@usequeek/app-sdk 0.4.0

package/dist/frame.js

@@ -0,0 +1,56 @@
+/**
+ * Framed-page handshake client (S4 stage 2): the browser-safe half of the
+ * dashboard bridge. Carries NO secret and performs NO verification — it only
+ * shapes and addresses messages. The dashboard (queek-merchant) enforces
+ * origin+source binding and mints tokens; the app backend verifies them via
+ * `./server` (`verifySessionToken`).
+ *
+ * DOM-free by design (structural minimal types): the app passes its own
+ * window/parent in, so this module needs no DOM lib and stays import-safe
+ * in edge runtimes.
+ */
+export const DASHBOARD_SOURCE = "queek-merchant";
+export const APP_SOURCE = "queek-app";
+function isInbound(data) {
+    if (!data || typeof data !== "object") {
+        return false;
+    }
+    const message = data;
+    if (message.source !== DASHBOARD_SOURCE || typeof message.type !== "string") {
+        return false;
+    }
+    if (message.type === "token") {
+        return typeof message.token === "string" && message.token.length > 0;
+    }
+    return message.type === "resize-ack";
+}
+/**
+ * Listen for dashboard messages, accepting only the exact dashboard
+ * origin. Returns an unsubscribe function. Never touches any secret.
+ */
+export function listenToDashboard(options) {
+    const { dashboardOrigin, onToken, onResizeAck } = options;
+    const target = options.target;
+    const onMessage = (event) => {
+        if (event.origin !== dashboardOrigin) {
+            return;
+        }
+        if (!isInbound(event.data)) {
+            return;
+        }
+        if (event.data.type === "token") {
+            onToken?.(event.data.token);
+        }
+        else {
+            onResizeAck?.();
+        }
+    };
+    target?.addEventListener("message", onMessage);
+    return () => target?.removeEventListener("message", onMessage);
+}
+/** Announce readiness to the exact dashboard origin — never `"*"`. */
+export function sendReady(dashboardOrigin, target) {
+    const message = { source: APP_SOURCE, type: "ready" };
+    target?.postMessage(message, dashboardOrigin);
+}
+//# sourceMappingURL=frame.js.map

package/dist/frame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame.js","sourceRoot":"","sources":["../src/frame.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AACjD,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC;AAiCtC,SAAS,SAAS,CAAC,IAAa;IAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAA+B,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,gBAAgB,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAE,EAAE;QACtC,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,WAAW,EAAE,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,EAAE,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/C,OAAO,GAAG,EAAE,CAAC,MAAM,EAAE,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,SAAS,CAAC,eAAuB,EAAE,MAAwB;IACzE,MAAM,OAAO,GAAuB,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC1E,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC"}

package/dist/handoff.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Typed payloads for Queek's server-to-server install handoff.
+ *
+ * Source of truth: queek_backend `App\Services\Apps\AppInstallService`
+ * (`installPayload()`, `uninstallPayload()`, `settingsPayload()`,
+ * `handoffBody()`). The signed body envelope is:
+ *
+ *   { id, type, api_version: "v1", created_at, data }
+ *
+ * `type` is `app/installed` | `app/uninstalled` | `app/settings_updated`
+ * | `app/resync`. The handoff POST carries the Standard Webhooks headers
+ * (`webhook-id`, `webhook-timestamp`, `webhook-signature`) signed with the
+ * APP's signing secret (`whsec_…`, minted once at `app:register`), NOT the
+ * per-installation webhook secret. The per-installation `webhook_secret`
+ * arrives INSIDE the install payload (`data.webhook_secret`) — once — so
+ * the app can verify the topic events it is about to receive.
+ *
+ * `app/resync` is the installation resync handoff (backend
+ * `AppInstallService::resyncPayload()`, delivered to the app's
+ * `settings_url` falling back to `install_url`): the install-shaped data
+ * plus the resync-only `secret_rotated` flag, over the same signed channel
+ * with the same verification rules. Both the `/install` and `/settings`
+ * handlers accept it.
+ */
+export declare const INSTALL_EVENT = "app/installed";
+export declare const UNINSTALL_EVENT = "app/uninstalled";
+export declare const SETTINGS_EVENT = "app/settings_updated";
+export declare const RESYNC_EVENT = "app/resync";
+export interface HandoffInstallationRef {
+    id: string;
+    p_id: string;
+}
+export interface HandoffStore {
+    id: string;
+    p_id: string | null;
+    name: string;
+    is_test: boolean;
+}
+export interface InstallData {
+    installation: HandoffInstallationRef;
+    store: HandoffStore;
+    /** The Merchant API base for this store (e.g. https://api.usequeek.com/api/v1/merchant). */
+    api_base: string;
+    /**
+     * No store-callable credential crosses the handoff any more (S1, SDK
+     * 0.2.0): the app mints short-lived installation tokens with its
+     * asymmetric app key (`acquireToken()`) and caches them encrypted in its
+     * own database. The same envelope redelivers `webhook_secret` + the
+     * non-secret settings snapshot on resync.
