@voltro/plugin-webhooks 0.23.0 → 0.25.0

package/dist/index.js

@@ -1,16 +1,26 @@
-import { a as e, c as t, i as n, l as r, n as i, o as a, r as o, s, t as c, u as l } from "./signing-BOUxHdAo.js";
-import { WebhookDeliveryNotFound as u, WebhookPayloadInvalid as d, WebhookPayloadUnrepresentable as f, WebhookPayloadVersionInvalid as p, WebhookSubscribeInvalid as m } from "./errors.js";
-import { _voltroWebhookDeliveriesTable as h, _voltroWebhookRateWindowsTable as g, _voltroWebhookTargetsTable as _, webhookTables as v } from "./mixin.js";
-import { randomBytes as y, randomUUID as b } from "node:crypto";
-import { Context as ee, Effect as x, Either as te, Schema as S } from "effect";
-import { and as C, eq as w } from "@voltro/database";
-import { assertPublicUrl as T } from "@voltro/integration-http";
+import { a as e, c as t, i as n, l as r, n as i, o as a, r as o, s, t as c } from "./signing-DUG4JWwk.js";
+import { WebhookDeliveryNotFound as l, WebhookPayloadInvalid as u, WebhookPayloadUnrepresentable as d, WebhookPayloadVersionInvalid as f, WebhookSubscribeInvalid as p } from "./errors.js";
+import { _voltroWebhookDeliveriesTable as m, _voltroWebhookRateWindowsTable as h, _voltroWebhookTargetsTable as g, webhookTables as _ } from "./mixin.js";
+import { randomBytes as v, randomUUID as y } from "node:crypto";
+import { Context as ee, Effect as b, Either as te, Schema as x } from "effect";
+import { and as S, eq as C } from "@voltro/database";
+import { assertPublicUrl as w } from "@voltro/integration-http";
 import { publishServerError as ne } from "@voltro/protocol";
 import { createLogger as re } from "@voltro/logger";
-import { Activity as E, DurableClock as D, Workflow as ie } from "@effect/workflow";
-//#region src/retry.ts
-var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
-	let t = ae.exec(e);
+import { Activity as T, DurableClock as E, Workflow as ie } from "@effect/workflow";
+//#region src/eventAudience.ts
+var ae = (e) => e.webhook !== void 0, D = (e) => {
+	let t = e.webhook;
+	if (t !== void 0) return {
+		_tag: "outgoingEvent",
+		id: e.name,
+		payload: e.payload,
+		...t.description === void 0 ? {} : { description: t.description },
+		...t.version === void 0 ? {} : { version: t.version },
+		...t.rateLimit === void 0 ? {} : { globalRateLimit: t.rateLimit }
+	};
+}, oe = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
+	let t = oe.exec(e);
 	if (!t) throw Error(`invalid duration literal: ${e}`);
 	let n = Number(t[1]), r = t[2] ?? "s";
 	switch (r) {
@@ -64,7 +74,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 	retryOn: k,
 	honourRetryAfter: !0,
 	jitter: "full"
-}), oe = () => ({
+}), se = () => ({
 	strategy: "fixed",
 	maxAttempts: 120,
 	initialDelay: "30s",
@@ -72,56 +82,56 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 	retryOn: k,
 	honourRetryAfter: !0,
 	jitter: "full"
-}), M = class extends ee.Tag("@voltro/webhooks/WebhooksService")() {}, se = 32, N = 32, P = () => y(se).toString("hex"), F = (e) => {
+}), M = class extends ee.Tag("@voltro/webhooks/WebhooksService")() {}, ce = 32, N = 32, P = () => v(ce).toString("hex"), F = (e) => {
 	let t;
 	try {
 		t = new URL(e.url);
 	} catch (e) {
-		throw new m({
+		throw new p({
 			field: "url",
 			reason: `invalid subscriber url: ${e.message}`
 		});
 	}
-	if (t.protocol !== "http:" && t.protocol !== "https:") throw new m({
+	if (t.protocol !== "http:" && t.protocol !== "https:") throw new p({
 		field: "url",
 		reason: `url protocol must be http or https, got ${t.protocol}`
 	});
 	if (process.env.NODE_ENV === "production") try {
-		T(e.url);
+		w(e.url);
 	} catch (e) {
-		throw new m({
+		throw new p({
 			field: "url",
 			reason: e.message
 		});
 	}
-	if (e.event.length === 0) throw new m({
+	if (e.event.length === 0) throw new p({
 		field: "event",
 		reason: "event id required"
 	});
-	if (e.secret !== void 0 && e.secret.length < N) throw new m({
+	if (e.secret !== void 0 && e.secret.length < N) throw new p({
