @@
-/** A very simple debounce. Will only execute after the specified delay has elapsed since the last call. */
-export function debounce(func, delayMs) {
-    let timeoutId = null;
-    return (...args) => {
-        // Clear any existing timeout
-        if (timeoutId) {
-            clearTimeout(timeoutId);
-        }
-        // Set a new timeout with the latest args
-        timeoutId = setTimeout(() => {
-            func(...args);
-            timeoutId = null;
-        }, delayMs);
-    };
-}
-//# sourceMappingURL=debounce.js.map

package/dist/esm/debounce.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debounce.js","sourceRoot":"","sources":["../../src/debounce.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,MAAM,UAAU,QAAQ,CACtB,IAA8B,EAC9B,OAAe;IAEf,IAAI,SAAS,GAA0B,IAAI,CAAC;IAE5C,OAAO,CAAC,GAAG,IAAW,EAAE,EAAE;QACxB,6BAA6B;QAC7B,IAAI,SAAS,EAAE,CAAC;YACd,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QAED,yCAAyC;QACzC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACd,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/v3/utils/safeAsyncLocalStorage.d.ts

@@ -1,7 +0,0 @@
-export declare class SafeAsyncLocalStorage<T> {
-    private storage;
-    constructor();
-    enterWith(context: T): void;
-    runWith<R extends (...args: any[]) => Promise<any>>(context: T, fn: R): Promise<ReturnType<R>>;
-    getStore(): T | undefined;
-}

package/dist/esm/v3/utils/safeAsyncLocalStorage.js

@@ -1,17 +0,0 @@
-import { AsyncLocalStorage } from "node:async_hooks";
-export class SafeAsyncLocalStorage {
-    storage;
-    constructor() {
-        this.storage = new AsyncLocalStorage();
-    }
-    enterWith(context) {
-        this.storage.enterWith(context);
-    }
-    runWith(context, fn) {
-        return this.storage.run(context, fn);
-    }
-    getStore() {
-        return this.storage.getStore();
-    }
-}
-//# sourceMappingURL=safeAsyncLocalStorage.js.map

package/dist/esm/v3/utils/safeAsyncLocalStorage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"safeAsyncLocalStorage.js","sourceRoot":"","sources":["../../../../src/v3/utils/safeAsyncLocalStorage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,OAAO,qBAAqB;IACxB,OAAO,CAAuB;IAEtC;QACE,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,EAAK,CAAC;IAC5C,CAAC;IAED,SAAS,CAAC,OAAU;QAClB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,CAA6C,OAAU,EAAE,EAAK;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;CACF"}