+     */
+    scopes: string[];
+    settings: Record<string, unknown>;
+    /** The installation endpoint's `whsec_…` secret, handed over ONCE per rotation. */
+    webhook_secret: string | null;
+    /**
+     * The installation's `whsec_…` proxy secret (backend `proxy_secret`),
+     * handed over ONCE per install/resync over the signed channel. The
+     * booking app signs slot-claims with it; core verifies the HMAC
+     * against the same installation secret. Null for apps without a
+     * proxy — the key's absence is the signal. Source of truth:
+     * queek_backend `App\Services\Apps\AppInstallService::installPayload()`.
+     */
+    proxy_secret: string | null;
+    /**
+     * The installation's `embsec_…` embed secret (backend `embed_secret`),
+     * handed over on install/resync: the HS256 key of the dashboard session
+     * tokens its embedded merchant page receives (verify with
+     * `@usequeek/app-sdk/server` `verifySessionToken`). Null for apps
+     * without a merchant page.
+     */
+    embed_secret?: string | null;
+    /**
+     * The app's own id, exactly as the session token signs it (`app_id`
+     * claim) — the verifier binds it. Source of truth: queek_backend
+     * `AppInstallService::installPayload()` / `resyncPayload()`.
+     */
+    app_id?: string | null;
+    webhook_url: string | null;
+    webhook_topics: string[];
+    /**
+     * Resync-only (backend `resyncPayload()`): whether the delivery rotated
+     * the endpoint secret (`webhook_secret` holds the new secret when true,
+     * null when the installation has no webhook endpoint). Absent on install.
+     */
+    secret_rotated?: boolean | null;
+}
+export interface UninstallData {
+    installation: HandoffInstallationRef;
+    store: HandoffStore;
+}
+export interface SettingsData {
+    installation: HandoffInstallationRef;
+    store: HandoffStore | null;
+    settings: Record<string, unknown>;
+}
+export interface HandoffEnvelope<TType extends string, TData> {
+    id: string;
+    type: TType;
+    api_version: "v1";
+    created_at: string;
+    data: TData;
+}
+export type InstallEnvelope = HandoffEnvelope<typeof INSTALL_EVENT, InstallData>;
+export type UninstallEnvelope = HandoffEnvelope<typeof UNINSTALL_EVENT, UninstallData>;
+export type SettingsEnvelope = HandoffEnvelope<typeof SETTINGS_EVENT, SettingsData>;
+/**
+ * The installation resync handoff: the install-shaped data (plus the
+ * resync-only `secret_rotated` flag) under `type: app/resync`. Handled by
+ * the install AND settings handlers via the resync merge path.
+ */
+export type ResyncEnvelope = HandoffEnvelope<typeof RESYNC_EVENT, InstallData>;
+export type HandoffEnvelopeAny = InstallEnvelope | UninstallEnvelope | SettingsEnvelope | ResyncEnvelope;
+//# sourceMappingURL=handoff.d.ts.map

package/dist/handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.d.ts","sourceRoot":"","sources":["../src/handoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,cAAc,yBAAyB,CAAC;AACrD,eAAO,MAAM,YAAY,eAAe,CAAC;AAEzC,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,sBAAsB,CAAC;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,mFAAmF;IACnF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,sBAAsB,CAAC;IACrC,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,sBAAsB,CAAC;IACrC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe,CAAC,KAAK,SAAS,MAAM,EAAE,KAAK;IAC1D,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,KAAK,CAAC;IACZ,WAAW,EAAE,IAAI,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,KAAK,CAAC;CACb;AAED,MAAM,MAAM,eAAe,GAAG,eAAe,CAAC,OAAO,aAAa,EAAE,WAAW,CAAC,CAAC;AACjF,MAAM,MAAM,iBAAiB,GAAG,eAAe,CAAC,OAAO,eAAe,EAAE,aAAa,CAAC,CAAC;AACvF,MAAM,MAAM,gBAAgB,GAAG,eAAe,CAAC,OAAO,cAAc,EAAE,YAAY,CAAC,CAAC;AACpF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,YAAY,EAAE,WAAW,CAAC,CAAC;AAE/E,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,cAAc,CAAC"}

package/dist/handoff.js

@@ -0,0 +1,29 @@
+/**
+ * Typed payloads for Queek's server-to-server install handoff.
+ *
+ * Source of truth: queek_backend `App\Services\Apps\AppInstallService`
+ * (`installPayload()`, `uninstallPayload()`, `settingsPayload()`,
+ * `handoffBody()`). The signed body envelope is:
+ *
+ *   { id, type, api_version: "v1", created_at, data }
+ *
+ * `type` is `app/installed` | `app/uninstalled` | `app/settings_updated`
+ * | `app/resync`. The handoff POST carries the Standard Webhooks headers
+ * (`webhook-id`, `webhook-timestamp`, `webhook-signature`) signed with the
+ * APP's signing secret (`whsec_…`, minted once at `app:register`), NOT the
+ * per-installation webhook secret. The per-installation `webhook_secret`
+ * arrives INSIDE the install payload (`data.webhook_secret`) — once — so
+ * the app can verify the topic events it is about to receive.
+ *
+ * `app/resync` is the installation resync handoff (backend
+ * `AppInstallService::resyncPayload()`, delivered to the app's
+ * `settings_url` falling back to `install_url`): the install-shaped data
+ * plus the resync-only `secret_rotated` flag, over the same signed channel
+ * with the same verification rules. Both the `/install` and `/settings`
+ * handlers accept it.