 		field: "secret",
 		reason: `secret must be at least ${N} chars`
 	});
 	if (e.retry !== void 0) {
-		if (e.retry.maxAttempts < 1) throw new m({
+		if (e.retry.maxAttempts < 1) throw new p({
 			field: "retry",
 			reason: "retry.maxAttempts must be ≥ 1"
 		});
-		if (e.retry.maxAttempts > 1e3) throw new m({
+		if (e.retry.maxAttempts > 1e3) throw new p({
 			field: "retry",
 			reason: "retry.maxAttempts must be ≤ 1000"
 		});
 	}
-	if (e.rateLimitPerMinute !== void 0 && e.rateLimitPerMinute < 1) throw new m({
+	if (e.rateLimitPerMinute !== void 0 && e.rateLimitPerMinute < 1) throw new p({
 		field: "rateLimitPerMinute",
 		reason: "rateLimitPerMinute must be ≥ 1"
 	});
-	if (e.autoDisableAfter !== void 0 && (e.autoDisableAfter < 1 || !Number.isInteger(e.autoDisableAfter))) throw new m({
+	if (e.autoDisableAfter !== void 0 && (e.autoDisableAfter < 1 || !Number.isInteger(e.autoDisableAfter))) throw new p({
 		field: "autoDisableAfter",
 		reason: `autoDisableAfter must be a positive integer, got ${e.autoDisableAfter}`
 	});
 }, I = (e, t) => ({
-	id: b(),
+	id: y(),
 	event: e.event,
 	url: e.url,
 	secret: e.secret ?? P(),
@@ -138,19 +148,19 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 	autoDisableReason: null,
 	payloadVersion: e.payloadVersion ?? t?.version ?? 1,
 	description: e.description ?? null
-}), ce = (e, t) => e === t ? "current" : e < t ? "behind" : "ahead", L = (e, t) => {
+}), le = (e, t) => e === t ? "current" : e < t ? "behind" : "ahead", L = (e, t) => {
 	if (e === null) return !0;
 	let n = { payload: t };
-	for (let [t, r] of Object.entries(e)) if (!ue(le(n, t), r)) return !1;
+	for (let [t, r] of Object.entries(e)) if (!de(ue(n, t), r)) return !1;
 	return !0;
-}, le = (e, t) => {
+}, ue = (e, t) => {
 	let n = t.split("."), r = e;
 	for (let e of n) {
 		if (typeof r != "object" || !r) return;
 		r = r[e];
 	}
 	return r;
-}, ue = (e, t) => {
+}, de = (e, t) => {
 	if (typeof t == "object" && t && !Array.isArray(t)) {
 		let n = t;
 		if ("eq" in n) return e === n.eq;
@@ -161,7 +171,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 		if ("in" in n && Array.isArray(n.in)) return n.in.includes(e);
 	}
 	return e === t;
-}, de = (e, t, n = {}) => {
+}, fe = (e, t, n = {}) => {
 	let r = new Map((n.events ?? []).map((e) => [e.id, e]));
 	return {
 		subscribe: async (t) => {
@@ -181,17 +191,17 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 			};
 		},
 		emit: async (n, i) => {
-			let a = typeof n == "string" ? r.get(n) : n, o = typeof n == "string" ? n : n.id;
-			if (a !== void 0) {
-				let e = S.decodeUnknownEither(a.payload)(i, { errors: "all" });
-				if (te.isLeft(e)) throw new d({
-					event: o,
+			let a = typeof n == "object" && n.kind === "event" ? D(n) : void 0, o = typeof n == "string" ? r.get(n) : a ?? n, s = typeof n == "string" ? n : n.id ?? n.name;
+			if (o !== void 0) {
+				let e = x.decodeUnknownEither(o.payload)(i, { errors: "all" });
+				if (te.isLeft(e)) throw new u({
+					event: s,
 					issues: e.left.message
 				});
 			}
-			let s = b(), c = (await e.store.query({
+			let c = y(), l = (await e.store.query({
 				table: "_voltro_webhook_targets",
-				predicate: w("event", o),
+				predicate: C("event", s),
 				order: [{
 					column: "createdAt",
 					direction: "asc"
@@ -199,16 +209,16 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
-			})).filter((e) => L(e.filter, i)), l = [], u = JSON.stringify(i);
-			for (let n of c) {
-				let r = b();
+			})).filter((e) => L(e.filter, i)), d = [], f = JSON.stringify(i);
+			for (let n of l) {
+				let r = y();
 				n.active ? (await t({
 					deliveryId: r,
 					targetId: n.id,
-					event: o,
-					eventId: s,
-					payloadJson: u
-				}), l.push({
+					event: s,
+					eventId: c,
+					payloadJson: f
+				}), d.push({
 					targetId: n.id,
 					deliveryId: r,
 					status: "dispatched"
@@ -217,29 +227,29 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 					deliveryId: r,
 					targetId: n.id,
