@uniforge/core 0.1.0-alpha.2

package/dist/webhooks/index.mjs

@@ -0,0 +1,348 @@
+// src/webhooks/validator.ts
+import { createHmac, timingSafeEqual } from "crypto";
+function createWebhookValidator() {
+  return {
+    validate(request) {
+      const computed = createHmac("sha256", request.secret).update(request.rawBody).digest("base64");
+      const computedBuf = Buffer.from(computed, "utf-8");
+      const receivedBuf = Buffer.from(request.hmac, "utf-8");
+      if (computedBuf.length !== receivedBuf.length) {
+        return false;
+      }
+      return timingSafeEqual(computedBuf, receivedBuf);
+    }
+  };
+}
+
+// src/webhooks/queue.ts
+import { randomUUID } from "crypto";
+var DEFAULT_MAX_ATTEMPTS = 5;
+var DEFAULT_BASE_RETRY_DELAY_MS = 1e3;
+var DEFAULT_MAX_RETRY_DELAY_MS = 3e5;
+var DEFAULT_KEY_PREFIX = "uniforge:webhook:";
+function createWebhookQueue(redis, config) {
+  const maxAttempts = config?.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;
+  const baseRetryDelayMs = config?.baseRetryDelayMs ?? DEFAULT_BASE_RETRY_DELAY_MS;
+  const maxRetryDelayMs = config?.maxRetryDelayMs ?? DEFAULT_MAX_RETRY_DELAY_MS;
+  const prefix = config?.keyPrefix ?? DEFAULT_KEY_PREFIX;
+  const jobKey = (id) => `${prefix}job:${id}`;
+  const pendingKey = `${prefix}pending`;
+  const deadKey = `${prefix}dead`;
+  function serializeJob(job) {
+    return JSON.stringify({
+      ...job,
+      payload: {
+        ...job.payload,
+        timestamp: job.payload.timestamp.toISOString()
+      },
+      createdAt: job.createdAt.toISOString(),
+      updatedAt: job.updatedAt.toISOString(),
+      ...job.nextRetryAt ? { nextRetryAt: job.nextRetryAt.toISOString() } : {}
+    });
+  }
+  function deserializeJob(raw) {
+    const data = JSON.parse(raw);
+    const payload = data["payload"];
+    const result = {
+      id: data["id"],
+      payload: {
+        topic: payload["topic"],
+        shopDomain: payload["shopDomain"],
+        apiVersion: payload["apiVersion"],
+        payload: payload["payload"],
+        webhookId: payload["webhookId"],
+        timestamp: new Date(payload["timestamp"])
+      },
+      status: data["status"],
+      attempts: data["attempts"],
+      maxAttempts: data["maxAttempts"],
+      createdAt: new Date(data["createdAt"]),
+      updatedAt: new Date(data["updatedAt"])
+    };
+    if (data["lastError"]) {
+      result.lastError = data["lastError"];
+    }
+    if (data["nextRetryAt"]) {
+      result.nextRetryAt = new Date(data["nextRetryAt"]);
+    }
+    return result;
+  }
+  return {
+    async enqueue(payload) {
+      const id = randomUUID();
+      const now = /* @__PURE__ */ new Date();
+      const job = {
+        id,
+        payload,
+        status: "pending",
+        attempts: 0,
+        maxAttempts,
+        createdAt: now,
+        updatedAt: now
+      };
+      await redis.set(jobKey(id), serializeJob(job));
+      await redis.zadd(pendingKey, Date.now(), id);
+      return id;
+    },
+    async dequeueNext() {
+      const now = Date.now();
+      const results = await redis.zrangebyscore(pendingKey, "-inf", now, "LIMIT", 0, 1);
+      if (results.length === 0) {
+        return void 0;
+      }
+      const id = results[0];
+      const removed = await redis.zrem(pendingKey, id);
+      if (removed === 0) {
+        return void 0;
+      }
+      const raw = await redis.get(jobKey(id));
+      if (!raw) {
+        return void 0;
+      }
+      const job = deserializeJob(raw);
+      job.status = "processing";
+      job.updatedAt = /* @__PURE__ */ new Date();
+      await redis.set(jobKey(id), serializeJob(job));
+      return job;
+    },
+    async getJob(jobId) {
+      const raw = await redis.get(jobKey(jobId));
+      if (!raw) {
+        return void 0;
+      }
+      return deserializeJob(raw);
+    },
+    async acknowledgeJob(jobId, result) {
+      const raw = await redis.get(jobKey(jobId));
+      if (!raw) {
+        return;
+      }
+      const job = deserializeJob(raw);
+      job.status = result.success ? "completed" : "failed";
+      job.updatedAt = /* @__PURE__ */ new Date();
+      if (result.error) {
+        job.lastError = result.error;
+      }
+      await redis.set(jobKey(jobId), serializeJob(job));
+      await redis.zrem(pendingKey, jobId);
+    },
+    async requeueJob(jobId, error) {
+      const raw = await redis.get(jobKey(jobId));
+      if (!raw) {
+        return;
+      }
+      const job = deserializeJob(raw);
+      job.attempts += 1;
+      job.lastError = error;
+      job.updatedAt = /* @__PURE__ */ new Date();