+ */
+export const INSTALL_EVENT = "app/installed";
+export const UNINSTALL_EVENT = "app/uninstalled";
+export const SETTINGS_EVENT = "app/settings_updated";
+export const RESYNC_EVENT = "app/resync";
+//# sourceMappingURL=handoff.js.map

package/dist/handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.js","sourceRoot":"","sources":["../src/handoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AACrD,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `@usequeek/app-sdk` — the shared kit every Queek app is built from.
+ *
+ * Queek speaks Standard Webhooks (`webhook-id`, `webhook-timestamp`,
+ * `webhook-signature` over `{id}.{timestamp}.{raw body}`, keyed by the
+ * decoded `whsec_…` bytes) on two channels: the install handoff (signed
+ * with the APP secret) and topic deliveries (signed with the
+ * PER-INSTALLATION endpoint secret). The Merchant API takes the
+ * installation credential as `X-Client-Key`.
+ */
+export { API_KEY_EXPIRED_CODE, API_KEY_REVOKED_CODE, APP_INSTALLATION_GONE_CODE, APP_INSTALLATION_PENDING_CODE, APP_JWT_SKEW_SECONDS, APP_JWT_TTL_SECONDS, APP_TOKEN_REVOKED_CODE, type AppCredential, AppMintHaltedError, INVALID_CLIENT_CODE, INVALID_CLIENT_KEY_CODE, InvalidAppCredentialError, isAppTokenRevoked, isInstallationGone, isInstallationPending, isInvalidClient, isResyncCooldown, isTokenRefusal, loadAppCredential, MAX_MINT_ATTEMPTS, MINT_BACKOFF_BASE_MS, MINT_BACKOFF_MAX_MS, RESYNC_COOLDOWN_CODE, RETRY_JITTER_MAX_MS, type SignAppJwtOptions, signAppJwt, TOKEN_VALIDITY_SKEW_SECONDS, TOO_MANY_REQUESTS_CODE, UnknownInstallationError, } from "./app-auth.js";
+export { backgroundTaskCount, type CatchupFailure, type CatchupInstallation, type CatchupOptions, type CatchupResult, type DetachOptions, detach, runInstallationCatchup, } from "./background.js";
+export { apiHostsFromEnv, createQueekClient, DEFAULT_API_HOSTS, devApiHostsFromEnv, InvalidApiBaseError, MERCHANT_API_PATH, type MerchantPaths, newIdempotencyKey, type OperationResponse, QueekApiError, type QueekClient, type QueekClientOptions, type QueekErrorDetails, queekApiErrorFromResponse, type RequestOptions, type RetryOptions, resolveApiBase, type StoreProfile, } from "./client.js";
+export { type AlertBody, type AlertSeverity, type CollectedDefinition, type CollectedDefinitionCreate, type CollectedDefinitionUpdate, type CollectedField, collectedDefinitions, createRecord, type MerchantAlert, type SetupNotice, type SetupNoticeBody, type SetupNoticeItem, type SetupNoticeStatus, type SuccessEnvelope, sendAlert, setSetupNotice, } from "./collected.js";
+export { decryptSecret, encryptSecret, parseStoreKey, storeKeyFingerprint, } from "./crypto.js";
+export { APP_SOURCE, type AppInboundMessage, type AppOutboundMessage, DASHBOARD_SOURCE, type FrameBridgeOptions, listenToDashboard, sendReady, } from "./frame.js";
+export { type HandoffEnvelope, type HandoffEnvelopeAny, type HandoffInstallationRef, type HandoffStore, INSTALL_EVENT, type InstallData, type InstallEnvelope, RESYNC_EVENT, type ResyncEnvelope, SETTINGS_EVENT, type SettingsData, type SettingsEnvelope, UNINSTALL_EVENT, type UninstallData, type UninstallEnvelope, } from "./handoff.js";
+export { buildInstallationRecord, createInstallHandlers, type InstallCallbacks, type InstallHandlerOptions, saveResyncedInstallation, } from "./install-handlers.js";
+export { createLogger, type LogFields, type Logger, type LoggerOptions, type LogLevel, REDACTED, } from "./logger.js";
+export { type ResyncListItem, type ResyncOptions, type ResyncResult, resyncFromQueek, } from "./resync.js";
+export { MAX_TIMESTAMP_SKEW_SECONDS, SECRET_PREFIX, type SignatureFailure, type SignatureInput, secretKeyBytes, signQueekPayload, type VerifyOptions, verifyQueekSignature, verifyQueekSignatureDetailed, WEBHOOK_ID_HEADER, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_TIMESTAMP_HEADER, } from "./signatures.js";
+export { createInstallationStore, createPostgresPool, INSTALLATION_SCHEMA_VERSION, type InstallationRecord, type InstallationStore, type InstallationStoreSelector, PostgresInstallationStore, type PostgresStoreOptions, SqliteInstallationStore, type SqliteStoreOptions, type WebhookSecretCandidate, } from "./store.js";
+export { APP_API_PATH, AppTokenProvider, type AppTokens, createAppTokenProvider, createInstallationClient, type InstallationClientOptions, mintPath, resolveAppApiBase, type TokenProviderOptions, } from "./tokens.js";
+export { createWebhookHandler, QUEEK_TOPIC_HEADER, type QueekWebhookEnvelope, type SecretResolution, type WebhookHandlerContext, type WebhookHandlerFn, type WebhookHandlerOptions, } from "./webhooks.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,6BAA6B,EAC7B,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,aAAa,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,UAAU,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,MAAM,EACN,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,aAAa,EAClB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,cAAc,EACd,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,EACnB,oBAAoB,EACpB,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,SAAS,EACT,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,aAAa,EACb,aAAa,EACb,aAAa,EACb,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,iBAAiB,EACjB,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EACjB,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,cAAc,EACnB,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,MAAM,EACX,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,QAAQ,GACT,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,aAAa,EACb,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,cAAc,EACd,gBAAgB,EAChB,KAAK,aAAa,EAClB,oBAAoB,EACpB,4BAA4B,EAC5B,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,EAC3B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,KAAK,SAAS,EACd,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,yBAAyB,EAC9B,QAAQ,EACR,iBAAiB,EACjB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,25 @@
+/**
+ * `@usequeek/app-sdk` — the shared kit every Queek app is built from.