 					tenantId: n.tenantId ?? null,
-					event: o,
-					eventId: s,
+					event: s,
+					eventId: c,
 					attempt: 1,
 					status: "pending",
-					payload: u,
+					payload: f,
 					scheduledAt: /* @__PURE__ */ new Date(),
 					createdAt: /* @__PURE__ */ new Date(),
 					updatedAt: /* @__PURE__ */ new Date()
-				}), l.push({
+				}), d.push({
 					targetId: n.id,
 					deliveryId: r,
 					status: "queued"
 				}));
 			}
 			return {
-				eventId: s,
-				deliveries: l
+				eventId: c,
+				deliveries: d
 			};
 		},
 		replay: async (n) => {
 			let r = (await e.store.query({
 				table: "_voltro_webhook_deliveries",
-				predicate: w("deliveryId", n),
+				predicate: C("deliveryId", n),
 				order: [{
 					column: "attempt",
 					direction: "asc"
@@ -248,12 +258,12 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 				skip: void 0,
 				projection: void 0
 			}))[0];
-			if (r === void 0) throw new u({ deliveryId: n });
+			if (r === void 0) throw new l({ deliveryId: n });
 			await t({
 				deliveryId: r.deliveryId,
 				targetId: r.targetId,
 				event: r.event,
-				eventId: r.eventId ?? b(),
+				eventId: r.eventId ?? y(),
 				payloadJson: typeof r.payload == "string" ? r.payload : JSON.stringify(r.payload),
 				attemptEpoch: Date.now()
 			});
@@ -274,7 +284,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 			});
 			let r = await e.store.query({
 				table: "_voltro_webhook_deliveries",
-				predicate: C(w("targetId", n), w("status", "pending")),
+				predicate: S(C("targetId", n), C("status", "pending")),
 				order: [{
 					column: "createdAt",
 					direction: "asc"
@@ -287,13 +297,13 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 				deliveryId: e.deliveryId,
 				targetId: n,
 				event: e.event,
-				eventId: e.eventId ?? b(),
+				eventId: e.eventId ?? y(),
 				payloadJson: typeof e.payload == "string" ? e.payload : JSON.stringify(e.payload),
 				attemptEpoch: i
 			});
 		},
 		deleteTarget: async (t) => {
-			await e.store.delete("_voltro_webhook_targets", t), await e.store.deleteMany("_voltro_webhook_deliveries", { where: C(w("targetId", t), w("status", "pending")) });
+			await e.store.delete("_voltro_webhook_targets", t), await e.store.deleteMany("_voltro_webhook_deliveries", { where: S(C("targetId", t), C("status", "pending")) });
 		},
 		rotateSecret: async (t) => {
 			let n = P();
@@ -303,7 +313,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 			}), { secret: n };
 		},
 		updateTargetPayloadVersion: async (t, n) => {
-			if (n < 1 || !Number.isInteger(n)) throw new p({ version: n });
+			if (n < 1 || !Number.isInteger(n)) throw new f({ version: n });
 			await e.store.update("_voltro_webhook_targets", t, {
 				payloadVersion: n,
 				updatedAt: /* @__PURE__ */ new Date()
@@ -311,7 +321,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 		},
 		listTargets: async (t) => (await e.store.query({
 			table: "_voltro_webhook_targets",
-			predicate: t === void 0 ? void 0 : w("event", t),
+			predicate: t === void 0 ? void 0 : C("event", t),
 			order: [{
 				column: "createdAt",
 				direction: "desc"
@@ -333,15 +343,15 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 			autoDisableReason: e.autoDisableReason
 		}))
 	};
-}, fe = x.gen(function* () {
+}, pe = b.gen(function* () {
 	return yield* M;
-}), pe = (e) => {
+}), me = (e) => {
 	if (e.webhooks === void 0) throw Error("useWebhooks: `ctx.webhooks` is not set. Add @voltro/plugin-webhooks to your app.config.ts plugin list and declare at least one *.webhook.tsx file.");
 	return e.webhooks;
-}, me = 1e4, R = class {
+}, he = 1e4, R = class {
 	capacity;
 	cache = /* @__PURE__ */ new Map();
-	constructor(e = me) {
+	constructor(e = he) {
 		this.capacity = e;
 	}
 	evictExpired() {
@@ -387,7 +397,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), he = (e, t) => {
+}), ge = (e, t) => {