+      if (job.attempts >= job.maxAttempts) {
+        job.status = "dead";
+        await redis.set(jobKey(jobId), serializeJob(job));
+        await redis.zrem(pendingKey, jobId);
+        await redis.zadd(deadKey, Date.now(), jobId);
+        return;
+      }
+      const delay = Math.min(
+        baseRetryDelayMs * Math.pow(2, job.attempts - 1),
+        maxRetryDelayMs
+      );
+      const nextRetryAt = Date.now() + delay;
+      job.status = "pending";
+      job.nextRetryAt = new Date(nextRetryAt);
+      await redis.set(jobKey(jobId), serializeJob(job));
+      await redis.zadd(pendingKey, nextRetryAt, jobId);
+    },
+    async getDeadLetterJobs(limit = 100) {
+      const ids = await redis.zrange(deadKey, 0, limit - 1);
+      const jobs = [];
+      for (const id of ids) {
+        const raw = await redis.get(jobKey(id));
+        if (raw) {
+          jobs.push(deserializeJob(raw));
+        }
+      }
+      return jobs;
+    }
+  };
+}
+
+// src/webhooks/registry.ts
+function createWebhookRegistry() {
+  const handlers = /* @__PURE__ */ new Map();
+  return {
+    register(topic, handler) {
+      handlers.set(topic, handler);
+    },
+    unregister(topic) {
+      handlers.delete(topic);
+    },
+    getHandler(topic) {
+      return handlers.get(topic);
+    },
+    listTopics() {
+      return [...handlers.keys()];
+    }
+  };
+}
+
+// src/webhooks/processor.ts
+var DEFAULT_POLL_INTERVAL_MS = 1e3;
+function createWebhookProcessor(queue, handlers, config) {
+  const pollIntervalMs = config?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  let intervalId;
+  function getHandler(topic) {
+    if (handlers instanceof Map) {
+      return handlers.get(topic);
+    }
+    return handlers.getHandler(topic);
+  }
+  return {
+    async processNext() {
+      const job = await queue.dequeueNext();
+      if (!job) {
+        return false;
+      }
+      const handler = getHandler(job.payload.topic);
+      if (!handler) {
+        await queue.acknowledgeJob(job.id, {
+          success: false,
+          error: `No handler registered for topic: ${job.payload.topic}`
+        });
+        return true;
+      }
+      try {
+        const result = await handler.handle(job.payload);
+        if (result.success) {
+          await queue.acknowledgeJob(job.id, result);
+        } else {
+          await queue.requeueJob(job.id, result.error ?? "Handler returned failure");
+        }
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        await queue.requeueJob(job.id, message);
+      }
+      return true;
+    },
+    start() {
+      if (intervalId) {
+        return;
+      }
+      intervalId = setInterval(async () => {
+        try {
+          await this.processNext();
+        } catch {
+        }
+      }, pollIntervalMs);
+    },
+    stop() {
+      if (intervalId) {
+        clearInterval(intervalId);
+        intervalId = void 0;
+      }
+    }
+  };
+}
+
+// src/webhooks/gdpr.ts
+function createGdprHandlers(handler) {
+  const handlers = /* @__PURE__ */ new Map();
+  handlers.set("customers/data_request", {
+    async handle(webhookPayload) {
+      try {
+        await handler.handleDataRequest(webhookPayload.payload);
+        return { success: true };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { success: false, error: message };
+      }
+    }
+  });
+  handlers.set("customers/redact", {
+    async handle(webhookPayload) {
+      try {
+        await handler.handleCustomerRedact(webhookPayload.payload);
+        return { success: true };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { success: false, error: message };
+      }
+    }
+  });
+  handlers.set("shop/redact", {
+    async handle(webhookPayload) {
+      try {
+        await handler.handleShopRedact(webhookPayload.payload);
+        return { success: true };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { success: false, error: message };
+      }
+    }
+  });
+  return handlers;
+}
+
+// src/webhooks/middleware.ts
+function createWebhookMiddleware(config) {
+  const { validator, secret, registry, queue } = config;
+  return {
+    async processWebhook(request) {
+      const hmac = request.headers["x-shopify-hmac-sha256"];
+      const topic = request.headers["x-shopify-topic"];
+      const shopDomain = request.headers["x-shopify-shop-domain"];
+      const apiVersion = request.headers["x-shopify-api-version"];
+      const webhookId = request.headers["x-shopify-webhook-id"];
+      if (!hmac || !topic || !shopDomain) {