+ *
+ * Queek speaks Standard Webhooks (`webhook-id`, `webhook-timestamp`,
+ * `webhook-signature` over `{id}.{timestamp}.{raw body}`, keyed by the
+ * decoded `whsec_…` bytes) on two channels: the install handoff (signed
+ * with the APP secret) and topic deliveries (signed with the
+ * PER-INSTALLATION endpoint secret). The Merchant API takes the
+ * installation credential as `X-Client-Key`.
+ */
+export { API_KEY_EXPIRED_CODE, API_KEY_REVOKED_CODE, APP_INSTALLATION_GONE_CODE, APP_INSTALLATION_PENDING_CODE, APP_JWT_SKEW_SECONDS, APP_JWT_TTL_SECONDS, APP_TOKEN_REVOKED_CODE, AppMintHaltedError, INVALID_CLIENT_CODE, INVALID_CLIENT_KEY_CODE, InvalidAppCredentialError, isAppTokenRevoked, isInstallationGone, isInstallationPending, isInvalidClient, isResyncCooldown, isTokenRefusal, loadAppCredential, MAX_MINT_ATTEMPTS, MINT_BACKOFF_BASE_MS, MINT_BACKOFF_MAX_MS, RESYNC_COOLDOWN_CODE, RETRY_JITTER_MAX_MS, signAppJwt, TOKEN_VALIDITY_SKEW_SECONDS, TOO_MANY_REQUESTS_CODE, UnknownInstallationError, } from "./app-auth.js";
+export { backgroundTaskCount, detach, runInstallationCatchup, } from "./background.js";
+export { apiHostsFromEnv, createQueekClient, DEFAULT_API_HOSTS, devApiHostsFromEnv, InvalidApiBaseError, MERCHANT_API_PATH, newIdempotencyKey, QueekApiError, queekApiErrorFromResponse, resolveApiBase, } from "./client.js";
+export { collectedDefinitions, createRecord, sendAlert, setSetupNotice, } from "./collected.js";
+export { decryptSecret, encryptSecret, parseStoreKey, storeKeyFingerprint, } from "./crypto.js";
+export { APP_SOURCE, DASHBOARD_SOURCE, listenToDashboard, sendReady, } from "./frame.js";
+export { INSTALL_EVENT, RESYNC_EVENT, SETTINGS_EVENT, UNINSTALL_EVENT, } from "./handoff.js";
+export { buildInstallationRecord, createInstallHandlers, saveResyncedInstallation, } from "./install-handlers.js";
+export { createLogger, REDACTED, } from "./logger.js";
+export { resyncFromQueek, } from "./resync.js";
+export { MAX_TIMESTAMP_SKEW_SECONDS, SECRET_PREFIX, secretKeyBytes, signQueekPayload, verifyQueekSignature, verifyQueekSignatureDetailed, WEBHOOK_ID_HEADER, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_TIMESTAMP_HEADER, } from "./signatures.js";
+export { createInstallationStore, createPostgresPool, INSTALLATION_SCHEMA_VERSION, PostgresInstallationStore, SqliteInstallationStore, } from "./store.js";
+export { APP_API_PATH, AppTokenProvider, createAppTokenProvider, createInstallationClient, mintPath, resolveAppApiBase, } from "./tokens.js";
+export { createWebhookHandler, QUEEK_TOPIC_HEADER, } from "./webhooks.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,6BAA6B,EAC7B,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EAEtB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EAEnB,UAAU,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EAMnB,MAAM,EACN,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EAEjB,iBAAiB,EAEjB,aAAa,EAIb,yBAAyB,EAGzB,cAAc,GAEf,MAAM,aAAa,CAAC;AACrB,OAAO,EAOL,oBAAoB,EACpB,YAAY,EAOZ,SAAS,EACT,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,aAAa,EACb,aAAa,EACb,aAAa,EACb,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,UAAU,EAGV,gBAAgB,EAEhB,iBAAiB,EACjB,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EAKL,aAAa,EAGb,YAAY,EAEZ,cAAc,EAGd,eAAe,GAGhB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EAGrB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,YAAY,EAKZ,QAAQ,GACT,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,aAAa,EAGb,cAAc,EACd,gBAAgB,EAEhB,oBAAoB,EACpB,4BAA4B,EAC5B,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,2BAA2B,EAI3B,yBAAyB,EAEzB,uBAAuB,GAGxB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAEhB,sBAAsB,EACtB,wBAAwB,EAExB,QAAQ,EACR,iBAAiB,GAElB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,GAMnB,MAAM,eAAe,CAAC"}

package/dist/install-handlers.d.ts

@@ -0,0 +1,62 @@
+import { Hono } from "hono";
+import { type InstallData, type InstallEnvelope, type SettingsEnvelope, type UninstallEnvelope } from "./handoff.js";
+import type { InstallationRecord, InstallationStore } from "./store.js";
+/**
+ * Hono handlers for Queek's signed server-to-server handoff
+ * (`AppInstallService::deliver()` in queek_backend).