 	let n = e.provider, r = e.signature ?? n?.signature ?? null, i = e.idempotency ?? n?.idempotency ?? null, o = e.bodyType ?? n?.bodyType ?? "json", s = t.idempotencyCache ?? B(), c = H(i?.ttl), l = t.log ?? ((e) => {
 		re({ scope: `webhook:${e.webhookId}` }).debug("incoming webhook", {
 			status: e.status,
@@ -462,7 +472,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 		}
 		let p;
 		try {
-			p = S.decodeUnknownSync(e.payload)(f);
+			p = x.decodeUnknownSync(e.payload)(f);
 		} catch (t) {
 			let n = U(422, {
 				error: "schema validation failed",
@@ -548,9 +558,9 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 			}), n;
 		}
 	};
-}, ge = (e) => `/webhooks/${e}`, W = "_voltro_webhook_rate_windows", G = 6e4, _e = (e, t) => `${e}@${t}`, K = async (e, t, n) => (await e.query({
+}, _e = (e) => `/webhooks/${e}`, W = "_voltro_webhook_rate_windows", G = 6e4, ve = (e, t) => `${e}@${t}`, K = async (e, t, n) => (await e.query({
 	table: "_voltro_webhook_rate_windows",
-	predicate: C(w("scope", t), w("bucket", n)),
+	predicate: S(C("scope", t), C("bucket", n)),
 	order: [],
 	take: 1,
 	skip: void 0,
@@ -561,7 +571,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 		let i = await K(e, t.key, n);
 		if (i === null) {
 			await e.insertIgnore(W, {
-				id: _e(t.key, n),
+				id: ve(t.key, n),
 				scope: t.key,
 				bucket: n,
 				count: 0,
@@ -574,7 +584,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 		if (await e.updateMany("_voltro_webhook_rate_windows", {
 			count: i.count + 1,
 			updatedAt: /* @__PURE__ */ new Date()
-		}, { where: C(w("id", i.id), w("count", i.count)) }) === 1) return !0;
+		}, { where: S(C("id", i.id), C("count", i.count)) }) === 1) return !0;
 	}
 	throw Error(`webhook rate window: contention on (${t.key}, ${n}) exceeded ${q} attempts`);
 }, Y = async (e, t, n) => {
@@ -584,7 +594,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 		if (i === null || i.count <= 0 || await e.updateMany("_voltro_webhook_rate_windows", {
 			count: i.count - 1,
 			updatedAt: /* @__PURE__ */ new Date()
-		}, { where: C(w("id", i.id), w("count", i.count)) }) === 1) return;
+		}, { where: S(C("id", i.id), C("count", i.count)) }) === 1) return;
 	}
 	throw Error(`webhook rate window: release contention on (${t}) exceeded ${q} attempts`);
 }, X = async (e, t, n, r = G) => {
@@ -617,22 +627,22 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 	try {
 		n = JSON.parse(t);
 	} catch (t) {
-		throw new f({
+		throw new d({
 			format: e,
 			reason: `payload is not valid JSON: ${t.message}`
 		});
 	}
 	return e === "form" ? {
 		contentType: "application/x-www-form-urlencoded",
-		bytes: Buffer.from(ve(n), "utf8")
+		bytes: Buffer.from(ye(n), "utf8")
 	} : {
 		contentType: "application/xml",
-		bytes: Buffer.from(be(n), "utf8")
+		bytes: Buffer.from(xe(n), "utf8")
 	};
-}, ve = (e) => {
-	if (typeof e != "object" || !e || Array.isArray(e)) throw new f({
+}, ye = (e) => {
+	if (typeof e != "object" || !e || Array.isArray(e)) throw new d({
 		format: "form",
-		reason: `form encoding requires a JSON object at the top level, got ${Ce(e)}`
+		reason: `form encoding requires a JSON object at the top level, got ${we(e)}`
 	});
 	let t = new URLSearchParams();
 	for (let [n, r] of Object.entries(e)) Q(t, n, r);
@@ -651,13 +661,13 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 		return;
 	}
 	e.append(t, String(n));
-}, ye = /^[A-Za-z_][A-Za-z0-9_.-]*$/, be = (e) => `<?xml version="1.0" encoding="UTF-8"?>${$("webhook", e)}`, $ = (e, t) => {
-	if (!ye.test(e)) throw new f({
+}, be = /^[A-Za-z_][A-Za-z0-9_.-]*$/, xe = (e) => `<?xml version="1.0" encoding="UTF-8"?>${$("webhook", e)}`, $ = (e, t) => {
+	if (!be.test(e)) throw new d({
 		format: "xml",
 		reason: `object key ${JSON.stringify(e)} is not a valid XML element name`
 	});
-	return `<${e}>${xe(e, t)}</${e}>`;
-}, xe = (e, t) => t == null ? "" : Array.isArray(t) ? t.map((e) => $("item", e)).join("") : typeof t == "object" ? Object.entries(t).map(([e, t]) => $(e, t)).join("") : Se(String(t)), Se = (e) => e.replace(/[&<>"']/g, (e) => {