+        return { statusCode: 401, body: "Missing required webhook headers" };
+      }
+      const isValid = validator.validate({
+        rawBody: request.rawBody,
+        hmac,
+        secret
+      });
+      if (!isValid) {
+        return { statusCode: 401, body: "Invalid HMAC signature" };
+      }
+      const payload = {
+        topic,
+        shopDomain,
+        apiVersion: apiVersion ?? "",
+        payload: JSON.parse(request.rawBody.toString("utf-8")),
+        webhookId: webhookId ?? "",
+        timestamp: /* @__PURE__ */ new Date()
+      };
+      if (queue) {
+        try {
+          await queue.enqueue(payload);
+          return { statusCode: 200 };
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          return { statusCode: 500, body: `Failed to enqueue webhook: ${message}` };
+        }
+      }
+      const handler = registry.getHandler(topic);
+      if (!handler) {
+        return { statusCode: 404, body: `No handler for topic: ${topic}` };
+      }
+      try {
+        const result = await handler.handle(payload);
+        if (result.success) {
+          return { statusCode: 200 };
+        }
+        return { statusCode: 500, body: result.error ?? "Handler failed" };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { statusCode: 500, body: `Webhook handler error: ${message}` };
+      }
+    }
+  };
+}
+export {
+  createGdprHandlers,
+  createWebhookMiddleware,
+  createWebhookProcessor,
+  createWebhookQueue,
+  createWebhookRegistry,
+  createWebhookValidator
+};
+//# sourceMappingURL=index.mjs.map

package/dist/webhooks/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/webhooks/validator.ts","../../src/webhooks/queue.ts","../../src/webhooks/registry.ts","../../src/webhooks/processor.ts","../../src/webhooks/gdpr.ts","../../src/webhooks/middleware.ts"],"sourcesContent":["/**\n * Webhook HMAC validation.\n *\n * Validates incoming Shopify webhook requests by computing\n * HMAC-SHA256 of the raw body and comparing with the header value.\n * Uses base64 encoding (Shopify webhooks use base64, not hex).\n */\n\nimport { createHmac, timingSafeEqual } from 'node:crypto';\nimport type { WebhookValidator, WebhookValidationRequest } from '@uniforge/platform-core/webhooks';\n\nexport function createWebhookValidator(): WebhookValidator {\n  return {\n    validate(request: WebhookValidationRequest): boolean {\n      const computed = createHmac('sha256', request.secret)\n        .update(request.rawBody)\n        .digest('base64');\n\n      const computedBuf = Buffer.from(computed, 'utf-8');\n      const receivedBuf = Buffer.from(request.hmac, 'utf-8');\n\n      // Buffers must be the same length for timingSafeEqual\n      if (computedBuf.length !== receivedBuf.length) {\n        return false;\n      }\n\n      return timingSafeEqual(computedBuf, receivedBuf);\n    },\n  };\n}\n","/**\n * Redis-backed webhook queue.\n *\n * Stores webhook jobs in Redis with sorted sets for ordered processing.\n * Supports exponential backoff retries and dead letter queue.\n */\n\nimport { randomUUID } from 'node:crypto';\nimport type Redis from 'ioredis';\nimport type {\n  WebhookQueue,\n  WebhookJob,\n  WebhookJobStatus,\n  WebhookQueueConfig,\n  WebhookHandlerResult,\n} from '@uniforge/platform-core/webhooks';\nimport type { WebhookPayload } from '@uniforge/platform-core/webhooks';\n\nconst DEFAULT_MAX_ATTEMPTS = 5;\nconst DEFAULT_BASE_RETRY_DELAY_MS = 1000;\nconst DEFAULT_MAX_RETRY_DELAY_MS = 300_000;\nconst DEFAULT_KEY_PREFIX = 'uniforge:webhook:';\n\nexport function createWebhookQueue(\n  redis: Redis,\n  config?: WebhookQueueConfig,\n): WebhookQueue {\n  const maxAttempts = config?.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;\n  const baseRetryDelayMs = config?.baseRetryDelayMs ?? DEFAULT_BASE_RETRY_DELAY_MS;\n  const maxRetryDelayMs = config?.maxRetryDelayMs ?? DEFAULT_MAX_RETRY_DELAY_MS;\n  const prefix = config?.keyPrefix ?? DEFAULT_KEY_PREFIX;\n\n  const jobKey = (id: string) => `${prefix}job:${id}`;\n  const pendingKey = `${prefix}pending`;\n  const deadKey = `${prefix}dead`;\n\n  function serializeJob(job: WebhookJob): string {\n    return JSON.stringify({\n      ...job,\n      payload: {\n        ...job.payload,\n        timestamp: job.payload.timestamp.toISOString(),\n      },\n      createdAt: job.createdAt.toISOString(),\n      updatedAt: job.updatedAt.toISOString(),\n      ...