@voltro/plugin-webhooks 0.25.0 → 0.26.0

package/dist/index.js

@@ -1,12 +1,12 @@
 import { a as e, c as t, i as n, l as r, n as i, o as a, r as o, s, t as c } from "./signing-DUG4JWwk.js";
 import { WebhookDeliveryNotFound as l, WebhookPayloadInvalid as u, WebhookPayloadUnrepresentable as d, WebhookPayloadVersionInvalid as f, WebhookSubscribeInvalid as p } from "./errors.js";
-import { _voltroWebhookDeliveriesTable as m, _voltroWebhookRateWindowsTable as h, _voltroWebhookTargetsTable as g, webhookTables as _ } from "./mixin.js";
-import { randomBytes as v, randomUUID as y } from "node:crypto";
-import { Context as ee, Effect as b, Either as te, Schema as x } from "effect";
-import { and as S, eq as C } from "@voltro/database";
-import { assertPublicUrl as w } from "@voltro/integration-http";
-import { publishServerError as ne } from "@voltro/protocol";
-import { createLogger as re } from "@voltro/logger";
+import { _voltroWebhookDeliveriesTable as m, _voltroWebhookRateWindowsTable as h, _voltroWebhookTargetsTable as ee, webhookTables as g } from "./mixin.js";
+import { randomBytes as _, randomUUID as v } from "node:crypto";
+import { Context as te, Effect as y, Either as ne, Schema as b } from "effect";
+import { and as x, eq as S } from "@voltro/database";
+import { assertPublicUrl as C } from "@voltro/integration-http";
+import { publishServerError as re } from "@voltro/protocol";
+import { createLogger as w } from "@voltro/logger";
 import { Activity as T, DurableClock as E, Workflow as ie } from "@effect/workflow";
 //#region src/eventAudience.ts
 var ae = (e) => e.webhook !== void 0, D = (e) => {
@@ -82,7 +82,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	retryOn: k,
 	honourRetryAfter: !0,
 	jitter: "full"
-}), M = class extends ee.Tag("@voltro/webhooks/WebhooksService")() {}, ce = 32, N = 32, P = () => v(ce).toString("hex"), F = (e) => {
+}), M = class extends te.Tag("@voltro/webhooks/WebhooksService")() {}, ce = 32, N = 32, P = () => _(ce).toString("hex"), F = (e) => {
 	let t;
 	try {
 		t = new URL(e.url);
@@ -97,7 +97,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		reason: `url protocol must be http or https, got ${t.protocol}`
 	});
 	if (process.env.NODE_ENV === "production") try {
-		w(e.url);
+		C(e.url);
 	} catch (e) {
 		throw new p({
 			field: "url",
@@ -131,13 +131,14 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		reason: `autoDisableAfter must be a positive integer, got ${e.autoDisableAfter}`
 	});
 }, I = (e, t) => ({
-	id: y(),
+	id: v(),
 	event: e.event,
 	url: e.url,
 	secret: e.secret ?? P(),
 	signing: e.signing ?? t?.defaultSigning ?? c(),
 	retry: e.retry ?? t?.defaultRetry ?? j(),
 	filter: e.filter ?? null,
+	scope: e.scope ?? null,
 	headers: e.headers ?? null,
 	rateLimitPerMinute: e.rateLimitPerMinute ?? null,
 	active: !0,
@@ -148,19 +149,40 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	autoDisableReason: null,
 	payloadVersion: e.payloadVersion ?? t?.version ?? 1,
 	description: e.description ?? null
-}), le = (e, t) => e === t ? "current" : e < t ? "behind" : "ahead", L = (e, t) => {
+}), le = (e) => e instanceof Date ? e.getTime() : typeof e == "string" ? Date.parse(e) : 0, L = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" ? e : null, ue = (e) => {
+	if (typeof e != "string") return e;
+	try {
+		return JSON.parse(e);
+	} catch {
+		return e;
+	}
+}, R = (e) => ({
+	id: String(e.id),
+	deliveryId: String(e.deliveryId),
+	targetId: String(e.targetId),
+	event: String(e.event),
+	eventId: e.eventId ?? null,
+	attempt: Number(e.attempt ?? 0),
+	status: e.status,
+	responseStatus: e.responseStatus ?? null,
+	errorMessage: e.errorMessage ?? null,
+	latencyMs: e.latencyMs ?? null,
+	scheduledAt: L(e.scheduledAt),
+	nextAttemptAt: L(e.nextAttemptAt),
+	createdAt: L(e.createdAt)
+}), de = (e, t) => e === t ? "current" : e < t ? "behind" : "ahead", z = (e, t) => {
 	if (e === null) return !0;