+	return `<${e}>${Se(e, t)}</${e}>`;
+}, Se = (e, t) => t == null ? "" : Array.isArray(t) ? t.map((e) => $("item", e)).join("") : typeof t == "object" ? Object.entries(t).map(([e, t]) => $(e, t)).join("") : Ce(String(t)), Ce = (e) => e.replace(/[&<>"']/g, (e) => {
 	switch (e) {
 		case "&": return "&amp;";
 		case "<": return "&lt;";
@@ -665,17 +675,17 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 		case "\"": return "&quot;";
 		default: return "&apos;";
 	}
-}), Ce = (e) => e === null ? "null" : Array.isArray(e) ? "array" : typeof e, we = "_voltro_webhook_targets", Te = 32, Ee = async (e, t) => (await e.query({
+}), we = (e) => e === null ? "null" : Array.isArray(e) ? "array" : typeof e, Te = "_voltro_webhook_targets", Ee = 32, De = async (e, t) => (await e.query({
 	table: "_voltro_webhook_targets",
-	predicate: w("id", t),
+	predicate: C("id", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, De = async (e, t, n, r, i = /* @__PURE__ */ new Date()) => {
-	for (let a = 0; a < Te; a++) {
+}))[0] ?? null, Oe = async (e, t, n, r, i = /* @__PURE__ */ new Date()) => {
+	for (let a = 0; a < Ee; a++) {
 		a > 0 && await new Promise((e) => setTimeout(e, a));
-		let o = await Ee(e, t);
+		let o = await De(e, t);
 		if (o === null) return {
 			consecutiveFailures: 0,
 			autoDisabled: !1
@@ -685,7 +695,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 			if (s === 0 || await e.updateMany("_voltro_webhook_targets", {
 				consecutiveFailures: 0,
 				updatedAt: i
-			}, { where: C(w("id", t), w("consecutiveFailures", s)) }) === 1) return {
+			}, { where: S(C("id", t), C("consecutiveFailures", s)) }) === 1) return {
 				consecutiveFailures: 0,
 				autoDisabled: !1
 			};
@@ -695,68 +705,68 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 			consecutiveFailures: c,
 			updatedAt: i
 		};
-		if (u && (d.active = !1, d.autoDisabledAt = i, d.autoDisableReason = r.slice(0, 500)), await e.updateMany("_voltro_webhook_targets", d, { where: C(w("id", t), w("consecutiveFailures", s)) }) === 1) return {
+		if (u && (d.active = !1, d.autoDisabledAt = i, d.autoDisableReason = r.slice(0, 500)), await e.updateMany("_voltro_webhook_targets", d, { where: S(C("id", t), C("consecutiveFailures", s)) }) === 1) return {
 			consecutiveFailures: c,
 			autoDisabled: u
 		};
 	}
-	throw Error(`webhook auto-disable: streak CAS contention on target ${t} exceeded ${Te} attempts`);
-}, Oe = S.Struct({
-	status: S.Number,
-	body: S.String,
-	latencyMs: S.Number,
-	retryAfterSec: S.Union(S.Number, S.Undefined),
-	transportError: S.Union(S.String, S.Undefined),
-	encodeError: S.Union(S.String, S.Undefined)
-}), ke = S.Struct({
-	outcome: S.Literal("succeeded", "failed", "retry"),
-	delayMs: S.Union(S.Number, S.Undefined),
-	reason: S.Union(S.String, S.Undefined),
-	autoDisabled: S.Union(S.Boolean, S.Undefined),
-	consecutiveFailures: S.Union(S.Number, S.Undefined)
-}), Ae = S.Struct({
-	acquired: S.Boolean,
-	retryInMs: S.Number
-}), je = ie.make({
+	throw Error(`webhook auto-disable: streak CAS contention on target ${t} exceeded ${Ee} attempts`);
+}, ke = x.Struct({
+	status: x.Number,
+	body: x.String,
+	latencyMs: x.Number,
+	retryAfterSec: x.Union(x.Number, x.Undefined),
+	transportError: x.Union(x.String, x.Undefined),
+	encodeError: x.Union(x.String, x.Undefined)
+}), Ae = x.Struct({
+	outcome: x.Literal("succeeded", "failed", "retry"),
+	delayMs: x.Union(x.Number, x.Undefined),
+	reason: x.Union(x.String, x.Undefined),
+	autoDisabled: x.Union(x.Boolean, x.Undefined),
+	consecutiveFailures: x.Union(x.Number, x.Undefined)
+}), je = x.Struct({
+	acquired: x.Boolean,
+	retryInMs: x.Number
+}), Me = ie.make({
 	name: "voltro.deliverWebhook",
 	payload: {
-		deliveryId: S.String,
-		targetId: S.String,
-		event: S.String,
-		eventId: S.String,
-		payloadJson: S.String,
-		attemptEpoch: S.optionalWith(S.Number, { default: () => 0 })
+		deliveryId: x.String,
+		targetId: x.String,
+		event: x.String,
+		eventId: x.String,
+		payloadJson: x.String,