(job.nextRetryAt ? { nextRetryAt: job.nextRetryAt.toISOString() } : {}),\n    });\n  }\n\n  function deserializeJob(raw: string): WebhookJob {\n    const data = JSON.parse(raw) as Record<string, unknown>;\n    const payload = data['payload'] as Record<string, unknown>;\n    const result: WebhookJob = {\n      id: data['id'] as string,\n      payload: {\n        topic: payload['topic'] as string,\n        shopDomain: payload['shopDomain'] as string,\n        apiVersion: payload['apiVersion'] as string,\n        payload: payload['payload'],\n        webhookId: payload['webhookId'] as string,\n        timestamp: new Date(payload['timestamp'] as string),\n      },\n      status: data['status'] as WebhookJobStatus,\n      attempts: data['attempts'] as number,\n      maxAttempts: data['maxAttempts'] as number,\n      createdAt: new Date(data['createdAt'] as string),\n      updatedAt: new Date(data['updatedAt'] as string),\n    };\n    if (data['lastError']) {\n      result.lastError = data['lastError'] as string;\n    }\n    if (data['nextRetryAt']) {\n      result.nextRetryAt = new Date(data['nextRetryAt'] as string);\n    }\n    return result;\n  }\n\n  return {\n    async enqueue(payload: WebhookPayload): Promise<string> {\n      const id = randomUUID();\n      const now = new Date();\n      const job: WebhookJob = {\n        id,\n        payload,\n        status: 'pending',\n        attempts: 0,\n        maxAttempts,\n        createdAt: now,\n        updatedAt: now,\n      };\n\n      await redis.set(jobKey(id), serializeJob(job));\n      await redis.zadd(pendingKey, Date.now(), id);\n\n      return id;\n    },\n\n    async dequeueNext(): Promise<WebhookJob | undefined> {\n      const now = Date.now();\n      // Get jobs that are ready to process (score <= now)\n      const results = await redis.zrangebyscore(pendingKey, '-inf', now, 'LIMIT', 0, 1);\n      if (results.length === 0) {\n        return undefined;\n      }\n\n      const id = results[0]!;\n      // Remove from pending set atomically\n      const removed = await redis.zrem(pendingKey, id);\n      if (removed === 0) {\n        // Another consumer took it\n        return undefined;\n      }\n\n      const raw = await redis.get(jobKey(id));\n      if (!raw) {\n        return undefined;\n      }\n\n      const job = deserializeJob(raw);\n      job.status = 'processing';\n      job.updatedAt = new Date();\n      await redis.set(jobKey(id), serializeJob(job));\n\n      return job;\n    },\n\n    async getJob(jobId: string): Promise<WebhookJob | undefined> {\n      const raw = await redis.get(jobKey(jobId));\n      if (!raw) {\n        return undefined;\n      }\n      return deserializeJob(raw);\n    },\n\n    async acknowledgeJob(jobId: string, result: WebhookHandlerResult): Promise<void> {\n      const raw = await redis.get(jobKey(jobId));\n      if (!raw) {\n        return;\n      }\n\n      const job = deserializeJob(raw);\n      job.status = result.success ? 'completed' : 'failed';\n      job.updatedAt = new Date();\n      if (result.error) {\n        job.lastError = result.error;\n      }\n\n      await redis.set(jobKey(jobId), serializeJob(job));\n      await redis.zrem(pendingKey, jobId);\n    },\n\n    async requeueJob(jobId: string, error: string): Promise<void> {\n      const raw = await redis.get(jobKey(jobId));\n      if (!raw) {\n        return;\n      }\n\n      const job = deserializeJob(raw);\n      job.attempts += 1;\n      job.lastError = error;\n      job.updatedAt = new Date();\n\n      if (job.attempts >= job.maxAttempts) {\n        job.status = 'dead';\n        await redis.set(jobKey(jobId), serializeJob(job));\n        await redis.zrem(pendingKey, jobId);\n        await redis.zadd(deadKey, Date.now(), jobId);\n        return;\n      }\n\n      // Exponential backoff: baseDelay * 2^(attempts - 1), capped at maxDelay\n      const delay = Math.min(\n        baseRetryDelayMs * Math.pow(2, job.attempts - 1),\n        maxRetryDelayMs,\n      );\n      const nextRetryAt = Date.now() + delay;\n      job.status = 'pending';\n      job.nextRetryAt = new Date(nextRetryAt);\n\n      await redis.set(jobKey(jobId), serializeJob(job));\n      await redis.zadd(pendingKey, nextRetryAt, jobId);\n    },\n\n    async getDeadLetterJobs(limit = 100): Promise<WebhookJob[]> {\n      const ids = await redis.zrange(deadKey, 0, limit - 1);\n      const jobs: WebhookJob[] = [];\n\n      for (const id of ids) {\n        const raw = await redis.get(jobKey(id));\n        if (raw) {\n          jobs.push(deserializeJob(raw));\n        }\n      }\n\n      return jobs;\n    },\n  };\n}\n","/**\n * Webhook handler registry.\n *\n * A simple in-memory registry mapping webhook topics to their handlers.