@voltro/plugin-webhooks 0.24.0 → 0.26.0

package/dist/mixin.d.ts

@@ -118,6 +118,30 @@ export declare const _voltroWebhookTargetsTable: Table<"_voltro_webhook_targets"
     readonly signing: ColumnBuilder<unknown, "json", boolean>;
     /** Serialised `RetryPolicy` — see `retry.ts`. */
     readonly retry: ColumnBuilder<unknown, "json", boolean>;
+    /**
+     * The APP's own scoping dimension. Opaque to the framework.
+     *
+     * Stored and returned verbatim, never interpreted — the framework does not
+     * know what a team, a project or a workspace is, and does not need to. Reads
+     * filter on equality against the json you wrote:
+     *
+     *   subscribe({ event, url, scope: { teamId: 'q970…' } })
+     *   listTargets({ scope: { teamId } })
+     *
+     * It exists because `.with(tenant())` is one level too coarse for real
+     * deployments. A consumer's endpoints are scoped to a TEAM and a tenant has
+     * many teams; every read filters by it and every write guards on it, so
+     * without this column the plugin cannot hold their rows at all and they keep
+     * a parallel table.
+     *
+     * The precedent is `_voltro_presence.meta`, and it is worth stating because
+     * it decided a migration: that column is json the framework stores and never
+     * interprets, and it is the ONLY reason the same consumer's presence
+     * migration was lossless — their three denormalised columns went straight in.
+     * The general form: a plugin that stores rows in an app's database on the
+     * app's behalf needs one place for the app's own dimension.
+     */
+    readonly scope: ColumnBuilder<unknown, "json", boolean>;
     /** Optional predicate filter (subset of `Predicate`) — the engine
      *  evaluates this against each emit's payload to decide whether
      *  this target receives the delivery. */
@@ -206,6 +230,30 @@ export declare const webhookTables: () => readonly [ Table<"_voltro_webhook_targ
     readonly signing: ColumnBuilder<unknown, "json", boolean>;
     /** Serialised `RetryPolicy` — see `retry.ts`. */
     readonly retry: ColumnBuilder<unknown, "json", boolean>;
+    /**
+     * The APP's own scoping dimension. Opaque to the framework.
+     *
+     * Stored and returned verbatim, never interpreted — the framework does not
+     * know what a team, a project or a workspace is, and does not need to. Reads
+     * filter on equality against the json you wrote:
+     *
+     *   subscribe({ event, url, scope: { teamId: 'q970…' } })
+     *   listTargets({ scope: { teamId } })
+     *
+     * It exists because `.with(tenant())` is one level too coarse for real
+     * deployments. A consumer's endpoints are scoped to a TEAM and a tenant has
+     * many teams; every read filters by it and every write guards on it, so
+     * without this column the plugin cannot hold their rows at all and they keep
+     * a parallel table.
+     *
+     * The precedent is `_voltro_presence.meta`, and it is worth stating because
+     * it decided a migration: that column is json the framework stores and never
+     * interprets, and it is the ONLY reason the same consumer's presence
+     * migration was lossless — their three denormalised columns went straight in.
+     * The general form: a plugin that stores rows in an app's database on the
+     * app's behalf needs one place for the app's own dimension.
+     */
+    readonly scope: ColumnBuilder<unknown, "json", boolean>;
     /** Optional predicate filter (subset of `Predicate`) — the engine
      *  evaluates this against each emit's payload to decide whether
      *  this target receives the delivery. */

package/dist/mixin.js

@@ -8,6 +8,7 @@ var u = o("_voltro_webhook_targets", {
 	secret: s(),
 	signing: r(),
 	retry: r(),
+	scope: r().nullable(),
 	filter: r().nullable(),
 	headers: r().nullable(),
 	rateLimitPerMinute: n().nullable(),

package/dist/providers/index.js

@@ -1,4 +1,4 @@
-import { a as e, l as t, n, t as r } from "../signing-BOUxHdAo.js";
+import { a as e, c as t, n, t as r } from "../signing-DUG4JWwk.js";
 import { createHmac as i, timingSafeEqual as a } from "node:crypto";
 //#region src/providers/stripe.ts
 var o = (n) => t({