+		attemptEpoch: x.optionalWith(x.Number, { default: () => 0 })
 	},
-	success: S.Struct({
-		finalStatus: S.Literal("succeeded", "failed", "deferred"),
-		attempts: S.Number
+	success: x.Struct({
+		finalStatus: x.Literal("succeeded", "failed", "deferred"),
+		attempts: x.Number
 	}),
 	idempotencyKey: ({ deliveryId: e, attemptEpoch: t }) => `voltro.deliverWebhook:${e}:${t ?? 0}`
-}), Me = (e, t = {}) => (n, r) => {
+}), Ne = (e, t = {}) => (n, r) => {
 	let { deliveryId: i, targetId: a, event: s, eventId: c, payloadJson: l } = n, u = re({ scope: `webhook:${i}` });
-	return x.gen(function* () {
-		let n = yield* E.make({
+	return b.gen(function* () {
+		let n = yield* T.make({
 			name: "fetch-target",
-			success: S.Union(S.Null, S.Struct({
-				id: S.String,
-				event: S.String,
-				url: S.String,
-				secret: S.String,
-				signing: S.Any,
-				retry: S.Any,
-				headers: S.Union(S.Record({
-					key: S.String,
-					value: S.String
-				}), S.Null),
-				rateLimitPerMinute: S.Union(S.Number, S.Null),
-				active: S.Boolean,
-				format: S.Literal("json", "form", "xml"),
-				tenantId: S.Union(S.String, S.Null)
+			success: x.Union(x.Null, x.Struct({
+				id: x.String,
+				event: x.String,
+				url: x.String,
+				secret: x.String,
+				signing: x.Any,
+				retry: x.Any,
+				headers: x.Union(x.Record({
+					key: x.String,
+					value: x.String
+				}), x.Null),
+				rateLimitPerMinute: x.Union(x.Number, x.Null),
+				active: x.Boolean,
+				format: x.Literal("json", "form", "xml"),
+				tenantId: x.Union(x.String, x.Null)
 			})),
-			execute: x.tryPromise({
+			execute: b.tryPromise({
 				try: async () => (await e.store.query({
 					table: "_voltro_webhook_targets",
-					predicate: w("id", a),
+					predicate: C("id", a),
 					order: [{
 						column: "createdAt",
 						direction: "asc"
@@ -770,7 +780,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 					event: s,
 					cause: String(e)
 				}), /* @__PURE__ */ Error(`fetch-target failed: ${e.message}`))
-			}).pipe(x.orDie)
+			}).pipe(b.orDie)
 		});
 		if (n === null) return {
 			finalStatus: "failed",
@@ -795,18 +805,18 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 				...o
 			});
 		};
-		if (n.active !== !0) return yield* E.make({
+		if (n.active !== !0) return yield* T.make({
 			name: "record-paused-pending",
-			success: S.Void,
-			execute: x.tryPromise({
+			success: x.Void,
+			execute: b.tryPromise({
 				try: () => r(`${i}:1`, 1, { status: "pending" }),
 				catch: (e) => /* @__PURE__ */ Error(`record-paused-pending failed: ${e.message}`)
-			}).pipe(x.orDie)
+			}).pipe(b.orDie)
 		}), {
 			finalStatus: "deferred",
 			attempts: 0
 		};
-		let d = (e) => typeof e == "string" ? JSON.parse(e) : e, p = d(n.retry), m = d(n.signing), h = n.headers === null ? null : d(n.headers), g = t.rateWindowMs ?? 6e4, _ = t.events?.find((e) => e.id === s)?.globalRateLimit, v = [...typeof n.rateLimitPerMinute == "number" && n.rateLimitPerMinute > 0 ? [{
+		let f = (e) => typeof e == "string" ? JSON.parse(e) : e, p = f(n.retry), m = f(n.signing), h = n.headers === null ? null : f(n.headers), g = t.rateWindowMs ?? 6e4, _ = t.events?.find((e) => e.id === s)?.globalRateLimit, v = [...typeof n.rateLimitPerMinute == "number" && n.rateLimitPerMinute > 0 ? [{
 			key: `target:${n.id}`,
 			limit: n.rateLimitPerMinute
 		}] : [], ..._ !== void 0 && _.perMinute > 0 ? [{
@@ -814,12 +824,12 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 			limit: _.perMinute
 		}] : []];
 		for (let t = 1; t <= p.maxAttempts; t++) {
-			let d = `${i}:${t}`;
+			let f = `${i}:${t}`;
 			if (v.length > 0) for (let n = 0;; n++) {
-				let i = yield* E.make({
+				let i = yield* T.make({
 					name: `rate-acquire-${t}-${n}`,
-					success: Ae,
-					execute: x.tryPromise({
+					success: je,
+					execute: b.tryPromise({
 						try: () => X(e.store, v, Date.now(), g),
 						catch: (e) => (u.debug("rate-acquire raw error", {
 							targetId: a,