\n */\n\nimport type { WebhookHandler } from '@uniforge/platform-core/webhooks';\n\nexport interface WebhookRegistry {\n  register(topic: string, handler: WebhookHandler): void;\n  unregister(topic: string): void;\n  getHandler(topic: string): WebhookHandler | undefined;\n  listTopics(): string[];\n}\n\nexport function createWebhookRegistry(): WebhookRegistry {\n  const handlers = new Map<string, WebhookHandler>();\n\n  return {\n    register(topic: string, handler: WebhookHandler): void {\n      handlers.set(topic, handler);\n    },\n\n    unregister(topic: string): void {\n      handlers.delete(topic);\n    },\n\n    getHandler(topic: string): WebhookHandler | undefined {\n      return handlers.get(topic);\n    },\n\n    listTopics(): string[] {\n      return [...handlers.keys()];\n    },\n  };\n}\n","/**\n * Webhook queue processor.\n *\n * Polls the webhook queue for pending jobs and dispatches them\n * to the appropriate handler. Handles success/failure and requeue.\n */\n\nimport type { WebhookQueue, WebhookHandler } from '@uniforge/platform-core/webhooks';\nimport type { WebhookRegistry } from './registry';\n\nexport interface WebhookProcessorConfig {\n  pollIntervalMs?: number;\n}\n\nexport interface WebhookProcessor {\n  processNext(): Promise<boolean>;\n  start(): void;\n  stop(): void;\n}\n\nconst DEFAULT_POLL_INTERVAL_MS = 1000;\n\nexport function createWebhookProcessor(\n  queue: WebhookQueue,\n  handlers: Map<string, WebhookHandler> | WebhookRegistry,\n  config?: WebhookProcessorConfig,\n): WebhookProcessor {\n  const pollIntervalMs = config?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n  let intervalId: ReturnType<typeof setInterval> | undefined;\n\n  function getHandler(topic: string): WebhookHandler | undefined {\n    if (handlers instanceof Map) {\n      return handlers.get(topic);\n    }\n    return handlers.getHandler(topic);\n  }\n\n  return {\n    async processNext(): Promise<boolean> {\n      const job = await queue.dequeueNext();\n      if (!job) {\n        return false;\n      }\n\n      const handler = getHandler(job.payload.topic);\n      if (!handler) {\n        await queue.acknowledgeJob(job.id, {\n          success: false,\n          error: `No handler registered for topic: ${job.payload.topic}`,\n        });\n        return true;\n      }\n\n      try {\n        const result = await handler.handle(job.payload);\n        if (result.success) {\n          await queue.acknowledgeJob(job.id, result);\n        } else {\n          await queue.requeueJob(job.id, result.error ?? 'Handler returned failure');\n        }\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        await queue.requeueJob(job.id, message);\n      }\n\n      return true;\n    },\n\n    start(): void {\n      if (intervalId) {\n        return;\n      }\n      intervalId = setInterval(async () => {\n        try {\n          await this.processNext();\n        } catch {\n          // Swallow polling errors to avoid crashing the processor\n        }\n      }, pollIntervalMs);\n    },\n\n    stop(): void {\n      if (intervalId) {\n        clearInterval(intervalId);\n        intervalId = undefined;\n      }\n    },\n  };\n}\n","/**\n * GDPR webhook helpers.\n *\n * Wraps a GdprHandler implementation into standard WebhookHandler\n * entries that can be registered with the webhook registry.\n */\n\nimport type {\n  GdprHandler,\n  CustomersDataRequest,\n  CustomersRedact,\n  ShopRedact,\n  WebhookHandler,\n} from '@uniforge/platform-core/webhooks';\n\nexport function createGdprHandlers(handler: GdprHandler): Map<string, WebhookHandler> {\n  const handlers = new Map<string, WebhookHandler>();\n\n  handlers.set('customers/data_request', {\n    async handle(webhookPayload) {\n      try {\n        await handler.handleDataRequest(webhookPayload.payload as CustomersDataRequest);\n        return { success: true };\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        return { success: false, error: message };\n      }\n    },\n  });\n\n  handlers.set('customers/redact', {\n    async handle(webhookPayload) {\n      try {\n        await handler.handleCustomerRedact(webhookPayload.payload as CustomersRedact);\n        return { success: true };\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        return { success: false, error: message };\n      }\n    },\n  });\n\n  handlers.set('shop/redact', {\n    async handle(webhookPayload) {\n      try {\n        await handler.handleShopRedact(webhookPayload.payload as ShopRedact);\n        return { success: true };\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        return { success: false, error: message };\n      }\n    },\n  });\n\n  return handlers;\n}\n","/**\n * Webhook middleware.