+ *
+ * Every handoff — install, uninstall, settings, resync — carries the
+ * Standard Webhooks headers signed with the APP signing secret (`whsec_…`,
+ * minted once at `app:register`). The app answers 2xx only after the
+ * installation is durably stored; anything else makes Queek revoke the
+ * just-minted key and mark the install failed (retry = a fresh install).
+ *
+ * The resync handoff (`type: app/resync`, backend
+ * `AppInstallService::resyncPayload()`) redelivers the install-shaped data
+ * — rotated `webhook_secret`, non-secret settings, and recovery copies of
+ * `proxy_secret` / `embed_secret` / `app_id` — to the app's `settings_url`,
+ * falling back to `install_url`. Both `/install` and `/settings` accept it
+ * with the same signature/verification rules and apply it via the resync
+ * merge (`saveResyncedInstallation`: refreshes secrets/settings/scopes,
+ * keeps `installedAt` + the cached token, keeps stored values the resync
+ * omits).
+ *
+ * Order per request: verify signature (freshness included) → parse the
+ * typed payload → atomically claim the header `webhook-id` (a claimed id
+ * answers 409: exactly one same-id delivery runs the callback) → run the
+ * callback → 2xx. A callback that throws (e.g. the store write failed)
+ * RELEASES the claim and answers non-2xx, so a Queek retry can still land.
+ * The claim and the check are the SAME header id — never the body id.
+ */
+export interface InstallCallbacks {
+    /** Defaults to persisting the installation (encrypted) in `store`. */
+    onInstall?: (envelope: InstallEnvelope) => Promise<void>;
+    /** Defaults to deleting the installation from `store`. */
+    onUninstall?: (envelope: UninstallEnvelope) => Promise<void>;
+    /** Defaults to merging the new settings into the stored installation. */
+    onSettings?: (envelope: SettingsEnvelope) => Promise<void>;
+}
+export interface InstallHandlerOptions extends InstallCallbacks {
+    /** The app signing secret (`whsec_…`) from Queek registration. */
+    appSecret: string;
+    store: InstallationStore;
+    nowSeconds?: number;
+    maxSkewSeconds?: number;
+}
+/**
+ * Build the storable installation record from install `data`. Timestamps
+ * default to now. Exported so apps with a custom `onInstall` (e.g. to
+ * proof-call the Merchant API before answering 2xx) persist exactly what
+ * the default handler would — never a divergent mapping.
+ */
+export declare function buildInstallationRecord(data: InstallData, nowIso?: string): InstallationRecord;
+/**
+ * Merge a re-delivered install envelope (resync) into an existing row:
+ * refresh the ref fields, scopes, settings and webhook secret, but keep
+ * the original `installedAt` and the cached installation token (a secret
+ * rotation does not invalidate minted tokens; `resyncFromQueek` drops
+ * tokens explicitly when it wants fresh ones).
+ */
+export declare function saveResyncedInstallation(existing: InstallationRecord, data: InstallData, nowIso?: string): InstallationRecord;
+export declare function createInstallHandlers(options: InstallHandlerOptions): Hono;
+//# sourceMappingURL=install-handlers.d.ts.map

package/dist/install-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-handlers.d.ts","sourceRoot":"","sources":["../src/install-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,eAAe,EAIpB,KAAK,gBAAgB,EAErB,KAAK,iBAAiB,EACvB,MAAM,cAAc,CAAC;AAQtB,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,0DAA0D;IAC1D,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,yEAAyE;IACzE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,iBAAiB,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,WAAW,EACjB,MAAM,GAAE,MAAiC,GACxC,kBAAkB,CAEpB;AAiCD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE,WAAW,EACjB,MAAM,GAAE,MAAiC,GACxC,kBAAkB,CAYpB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAyM1E"}

package/dist/install-handlers.js

@@ -0,0 +1,238 @@
+import { Hono } from "hono";
+import { INSTALL_EVENT, RESYNC_EVENT, SETTINGS_EVENT, UNINSTALL_EVENT, } from "./handoff.js";
+import { MAX_TIMESTAMP_SKEW_SECONDS, verifyQueekSignatureDetailed, WEBHOOK_ID_HEADER, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_TIMESTAMP_HEADER, } from "./signatures.js";
+/**
+ * Build the storable installation record from install `data`. Timestamps
+ * default to now. Exported so apps with a custom `onInstall` (e.g. to
+ * proof-call the Merchant API before answering 2xx) persist exactly what
+ * the default handler would — never a divergent mapping.