package/dist/{signing-BOUxHdAo.js → signing-DUG4JWwk.js}

@@ -1,41 +1,38 @@
 import { createHmac as e, timingSafeEqual as t } from "node:crypto";
 //#region src/dsl.ts
 var n = (e) => ({
-	_tag: "outgoingEvent",
-	...e
-}), r = (e) => ({
 	_tag: "incomingWebhook",
 	...e
-}), i = (e) => ({
+}), r = (e) => ({
 	_tag: "webhookProvider",
 	...e
-}), a = (e) => {
+}), i = (e) => {
 	if (typeof e != "object" || !e) return !1;
 	let t = e._tag;
 	return t === "outgoingEvent" || t === "incomingWebhook" || t === "webhookProvider";
-}, o = (e) => e === "hmacSha256" ? "sha256" : "sha1", s = (t, n, r, i = "hex") => {
-	let a = e(o(t), n);
-	return a.update(r), a.digest(i);
-}, c = (e, t, n) => {
+}, a = (e) => e === "hmacSha256" ? "sha256" : "sha1", o = (t, n, r, i = "hex") => {
+	let o = e(a(t), n);
+	return o.update(r), o.digest(i);
+}, s = (e, t, n) => {
 	if (e._tag === "custom") return {
 		headerName: e.header,
 		headerValue: e.sign(t, n)
 	};
 	let r = e.encoding ?? "hex", i = e.versionPrefix ?? "";
 	if (e.includeTimestamp) {
-		let a = Math.floor(Date.now() / 1e3), o = Buffer.concat([Buffer.from(`${a}.`, "utf8"), Buffer.from(t)]), c = s(e.algorithm, n, o, r);
+		let a = Math.floor(Date.now() / 1e3), s = Buffer.concat([Buffer.from(`${a}.`, "utf8"), Buffer.from(t)]), c = o(e.algorithm, n, s, r);
 		return {
 			headerName: e.header,
 			headerValue: `t=${a},${i}${c}`,
 			timestamp: a
 		};
 	}
-	let a = s(e.algorithm, n, t, r);
+	let a = o(e.algorithm, n, t, r);
 	return {
 		headerName: e.header,
 		headerValue: `${i}${a}`
 	};
-}, l = (e, t, n, r) => {
+}, c = (e, t, n, r) => {
 	if (!r) return {
 		ok: !1,
 		reason: "missing signature header"
@@ -44,50 +41,50 @@ var n = (e) => ({
 		ok: !1,
 		reason: "custom verifier rejected"
 	};
-	let i = e.encoding ?? "hex", a = e.versionPrefix ?? "", o = (n) => {
+	let i = e.encoding ?? "hex", a = e.versionPrefix ?? "", s = (n) => {
 		if (e.includeTimestamp) {
-			let o = r.split(",").map((e) => e.trim()), c = o.find((e) => e.startsWith("t="));
+			let s = r.split(",").map((e) => e.trim()), c = s.find((e) => e.startsWith("t="));
 			if (!c) return {
 				ok: !1,
 				reason: "no timestamp in signature header"
 			};
-			let l = Number(c.slice(2));
-			if (!Number.isFinite(l)) return {
+			let u = Number(c.slice(2));
+			if (!Number.isFinite(u)) return {
 				ok: !1,
 				reason: "invalid timestamp"
 			};
 			let d = e.replayWindowSeconds ?? 300, f = Math.floor(Date.now() / 1e3);
-			if (Math.abs(f - l) > d) return {
+			if (Math.abs(f - u) > d) return {
 				ok: !1,
-				reason: `replay window exceeded (${Math.abs(f - l)}s > ${d}s)`
+				reason: `replay window exceeded (${Math.abs(f - u)}s > ${d}s)`
 			};
-			let p = a.length > 0 ? o.find((e) => e.startsWith(a))?.slice(a.length) : o.find((e) => !e.startsWith("t="));
+			let p = a.length > 0 ? s.find((e) => e.startsWith(a))?.slice(a.length) : s.find((e) => !e.startsWith("t="));
 			if (!p) return {
 				ok: !1,
 				reason: "no signature in header"
 			};
-			let m = Buffer.concat([Buffer.from(`${l}.`, "utf8"), Buffer.from(t)]);