\n *\n * Processes incoming webhook HTTP requests: validates HMAC,\n * extracts headers, and either enqueues for async processing\n * or dispatches synchronously to the handler.\n */\n\nimport type {\n  WebhookValidator,\n  WebhookQueue,\n  WebhookPayload,\n} from '@uniforge/platform-core/webhooks';\nimport type { WebhookRegistry } from './registry';\n\nexport interface WebhookRequest {\n  rawBody: Buffer;\n  headers: Record<string, string>;\n}\n\nexport interface WebhookMiddlewareResult {\n  statusCode: 200 | 401 | 404 | 500;\n  body?: string;\n}\n\nexport interface WebhookMiddlewareConfig {\n  validator: WebhookValidator;\n  secret: string;\n  registry: WebhookRegistry;\n  queue?: WebhookQueue;\n}\n\nexport function createWebhookMiddleware(config: WebhookMiddlewareConfig) {\n  const { validator, secret, registry, queue } = config;\n\n  return {\n    async processWebhook(request: WebhookRequest): Promise<WebhookMiddlewareResult> {\n      const hmac = request.headers['x-shopify-hmac-sha256'];\n      const topic = request.headers['x-shopify-topic'];\n      const shopDomain = request.headers['x-shopify-shop-domain'];\n      const apiVersion = request.headers['x-shopify-api-version'];\n      const webhookId = request.headers['x-shopify-webhook-id'];\n\n      if (!hmac || !topic || !shopDomain) {\n        return { statusCode: 401, body: 'Missing required webhook headers' };\n      }\n\n      const isValid = validator.validate({\n        rawBody: request.rawBody,\n        hmac,\n        secret,\n      });\n\n      if (!isValid) {\n        return { statusCode: 401, body: 'Invalid HMAC signature' };\n      }\n\n      const payload: WebhookPayload = {\n        topic,\n        shopDomain,\n        apiVersion: apiVersion ?? '',\n        payload: JSON.parse(request.rawBody.toString('utf-8')),\n        webhookId: webhookId ?? '',\n        timestamp: new Date(),\n      };\n\n      // Async mode: enqueue and return immediately\n      if (queue) {\n        try {\n          await queue.enqueue(payload);\n          return { statusCode: 200 };\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err);\n          return { statusCode: 500, body: `Failed to enqueue webhook: ${message}` };\n        }\n      }\n\n      // Sync mode: process immediately\n      const handler = registry.getHandler(topic);\n      if (!handler) {\n        return { statusCode: 404, body: `No handler for topic: ${topic}` };\n      }\n\n      try {\n        const result = await handler.handle(payload);\n        if (result.success) {\n          return { statusCode: 200 };\n        }\n        return { statusCode: 500, body: result.error ?? 'Handler failed' };\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        return { statusCode: 500, body: `Webhook handler error: ${message}` };\n      }\n    },\n  };\n}\n"],"mappings":";AAQA,SAAS,YAAY,uBAAuB;AAGrC,SAAS,yBAA2C;AACzD,SAAO;AAAA,IACL,SAAS,SAA4C;AACnD,YAAM,WAAW,WAAW,UAAU,QAAQ,MAAM,EACjD,OAAO,QAAQ,OAAO,EACtB,OAAO,QAAQ;AAElB,YAAM,cAAc,OAAO,KAAK,UAAU,OAAO;AACjD,YAAM,cAAc,OAAO,KAAK,QAAQ,MAAM,OAAO;AAGrD,UAAI,YAAY,WAAW,YAAY,QAAQ;AAC7C,eAAO;AAAA,MACT;AAEA,aAAO,gBAAgB,aAAa,WAAW;AAAA,IACjD;AAAA,EACF;AACF;;;ACtBA,SAAS,kBAAkB;AAW3B,IAAM,uBAAuB;AAC7B,IAAM,8BAA8B;AACpC,IAAM,6BAA6B;AACnC,IAAM,qBAAqB;AAEpB,SAAS,mBACd,OACA,QACc;AACd,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,mBAAmB,QAAQ,oBAAoB;AACrD,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,SAAS,QAAQ,aAAa;AAEpC,QAAM,SAAS,CAAC,OAAe,GAAG,MAAM,OAAO,EAAE;AACjD,QAAM,aAAa,GAAG,MAAM;AAC5B,QAAM,UAAU,GAAG,MAAM;AAEzB,WAAS,aAAa,KAAyB;AAC7C,WAAO,KAAK,UAAU;AAAA,MACpB,GAAG;AAAA,MACH,SAAS;AAAA,QACP,GAAG,IAAI;AAAA,QACP,WAAW,IAAI,QAAQ,UAAU,YAAY;AAAA,MAC/C;AAAA,MACA,WAAW,IAAI,UAAU,YAAY;AAAA,MACrC,WAAW,IAAI,UAAU,YAAY;AAAA,MACrC,GAAI,IAAI,cAAc,EAAE,aAAa,IAAI,YAAY,YAAY,EAAE,IAAI,CAAC;AAAA,IAC1E,CAAC;AAAA,EACH;AAEA,WAAS,eAAe,KAAyB;AAC/C,UAAM,OAAO,KAAK,MAAM,GAAG;AAC3B,UAAM,UAAU,KAAK,SAAS;AAC9B,UAAM,SAAqB;AAAA,MACzB,IAAI,KAAK,IAAI;AAAA,MACb,SAAS;AAAA,QACP,OAAO,QAAQ,OAAO;AAAA,QACtB,YAAY,QAAQ,YAAY;AAAA,QAChC,YAAY,QAAQ,YAAY;AAAA,QAChC,SAAS,QAAQ,SAAS;AAAA,QAC1B,WAAW,QAAQ,WAAW;AAAA,QAC9B,WAAW,IAAI,KAAK,QAAQ,WAAW,CAAW;AAAA,MACpD;AAAA,MACA,QAAQ,KAAK,QAAQ;AAAA,MACrB,UAAU,KAAK,UAAU;AAAA,MACzB,aAAa,KAAK,aAAa;AAAA,MAC/B,WAAW,IAAI,KAAK,KAAK,WAAW,CAAW;AAAA,MAC/C,WAAW,IAAI,KAAK,KAAK,WAAW,CAAW;AAAA,IACjD;AACA,QAAI,KAAK,WAAW,GAAG;AACrB,aAAO,YAAY,KAAK,WAAW;AAAA,IACrC;AACA,QAAI,KAAK,aAAa,GAAG;AACvB,aAAO,cAAc,IAAI,KAAK,KAAK,aAAa,CAAW;AAAA,IAC7D;