@@ -827,45 +837,45 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 							attempt: t,
 							cause: String(e)
 						}), /* @__PURE__ */ Error(`rate-acquire failed: ${e.message}`))
-					}).pipe(x.orDie)
+					}).pipe(b.orDie)
 				});
 				if (i.acquired) break;
-				yield* E.make({
+				yield* T.make({
 					name: `record-rate-deferral-${t}-${n}`,
-					success: S.Void,
-					execute: x.tryPromise({
-						try: () => r(d, t, {
+					success: x.Void,
+					execute: b.tryPromise({
+						try: () => r(f, t, {
 							status: "pending",
 							nextAttemptAt: new Date(Date.now() + i.retryInMs)
 						}),
 						catch: (e) => /* @__PURE__ */ Error(`record-rate-deferral failed: ${e.message}`)
-					}).pipe(x.orDie)
-				}), yield* D.sleep({
+					}).pipe(b.orDie)
+				}), yield* E.sleep({
 					name: `rate-window-sleep-${t}-${n}`,
 					duration: `${i.retryInMs} millis`
 				});
 			}
-			yield* E.make({
+			yield* T.make({
 				name: `record-attempt-start-${t}`,
-				success: S.Void,
-				execute: x.tryPromise({
-					try: () => r(d, t, {
+				success: x.Void,
+				execute: b.tryPromise({
+					try: () => r(f, t, {
 						status: "inFlight",
 						nextAttemptAt: null,
 						scheduledAt: /* @__PURE__ */ new Date()
 					}),
 					catch: (e) => /* @__PURE__ */ Error(`record-attempt-start failed: ${e.message}`)
-				}).pipe(x.orDie)
+				}).pipe(b.orDie)
 			});
-			let _ = yield* E.make({
+			let _ = yield* T.make({
 				name: `sign-and-post-${t}`,
-				success: Oe,
-				execute: x.promise(async () => {
+				success: ke,
+				execute: b.promise(async () => {
 					let e = Date.now(), r;
 					try {
 						r = Z(n.format, l);
 					} catch (t) {
-						if (t instanceof f) return {
+						if (t instanceof d) return {
 							status: 0,
 							body: "",
 							latencyMs: Date.now() - e,
@@ -875,14 +885,14 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 						};
 						throw t;
 					}
-					let a = Buffer.from(r.bytes), { headerName: u, headerValue: d } = o(m, a, n.secret);
-					process.env.NODE_ENV === "production" && T(n.url);
+					let a = Buffer.from(r.bytes), { headerName: u, headerValue: f } = o(m, a, n.secret);
+					process.env.NODE_ENV === "production" && w(n.url);
 					try {
 						let o = await fetch(n.url, {
 							method: "POST",
 							headers: {
 								"content-type": r.contentType,
-								[u]: d,
+								[u]: f,
 								"x-voltro-event": s,
 								"x-voltro-event-id": c,
 								"x-voltro-delivery-id": i,
@@ -891,12 +901,12 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 								...h ?? {}
 							},
 							body: a
-						}), l = (await o.text()).slice(0, 8192), f = o.headers.get("retry-after");
+						}), l = (await o.text()).slice(0, 8192), d = o.headers.get("retry-after");
 						return {
 							status: o.status,
 							body: l,
 							latencyMs: Date.now() - e,
-							retryAfterSec: f !== null && /^\d+$/.test(f) ? Number(f) : void 0,
+							retryAfterSec: d !== null && /^\d+$/.test(d) ? Number(d) : void 0,
 							transportError: void 0,
 							encodeError: void 0
 						};
@@ -911,14 +921,14 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 						};
 					}
 				})
-			}), y = yield* E.make({
+			}), y = yield* T.make({
 				name: `classify-and-record-${t}`,
-				success: ke,
-				execute: x.tryPromise({
+				success: Ae,
+				execute: b.tryPromise({
 					try: async () => {
-						let r = _.status >= 200 && _.status < 300, i = _.transportError !== void 0, o = _.encodeError !== void 0, s = (t, n) => De(e.store, a, t, n);
+						let r = _.status >= 200 && _.status < 300, i = _.transportError !== void 0, o = _.encodeError !== void 0, s = (t, n) => Oe(e.store, a, t, n);
 						if (r) {
-							await e.store.update("_voltro_webhook_deliveries", d, {
+							await e.store.update("_voltro_webhook_deliveries", f, {
 								status: "succeeded",
 								responseStatus: _.status,
 								responseBody: _.body,
@@ -940,7 +950,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 						});