-			return u(s(e.algorithm, n, m, i), p) ? { ok: !0 } : {
+			let m = Buffer.concat([Buffer.from(`${u}.`, "utf8"), Buffer.from(t)]);
+			return l(o(e.algorithm, n, m, i), p) ? { ok: !0 } : {
 				ok: !1,
 				reason: "signature mismatch"
 			};
 		}
-		let o = a.length > 0 && r.startsWith(a) ? r.slice(a.length) : r;
-		return u(s(e.algorithm, n, t, i), o) ? { ok: !0 } : {
+		let s = a.length > 0 && r.startsWith(a) ? r.slice(a.length) : r;
+		return l(o(e.algorithm, n, t, i), s) ? { ok: !0 } : {
 			ok: !1,
 			reason: "signature mismatch"
 		};
-	}, c = o(n);
+	}, c = s(n);
 	if (c.ok) return c;
 	if (e.previousSecret !== void 0) {
-		let t = o(e.previousSecret);
+		let t = s(e.previousSecret);
 		if (t.ok) return t;
 	}
 	return c;
-}, u = (e, n) => {
+}, l = (e, n) => {
 	let r = Buffer.from(e, "utf8"), i = Buffer.from(n, "utf8");
 	return r.length === i.length ? t(r, i) : (t(r, Buffer.alloc(r.length)), !1);
-}, d = (e = "Stripe-Signature") => ({
+}, u = (e = "Stripe-Signature") => ({
 	_tag: "hmac",
 	algorithm: "hmacSha256",
 	header: e,
@@ -95,19 +92,19 @@ var n = (e) => ({
 	replayWindowSeconds: 300,
 	encoding: "hex",
 	versionPrefix: "v1="
-}), f = () => ({
+}), d = () => ({
 	_tag: "hmac",
 	algorithm: "hmacSha256",
 	header: "X-Hub-Signature-256",
 	includeTimestamp: !1,
 	encoding: "hex",
 	versionPrefix: "sha256="
-}), p = () => ({
+}), f = () => ({
 	_tag: "custom",
 	header: "X-Slack-Signature",
-	sign: (e, t) => `v0=${s("hmacSha256", t, `v0:${Math.floor(Date.now() / 1e3)}:${Buffer.from(e).toString("utf8")}`)}`,
+	sign: (e, t) => `v0=${o("hmacSha256", t, `v0:${Math.floor(Date.now() / 1e3)}:${Buffer.from(e).toString("utf8")}`)}`,
 	verify: (e, t, n) => !1
-}), m = () => ({
+}), p = () => ({
 	_tag: "hmac",
 	algorithm: "hmacSha256",
 	header: "X-Webhook-Signature",
@@ -117,4 +114,4 @@ var n = (e) => ({
 	versionPrefix: "v1="
 });
 //#endregion
-export { d as a, n as c, p as i, i as l, f as n, l as o, c as r, r as s, m as t, a as u };
+export { u as a, r as c, f as i, i as l, d as n, c as o, s as r, n as s, p as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-webhooks",
-  "version": "0.24.0",
+  "version": "0.26.0",
   "description": "Webhooks plugin — first-class outgoing (multi-target, durable-workflow delivery, HMAC signing, retry policies, rate limits) + incoming (signature verification, idempotency, provider templates for Stripe / GitHub / Slack / generic).",
   "keywords": [
     "voltro",
@@ -48,12 +48,12 @@
   },
   "dependencies": {
     "@effect/workflow": "^0.19.0",
-    "@voltro/database": "0.24.0",
-    "@voltro/integration-http": "0.24.0",
-    "@voltro/logger": "0.24.0",
-    "@voltro/plugin-multitenancy": "0.24.0",
-    "@voltro/protocol": "0.24.0",
-    "@voltro/runtime": "0.24.0"
+    "@voltro/database": "0.26.0",
+    "@voltro/integration-http": "0.26.0",
+    "@voltro/logger": "0.26.0",
+    "@voltro/plugin-multitenancy": "0.26.0",
+    "@voltro/protocol": "0.26.0",
+    "@voltro/runtime": "0.26.0"
   },
   "peerDependencies": {
     "effect": "^3.22.0"