 	let n = { payload: t };
-	for (let [t, r] of Object.entries(e)) if (!de(ue(n, t), r)) return !1;
+	for (let [t, r] of Object.entries(e)) if (!pe(fe(n, t), r)) return !1;
 	return !0;
-}, ue = (e, t) => {
+}, fe = (e, t) => {
 	let n = t.split("."), r = e;
 	for (let e of n) {
 		if (typeof r != "object" || !r) return;
 		r = r[e];
 	}
 	return r;
-}, de = (e, t) => {
+}, pe = (e, t) => {
 	if (typeof t == "object" && t && !Array.isArray(t)) {
 		let n = t;
 		if ("eq" in n) return e === n.eq;
@@ -171,7 +193,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		if ("in" in n && Array.isArray(n.in)) return n.in.includes(e);
 	}
 	return e === t;
-}, fe = (e, t, n = {}) => {
+}, me = (e, t, n = {}) => {
 	let r = new Map((n.events ?? []).map((e) => [e.id, e]));
 	return {
 		subscribe: async (t) => {
@@ -193,15 +215,15 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		emit: async (n, i) => {
 			let a = typeof n == "object" && n.kind === "event" ? D(n) : void 0, o = typeof n == "string" ? r.get(n) : a ?? n, s = typeof n == "string" ? n : n.id ?? n.name;
 			if (o !== void 0) {
-				let e = x.decodeUnknownEither(o.payload)(i, { errors: "all" });
-				if (te.isLeft(e)) throw new u({
+				let e = b.decodeUnknownEither(o.payload)(i, { errors: "all" });
+				if (ne.isLeft(e)) throw new u({
 					event: s,
 					issues: e.left.message
 				});
 			}
-			let c = y(), l = (await e.store.query({
+			let c = v(), l = (await e.store.query({
 				table: "_voltro_webhook_targets",
-				predicate: C("event", s),
+				predicate: S("event", s),
 				order: [{
 					column: "createdAt",
 					direction: "asc"
@@ -209,9 +231,9 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
-			})).filter((e) => L(e.filter, i)), d = [], f = JSON.stringify(i);
+			})).filter((e) => z(e.filter, i)), d = [], f = JSON.stringify(i);
 			for (let n of l) {
-				let r = y();
+				let r = v();
 				n.active ? (await t({
 					deliveryId: r,
 					targetId: n.id,
@@ -249,7 +271,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		replay: async (n) => {
 			let r = (await e.store.query({
 				table: "_voltro_webhook_deliveries",
-				predicate: C("deliveryId", n),
+				predicate: S("deliveryId", n),
 				order: [{
 					column: "attempt",
 					direction: "asc"
@@ -263,7 +285,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				deliveryId: r.deliveryId,
 				targetId: r.targetId,
 				event: r.event,
-				eventId: r.eventId ?? y(),
+				eventId: r.eventId ?? v(),
 				payloadJson: typeof r.payload == "string" ? r.payload : JSON.stringify(r.payload),
 				attemptEpoch: Date.now()
 			});
@@ -284,7 +306,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			});
 			let r = await e.store.query({
 				table: "_voltro_webhook_deliveries",
-				predicate: S(C("targetId", n), C("status", "pending")),
+				predicate: x(S("targetId", n), S("status", "pending")),
 				order: [{
 					column: "createdAt",
 					direction: "asc"
@@ -297,13 +319,13 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				deliveryId: e.deliveryId,
 				targetId: n,
 				event: e.event,
-				eventId: e.eventId ?? y(),
+				eventId: e.eventId ?? v(),
 				payloadJson: typeof e.payload == "string" ? e.payload : JSON.stringify(e.payload),
 				attemptEpoch: i
 			});
 		},
 		deleteTarget: async (t) => {
-			await e.store.delete("_voltro_webhook_targets", t), await e.store.deleteMany("_voltro_webhook_deliveries", { where: S(C("targetId", t), C("status", "pending")) });
+			await e.store.delete("_voltro_webhook_targets", t), await e.store.deleteMany("_voltro_webhook_deliveries", { where: x(S("targetId", t), S("status", "pending")) });
 		},
 		rotateSecret: async (t) => {
 			let n = P();
@@ -312,6 +334,89 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				updatedAt: /* @__PURE__ */ new Date()
 			}), { secret: n };
 		},
+		updateTarget: async (t, n) => {
+			if (n.url !== void 0 && F({
+				event: "x",
+				url: n.url