+ */
+export function buildInstallationRecord(data, nowIso = new Date().toISOString()) {
+    return installationRecordFromInstall(data, nowIso);
+}
+function installationRecordFromInstall(data, nowIso) {
+    return {
+        installationId: data.installation.id,
+        installationPid: data.installation.p_id,
+        vendorId: data.store.id,
+        storePid: data.store.p_id,
+        storeName: data.store.name,
+        apiBase: data.api_base,
+        // No credential crosses the handoff (S1): a fresh row caches no token
+        // (the first call mints one); see `saveResyncedInstallation` for the
+        // existing-row path, which keeps the cached token.
+        token: null,
+        tokenExpiresAt: null,
+        tokenKid: null,
+        // A handoff (install or resync redelivery) proves Queek holds the
+        // installation: fresh rows start unflagged, and a redelivery for an
+        // existing row clears a stale pending mark (seen active).
+        pending: false,
+        scopes: data.scopes,
+        settings: data.settings,
+        webhookSecret: data.webhook_secret,
+        proxySecret: data.proxy_secret,
+        embedSecret: data.embed_secret ?? null,
+        appId: data.app_id ?? null,
+        webhookUrl: data.webhook_url,
+        webhookTopics: data.webhook_topics,
+        installedAt: nowIso,
+        updatedAt: nowIso,
+    };
+}
+/**
+ * Merge a re-delivered install envelope (resync) into an existing row:
+ * refresh the ref fields, scopes, settings and webhook secret, but keep
+ * the original `installedAt` and the cached installation token (a secret
+ * rotation does not invalidate minted tokens; `resyncFromQueek` drops
+ * tokens explicitly when it wants fresh ones).
+ */
+export function saveResyncedInstallation(existing, data, nowIso = new Date().toISOString()) {
+    const fresh = installationRecordFromInstall(data, nowIso);
+    return {
+        ...fresh,
+        // A handoff without the key (older payloads) keeps what is stored.
+        embedSecret: data.embed_secret === undefined ? (existing.embedSecret ?? null) : fresh.embedSecret,
+        appId: data.app_id === undefined ? (existing.appId ?? null) : fresh.appId,
+        installedAt: existing.installedAt,
+        token: existing.token,
+        tokenExpiresAt: existing.tokenExpiresAt,
+        tokenKid: existing.tokenKid,
+    };
+}
+export function createInstallHandlers(options) {
+    const app = new Hono();
+    const maxSkew = options.maxSkewSeconds ?? MAX_TIMESTAMP_SKEW_SECONDS;
+    async function guard(id, timestamp, signatureHeader, rawBody) {
+        if (!id || !timestamp || !signatureHeader) {
+            return { ok: false, status: 401, reason: "missing signature headers" };
+        }
+        const checked = verifyQueekSignatureDetailed({ id, timestamp, body: rawBody, signatureHeader, secret: options.appSecret }, { nowSeconds: options.nowSeconds, maxSkewSeconds: maxSkew });
+        if (!checked.ok) {
+            return {
+                ok: false,
+                status: 401,
+                reason: checked.reason === "stale_timestamp" ? "stale timestamp" : "signature mismatch",
+            };
+        }
+        return { ok: true, id };
+    }
+    function parseEnvelope(rawBody) {
+        try {
+            const parsed = JSON.parse(rawBody);
+            if (typeof parsed !== "object" || parsed === null)
+                return null;
+            return parsed;
+        }
+        catch {
+            return null;
+        }
+    }
+    function isInstallPayload(data) {
+        return (!!data &&
+            typeof data === "object" &&
+            typeof data.installation?.id === "string" &&
+            typeof data.api_base === "string");
+    }
+    /** Default resync apply: merge into the existing row (keeping
+     * `installedAt`, the cached token and stored values the resync omits) or
+     * store a fresh row when nothing is stored (post-outage recovery). */
+    async function applyResync(data) {
+        const existing = await options.store.getInstallation(data.installation.id);
+        await options.store.saveInstallation(existing
+            ? saveResyncedInstallation(existing, data, new Date().toISOString())
+            : installationRecordFromInstall(data, new Date().toISOString()));
+    }
+    app.post("/install", async (c) => {
+        const rawBody = await c.req.text();
+        const checked = await guard(c.req.header(WEBHOOK_ID_HEADER), c.req.header(WEBHOOK_TIMESTAMP_HEADER), c.req.header(WEBHOOK_SIGNATURE_HEADER), rawBody);
+        if (!checked.ok)
+            return c.json({ ok: false, error: checked.reason }, checked.status);
+        const envelope = parseEnvelope(rawBody);
+        if (!envelope)
+            return c.json({ ok: false, error: "invalid_envelope" }, 400);
+        // The platform resync handoff redelivers the install-shaped data under
+        // `type: app/resync` (same signed channel, same verification): it lands
+        // here as well as on `/settings` (the backend aims at `settings_url`
+        // first, falling back to `install_url`).