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM,QAAQ,SAA0C;AACtD,YAAM,KAAK,WAAW;AACtB,YAAM,MAAM,oBAAI,KAAK;AACrB,YAAM,MAAkB;AAAA,QACtB;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,QACR,UAAU;AAAA,QACV;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,MACb;AAEA,YAAM,MAAM,IAAI,OAAO,EAAE,GAAG,aAAa,GAAG,CAAC;AAC7C,YAAM,MAAM,KAAK,YAAY,KAAK,IAAI,GAAG,EAAE;AAE3C,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cAA+C;AACnD,YAAM,MAAM,KAAK,IAAI;AAErB,YAAM,UAAU,MAAM,MAAM,cAAc,YAAY,QAAQ,KAAK,SAAS,GAAG,CAAC;AAChF,UAAI,QAAQ,WAAW,GAAG;AACxB,eAAO;AAAA,MACT;AAEA,YAAM,KAAK,QAAQ,CAAC;AAEpB,YAAM,UAAU,MAAM,MAAM,KAAK,YAAY,EAAE;AAC/C,UAAI,YAAY,GAAG;AAEjB,eAAO;AAAA,MACT;AAEA,YAAM,MAAM,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;AACtC,UAAI,CAAC,KAAK;AACR,eAAO;AAAA,MACT;AAEA,YAAM,MAAM,eAAe,GAAG;AAC9B,UAAI,SAAS;AACb,UAAI,YAAY,oBAAI,KAAK;AACzB,YAAM,MAAM,IAAI,OAAO,EAAE,GAAG,aAAa,GAAG,CAAC;AAE7C,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,OAAgD;AAC3D,YAAM,MAAM,MAAM,MAAM,IAAI,OAAO,KAAK,CAAC;AACzC,UAAI,CAAC,KAAK;AACR,eAAO;AAAA,MACT;AACA,aAAO,eAAe,GAAG;AAAA,IAC3B;AAAA,IAEA,MAAM,eAAe,OAAe,QAA6C;AAC/E,YAAM,MAAM,MAAM,MAAM,IAAI,OAAO,KAAK,CAAC;AACzC,UAAI,CAAC,KAAK;AACR;AAAA,MACF;AAEA,YAAM,MAAM,eAAe,GAAG;AAC9B,UAAI,SAAS,OAAO,UAAU,cAAc;AAC5C,UAAI,YAAY,oBAAI,KAAK;AACzB,UAAI,OAAO,OAAO;AAChB,YAAI,YAAY,OAAO;AAAA,MACzB;AAEA,YAAM,MAAM,IAAI,OAAO,KAAK,GAAG,aAAa,GAAG,CAAC;AAChD,YAAM,MAAM,KAAK,YAAY,KAAK;AAAA,IACpC;AAAA,IAEA,MAAM,WAAW,OAAe,OAA8B;AAC5D,YAAM,MAAM,MAAM,MAAM,IAAI,OAAO,KAAK,CAAC;AACzC,UAAI,CAAC,KAAK;AACR;AAAA,MACF;AAEA,YAAM,MAAM,eAAe,GAAG;AAC9B,UAAI,YAAY;AAChB,UAAI,YAAY;AAChB,UAAI,YAAY,oBAAI,KAAK;AAEzB,UAAI,IAAI,YAAY,IAAI,aAAa;AACnC,YAAI,SAAS;AACb,cAAM,MAAM,IAAI,OAAO,KAAK,GAAG,aAAa,GAAG,CAAC;AAChD,cAAM,MAAM,KAAK,YAAY,KAAK;AAClC,cAAM,MAAM,KAAK,SAAS,KAAK,IAAI,GAAG,KAAK;AAC3C;AAAA,MACF;AAGA,YAAM,QAAQ,KAAK;AAAA,QACjB,mBAAmB,KAAK,IAAI,GAAG,IAAI,WAAW,CAAC;AAAA,QAC/C;AAAA,MACF;AACA,YAAM,cAAc,KAAK,IAAI,IAAI;AACjC,UAAI,SAAS;AACb,UAAI,cAAc,IAAI,KAAK,WAAW;AAEtC,YAAM,MAAM,IAAI,OAAO,KAAK,GAAG,aAAa,GAAG,CAAC;AAChD,YAAM,MAAM,KAAK,YAAY,aAAa,KAAK;AAAA,IACjD;AAAA,IAEA,MAAM,kBAAkB,QAAQ,KAA4B;AAC1D,YAAM,MAAM,MAAM,MAAM,OAAO,SAAS,GAAG,QAAQ,CAAC;AACpD,YAAM,OAAqB,CAAC;AAE5B,iBAAW,MAAM,KAAK;AACpB,cAAM,MAAM,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;AACtC,YAAI,KAAK;AACP,eAAK,KAAK,eAAe,GAAG,CAAC;AAAA,QAC/B;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;ACtLO,SAAS,wBAAyC;AACvD,QAAM,WAAW,oBAAI,IAA4B;AAEjD,SAAO;AAAA,IACL,SAAS,OAAe,SAA+B;AACrD,eAAS,IAAI,OAAO,OAAO;AAAA,IAC7B;AAAA,IAEA,WAAW,OAAqB;AAC9B,eAAS,OAAO,KAAK;AAAA,IACvB;AAAA,IAEA,WAAW,OAA2C;AACpD,aAAO,SAAS,IAAI,KAAK;AAAA,IAC3B;AAAA,IAEA,aAAuB;AACrB,aAAO,CAAC,GAAG,SAAS,KAAK,CAAC;AAAA,IAC5B;AAAA,EACF;AACF;;;ACfA,IAAM,2BAA2B;AAE1B,SAAS,uBACd,OACA,UACA,QACkB;AAClB,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,MAAI;AAEJ,WAAS,WAAW,OAA2C;AAC7D,QAAI,oBAAoB,KAAK;AAC3B,aAAO,SAAS,IAAI,KAAK;AAAA,IAC3B;AACA,WAAO,SAAS,WAAW,KAAK;AAAA,EAClC;AAEA,SAAO;AAAA,IACL,MAAM,cAAgC;AACpC,YAAM,MAAM,MAAM,MAAM,YAAY;AACpC,UAAI,CAAC,KAAK;AACR,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,WAAW,IAAI,QAAQ,KAAK;AAC5C,UAAI,CAAC,SAAS;AACZ,cAAM,MAAM,eAAe,IAAI,IAAI;AAAA,UACjC,SAAS;AAAA,UACT,OAAO,oCAAoC,IAAI,QAAQ,KAAK;AAAA,QAC9D,CAAC;AACD,eAAO;AAAA,MACT;AAEA,UAAI;AACF,cAAM,SAAS,MAAM,QAAQ,OAAO,IAAI,OAAO;AAC/C,YAAI,OAAO,SAAS;AAClB,gBAAM,MAAM,eAAe,IAAI,IAAI,MAAM;AAAA,QAC3C,OAAO;AACL,gBAAM,MAAM,WAAW,IAAI,IAAI,OAAO,SAAS,0BAA0B;AAAA,QAC3E;AAAA,MACF,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,cAAM,MAAM,WAAW,IAAI,IAAI,OAAO;AAAA,MACxC;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,QAAc;AACZ,UAAI,YAAY;AACd;AAAA,MACF;AACA,mBAAa,YAAY,YAAY;AACnC,YAAI;AACF,gBAAM,KAAK,YAAY;AAAA,QACzB,QAAQ;AAAA,QAER;AAAA,MACF,GAAG,cAAc;AAAA,IACnB;AAAA,IAEA,OAAa;AACX,UAAI,YAAY;AACd,sBAAc,UAAU;AACxB,qBAAa;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;;;ACzEO,SAAS,mBAAmB,SAAmD;AACpF,QAAM,WAAW,oBAAI,IAA4B;AAEjD,WAAS,IAAI,0BAA0B;AAAA,IACrC,MAAM,OAAO,gBAAgB;AAC3B,UAAI;AACF,cAAM,QAAQ,kBAAkB,eAAe,OAA+B;AAC9E,eAAO,EAAE,SAAS,KAAK;AAAA,MACzB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,EAAE,SAAS,OAAO,OAAO,QAAQ;AAAA,MAC1C;AAAA,IACF;AAAA,EACF,CAAC;AAED,WAAS,IAAI,oBAAoB;AAAA,IAC/B,MAAM,OAAO,gBAAgB;AAC3B,UAAI;AACF,cAAM,QAAQ,qBAAqB,eAAe,OAA0B;AAC5E,eAAO,EAAE,SAAS,KAAK;AAAA,MACzB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,EAAE,SAAS,OAAO,OAAO,QAAQ;AAAA,MAC1C;AAAA,IACF;AAAA,EACF,CAAC;AAED,WAAS,IAAI,eAAe;AAAA,IAC1B,MAAM,OAAO,gBAAgB;AAC3B,UAAI;AACF,cAAM,QAAQ,iBAAiB,eAAe,OAAqB;AACnE,eAAO,EAAE,SAAS,KAAK;AAAA,MACzB,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,EAAE,SAAS,OAAO,OAAO,QAAQ;AAAA,