 						if (c === null) {
 							let t = o ? `encode (${n.format}): ${_.encodeError}` : i ? `transport: ${_.transportError}` : `http ${_.status}: ${_.body.slice(0, 200)}`;
-							await e.store.update("_voltro_webhook_deliveries", d, {
+							await e.store.update("_voltro_webhook_deliveries", f, {
 								status: "failed",
 								responseStatus: i || o ? null : _.status,
 								responseBody: i || o ? null : _.body,
@@ -957,7 +967,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 								consecutiveFailures: r.consecutiveFailures
 							};
 						}
-						return await e.store.update("_voltro_webhook_deliveries", d, {
+						return await e.store.update("_voltro_webhook_deliveries", f, {
 							status: "retryScheduled",
 							responseStatus: i ? null : _.status,
 							responseBody: i ? null : _.body,
@@ -979,7 +989,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 						attempt: t,
 						cause: String(e)
 					}), /* @__PURE__ */ Error(`classify-and-record failed: ${e.message}`))
-				}).pipe(x.orDie)
+				}).pipe(b.orDie)
 			});
 			if (y.autoDisabled === !0 && u.warn("target auto-disabled after consecutive failures", {
 				targetId: a,
@@ -994,7 +1004,7 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 				finalStatus: "failed",
 				attempts: t
 			};
-			y.delayMs !== void 0 && (yield* D.sleep({
+			y.delayMs !== void 0 && (yield* E.sleep({
 				name: `retry-sleep-${t}`,
 				duration: `${y.delayMs} millis`
 			}));
@@ -1006,4 +1016,4 @@ var ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
 	});
 };
 //#endregion
-export { R as IdempotencyCache, G as RATE_WINDOW_MS, W as RATE_WINDOW_TABLE, we as TARGETS_TABLE, u as WebhookDeliveryNotFound, d as WebhookPayloadInvalid, f as WebhookPayloadUnrepresentable, p as WebhookPayloadVersionInvalid, m as WebhookSubscribeInvalid, M as WebhooksService, h as _voltroWebhookDeliveriesTable, g as _voltroWebhookRateWindowsTable, _ as _voltroWebhookTargetsTable, X as acquireRateSlots, Me as buildDeliverWebhookExecute, de as buildWebhooksService, ce as compareVersions, J as consumeRateSlot, ge as defaultIncomingPath, c as defaultOutgoingSignature, j as defaultRetryPolicy, s as defineIncomingWebhook, t as defineOutgoingEvent, r as defineWebhookProvider, je as deliverWebhookWorkflow, Z as encodePayload, oe as fastRetryPolicy, P as generateSecret, B as getIdempotencyCache, i as githubSignature, l as isWebhookDescriptor, L as matchesFilter, he as mountIncomingWebhook, A as nextRetry, O as parseDuration, H as parseTtl, De as recordDeliveryOutcome, Y as releaseRateSlot, I as resolveSubscribe, o as signPayload, n as slackSignature, e as stripeSignature, pe as useWebhooks, fe as useWebhooksEffect, F as validateSubscribe, a as verifySignature, v as webhookTables };
+export { R as IdempotencyCache, G as RATE_WINDOW_MS, W as RATE_WINDOW_TABLE, Te as TARGETS_TABLE, l as WebhookDeliveryNotFound, u as WebhookPayloadInvalid, d as WebhookPayloadUnrepresentable, f as WebhookPayloadVersionInvalid, p as WebhookSubscribeInvalid, M as WebhooksService, m as _voltroWebhookDeliveriesTable, h as _voltroWebhookRateWindowsTable, g as _voltroWebhookTargetsTable, X as acquireRateSlots, D as asOutgoingEvent, Ne as buildDeliverWebhookExecute, fe as buildWebhooksService, le as compareVersions, J as consumeRateSlot, _e as defaultIncomingPath, c as defaultOutgoingSignature, j as defaultRetryPolicy, s as defineIncomingWebhook, t as defineWebhookProvider, Me as deliverWebhookWorkflow, Z as encodePayload, se as fastRetryPolicy, P as generateSecret, B as getIdempotencyCache, i as githubSignature, ae as hasWebhookAudience, r as isWebhookDescriptor, L as matchesFilter, ge as mountIncomingWebhook, A as nextRetry, O as parseDuration, H as parseTtl, Oe as recordDeliveryOutcome, Y as releaseRateSlot, I as resolveSubscribe, o as signPayload, n as slackSignature, e as stripeSignature, me as useWebhooks, pe as useWebhooksEffect, F as validateSubscribe, a as verifySignature, _ as webhookTables };