+        if (envelope.type !== INSTALL_EVENT && envelope.type !== RESYNC_EVENT) {
+            return c.json({ ok: false, error: "unexpected event type" }, 400);
+        }
+        if (!isInstallPayload(envelope.data)) {
+            return c.json({ ok: false, error: "invalid install payload" }, 400);
+        }
+        // Atomic claim on the HEADER id (never the body id): exactly one
+        // same-id delivery runs the callback.
+        if (!(await options.store.claimWebhookId(checked.id))) {
+            return c.json({ ok: false, error: "duplicate delivery" }, 409);
+        }
+        try {
+            if (options.onInstall) {
+                // A resync envelope is install-shaped, so the install callback
+                // handles it (apps merge via `saveResyncedInstallation` there).
+                await options.onInstall(envelope);
+            }
+            else {
+                // A resync redelivers the install envelope for an EXISTING
+                // installation: merge idempotently (keep `installedAt` + the cached
+                // token) instead of resetting the row.
+                await applyResync(envelope.data);
+            }
+        }
+        catch {
+            // Non-2xx on purpose: Queek revokes the key and the merchant retries
+            // as a fresh install. The claim is released so the retry can land.
+            await options.store.releaseWebhookId(checked.id);
+            return c.json({ ok: false, error: "install_failed" }, 500);
+        }
+        return c.json({ ok: true });
+    });
+    app.post("/uninstall", async (c) => {
+        const rawBody = await c.req.text();
+        const checked = await guard(c.req.header(WEBHOOK_ID_HEADER), c.req.header(WEBHOOK_TIMESTAMP_HEADER), c.req.header(WEBHOOK_SIGNATURE_HEADER), rawBody);
+        if (!checked.ok)
+            return c.json({ ok: false, error: checked.reason }, checked.status);
+        const envelope = parseEnvelope(rawBody);
+        if (!envelope)
+            return c.json({ ok: false, error: "invalid_envelope" }, 400);
+        if (envelope.type !== UNINSTALL_EVENT) {
+            return c.json({ ok: false, error: "unexpected event type" }, 400);
+        }
+        if (!(await options.store.claimWebhookId(checked.id))) {
+            return c.json({ ok: false, error: "duplicate delivery" }, 409);
+        }
+        try {
+            if (options.onUninstall) {
+                await options.onUninstall(envelope);
+            }
+            else {
+                await options.store.deleteInstallation(envelope.data.installation.id);
+            }
+        }
+        catch {
+            await options.store.releaseWebhookId(checked.id);
+            return c.json({ ok: false, error: "uninstall_failed" }, 500);
+        }
+        return c.json({ ok: true });
+    });
+    app.post("/settings", async (c) => {
+        const rawBody = await c.req.text();
+        const checked = await guard(c.req.header(WEBHOOK_ID_HEADER), c.req.header(WEBHOOK_TIMESTAMP_HEADER), c.req.header(WEBHOOK_SIGNATURE_HEADER), rawBody);
+        if (!checked.ok)
+            return c.json({ ok: false, error: checked.reason }, checked.status);
+        const envelope = parseEnvelope(rawBody);
+        if (!envelope)
+            return c.json({ ok: false, error: "invalid_envelope" }, 400);
+        // The platform resync handoff (`type: app/resync`) is delivered to the
+        // app's `settings_url` first: it lands here with the install-shaped
+        // data, so it takes the resync merge — never the settings callback,
+        // whose envelope shape does not fit.
+        if (envelope.type !== SETTINGS_EVENT && envelope.type !== RESYNC_EVENT) {
+            return c.json({ ok: false, error: "unexpected event type" }, 400);
+        }
+        if (envelope.type === RESYNC_EVENT) {
+            if (!isInstallPayload(envelope.data)) {
+                return c.json({ ok: false, error: "invalid install payload" }, 400);
+            }
+            if (!(await options.store.claimWebhookId(checked.id))) {
+                return c.json({ ok: false, error: "duplicate delivery" }, 409);
+            }
+            try {
+                await applyResync(envelope.data);
+            }
+            catch {
+                await options.store.releaseWebhookId(checked.id);
+                return c.json({ ok: false, error: "settings_failed" }, 500);
+            }
+            return c.json({ ok: true });
+        }
+        if (!(await options.store.claimWebhookId(checked.id))) {
+            return c.json({ ok: false, error: "duplicate delivery" }, 409);
+        }
+        try {
+            if (options.onSettings) {
+                await options.onSettings(envelope);
+            }
+            else {
+                const data = envelope.data;
+                const existing = await options.store.getInstallation(data.installation.id);
+                if (!existing) {
+                    await options.store.releaseWebhookId(checked.id);
+                    return c.json({ ok: false, error: "unknown_installation" }, 404);
+                }
+                await options.store.saveInstallation({
+                    ...existing,
+                    settings: data.settings,
+                    updatedAt: new Date().toISOString(),
+                });
+            }
+        }
+        catch {
+            await options.store.releaseWebhookId(checked.id);
+            return c.json({ ok: false, error: "settings_failed" }, 500);
+        }
+        return c.json({ ok: true });
+    });
+    return app;
+}
+//# sourceMappingURL=install-handlers.js.map