+			}), n.rateLimitPerMinute !== void 0 && n.rateLimitPerMinute !== null && (!Number.isInteger(n.rateLimitPerMinute) || n.rateLimitPerMinute < 1)) throw Error("updateTarget: rateLimitPerMinute must be a positive integer or null");
+			let r = { updatedAt: /* @__PURE__ */ new Date() };
+			for (let e of [
+				"url",
+				"description",
+				"filter",
+				"scope",
+				"headers",
+				"rateLimitPerMinute",
+				"autoDisableAfter",
+				"format"
+			]) n[e] !== void 0 && (r[e] = n[e]);
+			await e.store.update("_voltro_webhook_targets", t, r);
+		},
+		testTarget: async (n, r) => {
+			let i = (await e.store.query({
+				table: "_voltro_webhook_targets",
+				predicate: S("id", n),
+				order: void 0,
+				take: 1,
+				skip: void 0,
+				projection: void 0
+			}))[0];
+			if (i === void 0) throw Error(`testTarget: no target ${n}`);
+			let a = v(), o = JSON.stringify(r ?? {
+				test: !0,
+				targetId: n,
+				at: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			return i.active ? await t({
+				deliveryId: a,
+				targetId: i.id,
+				event: i.event,
+				eventId: v(),
+				payloadJson: o
+			}) : await e.store.insert("_voltro_webhook_deliveries", {
+				id: `${a}:1`,
+				deliveryId: a,
+				targetId: i.id,
+				tenantId: i.tenantId ?? null,
+				event: i.event,
+				eventId: null,
+				attempt: 1,
+				status: "pending",
+				payload: o,
+				scheduledAt: /* @__PURE__ */ new Date(),
+				createdAt: /* @__PURE__ */ new Date(),
+				updatedAt: /* @__PURE__ */ new Date()
+			}), { deliveryId: a };
+		},
+		listDeliveries: async (t) => {
+			let n = await e.store.query({
+				table: "_voltro_webhook_deliveries",
+				predicate: t?.targetId === void 0 ? void 0 : S("targetId", t.targetId),
+				order: [{
+					column: "createdAt",
+					direction: "desc"
+				}],
+				take: Math.min((t?.limit ?? 200) * (t?.status !== void 0 || t?.since !== void 0 ? 10 : 1), 5e3),
+				skip: void 0,
+				projection: void 0
+			}), r = t?.since?.getTime();
+			return n.filter((e) => t?.status === void 0 || e.status === t.status).filter((e) => r === void 0 || le(e.createdAt) >= r).slice(0, t?.limit ?? 200).map(R);
+		},
+		getDelivery: async (t) => {
+			let n = (await e.store.query({
+				table: "_voltro_webhook_deliveries",
+				predicate: S("id", t),
+				order: void 0,
+				take: 1,
+				skip: void 0,
+				projection: void 0
+			}))[0];
+			return n === void 0 ? null : {
+				...R(n),
+				payload: ue(n.payload),
+				responseBody: n.responseBody ?? null
+			};
+		},
 		updateTargetPayloadVersion: async (t, n) => {
 			if (n < 1 || !Number.isInteger(n)) throw new f({ version: n });
 			await e.store.update("_voltro_webhook_targets", t, {
@@ -319,39 +424,43 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				updatedAt: /* @__PURE__ */ new Date()
 			});
 		},
-		listTargets: async (t) => (await e.store.query({
-			table: "_voltro_webhook_targets",
-			predicate: t === void 0 ? void 0 : C("event", t),
-			order: [{
-				column: "createdAt",
-				direction: "desc"
-			}],
-			take: 500,
-			skip: void 0,
-			projection: void 0
-		})).map((e) => ({
-			id: e.id,
-			event: e.event,
-			url: e.url,
-			active: e.active,
-			rateLimitPerMinute: e.rateLimitPerMinute,
-			description: e.description,
-			payloadVersion: e.payloadVersion,
-			autoDisableAfter: e.autoDisableAfter,
-			consecutiveFailures: e.consecutiveFailures ?? 0,
-			autoDisabledAt: e.autoDisabledAt === null || e.autoDisabledAt === void 0 ? null : e.autoDisabledAt instanceof Date ? e.autoDisabledAt.toISOString() : String(e.autoDisabledAt),
-			autoDisableReason: e.autoDisableReason
-		}))
+		listTargets: async (t, n) => {
+			let r = await e.store.query({
+				table: "_voltro_webhook_targets",
+				predicate: t === void 0 ? void 0 : S("event", t),
+				order: [{
+					column: "createdAt",
+					direction: "desc"
+				}],
+				take: 500,
+				skip: void 0,
+				projection: void 0
+			});