MAC1C;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AACT;;;ACvBO,SAAS,wBAAwB,QAAiC;AACvE,QAAM,EAAE,WAAW,QAAQ,UAAU,MAAM,IAAI;AAE/C,SAAO;AAAA,IACL,MAAM,eAAe,SAA2D;AAC9E,YAAM,OAAO,QAAQ,QAAQ,uBAAuB;AACpD,YAAM,QAAQ,QAAQ,QAAQ,iBAAiB;AAC/C,YAAM,aAAa,QAAQ,QAAQ,uBAAuB;AAC1D,YAAM,aAAa,QAAQ,QAAQ,uBAAuB;AAC1D,YAAM,YAAY,QAAQ,QAAQ,sBAAsB;AAExD,UAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY;AAClC,eAAO,EAAE,YAAY,KAAK,MAAM,mCAAmC;AAAA,MACrE;AAEA,YAAM,UAAU,UAAU,SAAS;AAAA,QACjC,SAAS,QAAQ;AAAA,QACjB;AAAA,QACA;AAAA,MACF,CAAC;AAED,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE,YAAY,KAAK,MAAM,yBAAyB;AAAA,MAC3D;AAEA,YAAM,UAA0B;AAAA,QAC9B;AAAA,QACA;AAAA,QACA,YAAY,cAAc;AAAA,QAC1B,SAAS,KAAK,MAAM,QAAQ,QAAQ,SAAS,OAAO,CAAC;AAAA,QACrD,WAAW,aAAa;AAAA,QACxB,WAAW,oBAAI,KAAK;AAAA,MACtB;AAGA,UAAI,OAAO;AACT,YAAI;AACF,gBAAM,MAAM,QAAQ,OAAO;AAC3B,iBAAO,EAAE,YAAY,IAAI;AAAA,QAC3B,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,iBAAO,EAAE,YAAY,KAAK,MAAM,8BAA8B,OAAO,GAAG;AAAA,QAC1E;AAAA,MACF;AAGA,YAAM,UAAU,SAAS,WAAW,KAAK;AACzC,UAAI,CAAC,SAAS;AACZ,eAAO,EAAE,YAAY,KAAK,MAAM,yBAAyB,KAAK,GAAG;AAAA,MACnE;AAEA,UAAI;AACF,cAAM,SAAS,MAAM,QAAQ,OAAO,OAAO;AAC3C,YAAI,OAAO,SAAS;AAClB,iBAAO,EAAE,YAAY,IAAI;AAAA,QAC3B;AACA,eAAO,EAAE,YAAY,KAAK,MAAM,OAAO,SAAS,iBAAiB;AAAA,MACnE,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAO,EAAE,YAAY,KAAK,MAAM,0BAA0B,OAAO,GAAG;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -0,0 +1,119 @@
+{
+  "name": "@uniforge/core",
+  "version": "0.1.0-alpha.2",
+  "description": "Core framework functionality for UniForge applications",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    },
+    "./auth": {
+      "types": "./dist/auth/index.d.ts",
+      "import": "./dist/auth/index.mjs",
+      "require": "./dist/auth/index.js"
+    },
+    "./multi-tenant": {
+      "types": "./dist/multi-tenant/index.d.ts",
+      "import": "./dist/multi-tenant/index.mjs",
+      "require": "./dist/multi-tenant/index.js"
+    },
+    "./session-storage": {
+      "types": "./dist/session-storage/index.d.ts",
+      "import": "./dist/session-storage/index.mjs",
+      "require": "./dist/session-storage/index.js"
+    },
+    "./database": {
+      "types": "./dist/database/index.d.ts",
+      "import": "./dist/database/index.mjs",
+      "require": "./dist/database/index.js"
+    },
+    "./config": {
+      "types": "./dist/config/index.d.ts",
+      "import": "./dist/config/index.mjs",
+      "require": "./dist/config/index.js"
+    },
+    "./graphql": {
+      "types": "./dist/graphql/index.d.ts",
+      "import": "./dist/graphql/index.mjs",
+      "require": "./dist/graphql/index.js"
+    },
+    "./webhooks": {
+      "types": "./dist/webhooks/index.d.ts",
+      "import": "./dist/webhooks/index.mjs",
+      "require": "./dist/webhooks/index.js"
+    },
+    "./multi-store": {
+      "types": "./dist/multi-store/index.d.ts",
+      "import": "./dist/multi-store/index.mjs",
+      "require": "./dist/multi-store/index.js"
+    },
+    "./rbac": {
+      "types": "./dist/rbac/index.d.ts",
+      "import": "./dist/rbac/index.mjs",
+      "require": "./dist/rbac/index.js"
+    },
+    "./billing": {
+      "types": "./dist/billing/index.d.ts",
+      "import": "./dist/billing/index.mjs",
+      "require": "./dist/billing/index.js"
+    },
+    "./platform": {
+      "types": "./dist/platform/index.d.ts",
+      "import": "./dist/platform/index.mjs",
+      "require": "./dist/platform/index.js"
+    },
+    "./security": {
+      "types": "./dist/security/index.d.ts",
+      "import": "./dist/security/index.mjs",
+      "require": "./dist/security/index.js"
+    },
+    "./performance": {
+      "types": "./dist/performance/index.d.ts",
+      "import": "./dist/performance/index.mjs",
+      "require": "./dist/performance/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@prisma/client": "^5",
+    "ioredis": "^5",
+    "@uniforge/platform-core": "^0.1.0-alpha.2"
+  },
+  "devDependencies": {
+    "prisma": "^5",
+    "tsup": "^8.3.0",
+    "vitest": "^2.1.0",
+    "@uniforge/testing": "^0.1.0-alpha.2"
+  },
+  "keywords": [
+    "uniforge",
+    "core",
+    "e-commerce",
+    "shopify"
+  ],
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/uniprocessing/uniforge.git",
+    "directory": "packages/core"
+  },
+  "scripts": {
+    "build": "prisma generate && tsup",
+    "db:generate": "prisma generate",
+    "db:migrate": "prisma migrate dev",
+    "db:push": "prisma db push",
+    "dev": "tsup --watch",
+    "test": "vitest",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit"
+  }
+}