package/dist/install-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-handlers.js","sourceRoot":"","sources":["../src/install-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAEL,aAAa,EAGb,YAAY,EAEZ,cAAc,EAEd,eAAe,GAEhB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,EACjB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAgDzB;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAiB,EACjB,SAAiB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEzC,OAAO,6BAA6B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,6BAA6B,CAAC,IAAiB,EAAE,MAAc;IACtE,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE;QACpC,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;QACvC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;QACvB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;QACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;QAC1B,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,sEAAsE;QACtE,qEAAqE;QACrE,mDAAmD;QACnD,KAAK,EAAE,IAAI;QACX,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE,IAAI;QACd,kEAAkE;QAClE,oEAAoE;QACpE,0DAA0D;QAC1D,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,cAAc;QAClC,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;QACtC,KAAK,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;QAC1B,UAAU,EAAE,IAAI,CAAC,WAAW;QAC5B,aAAa,EAAE,IAAI,CAAC,cAAc;QAClC,WAAW,EAAE,MAAM;QACnB,SAAS,EAAE,MAAM;KAClB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA4B,EAC5B,IAAiB,EACjB,SAAiB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEzC,MAAM,KAAK,GAAG,6BAA6B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO;QACL,GAAG,KAAK;QACR,mEAAmE;QACnE,WAAW,EAAE,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW;QACjG,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;QACzE,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA8B;IAClE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,IAAI,0BAA0B,CAAC;IAErE,KAAK,UAAU,KAAK,CAClB,EAAsB,EACtB,SAA6B,EAC7B,eAAmC,EACnC,OAAe;QAEf,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QACzE,CAAC;QACD,MAAM,OAAO,GAAG,4BAA4B,CAC1C,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,EAC5E,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,CAC5D,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB;aACxF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;IAED,SAAS,aAAa,CAAC,OAAe;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;YAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC/D,OAAO,MAA4B,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,gBAAgB,CAAC,IAAa;QACrC,OAAO,CACL,CAAC,CAAC,IAAI;YACN,OAAO,IAAI,KAAK,QAAQ;YACxB,OAAQ,IAAoB,CAAC,YAAY,EAAE,EAAE,KAAK,QAAQ;YAC1D,OAAQ,IAAoB,CAAC,QAAQ,KAAK,QAAQ,CACnD,CAAC;IACJ,CAAC;IAED;;0EAEsE;IACtE,KAAK,UAAU,WAAW,CAAC,IAAiB;QAC1C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC3E,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAClC,QAAQ;YACN,CAAC,CAAC,wBAAwB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpE,CAAC,CAAC,6BAA6B,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAClE,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,KAAK,CACzB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC/B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,EACtC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,EACtC,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAErF,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,yCAAyC;QACzC,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QAED,iEAAiE;QACjE,sCAAsC;QACtC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,+DAA+D;gBAC/D,gEAAgE;gBAChE,MAAM,OAAO,CAAC,SAAS,CAAC,QAA2B,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,2DAA2D;gBAC3D,oEAAoE;gBACpE,uCAAuC;gBACvC,MAAM,WAAW,CAAE,QAA2B,CAAC,IAAI,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,mEAAmE;YACnE,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,KAAK,CACzB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC/B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,EACtC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,EACtC,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAErF,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,OAAO,CAAC,WAAW,CAAC,QAA6B,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAE,QAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,KAAK,CACzB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAC/B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,EACtC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,wBAAwB,CAAC,EACtC,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAErF,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5E,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,qCAAqC;QACrC,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACvE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,WAAW,CAAE,QAA2B,CAAC,IAAI,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,OAAO,CAAC,UAAU,CAAC,QAA4B,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAI,QAA6B,CAAC,IAAI,CAAC;gBACjD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBACnC,GAAG,QAAQ;oBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,27 @@
+/**
+ * ONE structured logger for every Queek app: JSON lines on stdout (info and
+ * below) / stderr (warn and above), with secret redaction baked in — never
+ * opt-in per call site.
+ *
+ * Redacted: any field whose name looks like key/secret/token/password/auth/
+ * credential/session, and any string shaped like an `sk_`/`pk_` key, a
+ * `whsec_` secret, a `Bearer …` token, a bare RS256 JWT (`eyJ….….…`), or a
+ * PEM private-key block — in field values AND in the message. What is left
+ * in the logs is ids and p_ids, which is all an operator needs.
+ */
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export type LogFields = Record<string, unknown>;
+export interface LoggerOptions {
+    service: string;
+    level?: LogLevel;
+    sink?: (line: string, level: LogLevel) => void;
+}
+export declare const REDACTED = "[redacted]";
+export interface Logger {
+    debug(message: string, fields?: LogFields): void;
+    info(message: string, fields?: LogFields): void;
+    warn(message: string, fields?: LogFields): void;
+    error(message: string, fields?: LogFields): void;
+}
+export declare function createLogger(options: LoggerOptions): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAI3D,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;CAChD;AASD,eAAO,MAAM,QAAQ,eAAe,CAAC;AA0BrC,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAClD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAkC3D"}