+			return (n === void 0 ? r : r.filter((e) => e.scope !== null && Object.entries(n).every(([t, n]) => e.scope?.[t] === n))).map((e) => ({
+				id: e.id,
+				event: e.event,
+				url: e.url,
+				active: e.active,
+				rateLimitPerMinute: e.rateLimitPerMinute,
+				description: e.description,
+				payloadVersion: e.payloadVersion,
+				autoDisableAfter: e.autoDisableAfter,
+				consecutiveFailures: e.consecutiveFailures ?? 0,
+				autoDisabledAt: e.autoDisabledAt === null || e.autoDisabledAt === void 0 ? null : e.autoDisabledAt instanceof Date ? e.autoDisabledAt.toISOString() : String(e.autoDisabledAt),
+				autoDisableReason: e.autoDisableReason,
+				scope: e.scope
+			}));
+		}
 	};
-}, pe = b.gen(function* () {
+}, he = y.gen(function* () {
 	return yield* M;
-}), me = (e) => {
+}), ge = (e) => {
 	if (e.webhooks === void 0) throw Error("useWebhooks: `ctx.webhooks` is not set. Add @voltro/plugin-webhooks to your app.config.ts plugin list and declare at least one *.webhook.tsx file.");
 	return e.webhooks;
-}, he = 1e4, R = class {
+}, _e = 1e4, B = class {
 	capacity;
 	cache = /* @__PURE__ */ new Map();
-	constructor(e = he) {
+	constructor(e = _e) {
 		this.capacity = e;
 	}
 	evictExpired() {
@@ -386,20 +495,20 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	clear() {
 		this.cache.clear();
 	}
-}, z = null, B = () => (z === null && (z = new R()), z), V = {
+}, V = null, H = () => (V === null && (V = new B()), V), U = {
 	"5m": 5 * 6e4,
 	"1h": 60 * 6e4,
 	"6h": 360 * 6e4,
 	"1d": 1440 * 6e4,
 	"7d": 10080 * 6e4,
 	"30d": 720 * 60 * 6e4
-}, H = (e) => e === void 0 ? V["7d"] : V[e] ?? V["7d"], U = (e, t) => ({
+}, W = (e) => e === void 0 ? U["7d"] : U[e] ?? U["7d"], G = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), ge = (e, t) => {
-	let n = e.provider, r = e.signature ?? n?.signature ?? null, i = e.idempotency ?? n?.idempotency ?? null, o = e.bodyType ?? n?.bodyType ?? "json", s = t.idempotencyCache ?? B(), c = H(i?.ttl), l = t.log ?? ((e) => {
-		re({ scope: `webhook:${e.webhookId}` }).debug("incoming webhook", {
+}), ve = (e, t) => {
+	let n = e.provider, r = e.signature ?? n?.signature ?? null, i = e.idempotency ?? n?.idempotency ?? null, o = e.bodyType ?? n?.bodyType ?? "json", s = t.idempotencyCache ?? H(), c = W(i?.ttl), l = t.log ?? ((e) => {
+		w({ scope: `webhook:${e.webhookId}` }).debug("incoming webhook", {
 			status: e.status,
 			signatureOk: e.signatureOk,
 			idempotency: e.idempotency,
@@ -410,7 +519,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	return async (n) => {
 		let u = Date.now();
 		if (n.method !== "POST") {
-			let t = U(405, {
+			let t = G(405, {
 				error: "method not allowed",
 				expected: "POST"
 			});
@@ -431,7 +540,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				r._tag === "custom" && n.headers["x-slack-request-timestamp"] && (o = `${n.headers["x-slack-request-timestamp"]}|${t ?? ""}`);
 				let s = a(r, n.rawBody, i, o);
 				if (d = s.ok, !s.ok) {
-					let t = U(401, {
+					let t = G(401, {
 						error: "invalid signature",
 						reason: s.reason
 					});
@@ -457,7 +566,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				f = r;
 			} else f = n.rawBody;
 		} catch (t) {
-			let n = U(400, {
+			let n = G(400, {
 				error: "malformed body",
 				reason: t.message
 			});
@@ -472,9 +581,9 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		}
 		let p;
 		try {
-			p = x.decodeUnknownSync(e.payload)(f);
+			p = b.decodeUnknownSync(e.payload)(f);
 		} catch (t) {
-			let n = U(422, {
+			let n = G(422, {
 				error: "schema validation failed",
 				reason: t.message
 			});
@@ -493,7 +602,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			if (m = typeof t == "string" ? n.headers[t.toLowerCase()] : t(n.headers, n.rawBody), m !== void 0 && m.length > 0) {
 				let t = s.claim(m, c);
 				if (h = t, t === "duplicate") {
-					let t = U(200, {
+					let t = G(200, {
 						received: !0,
 						duplicate: !0
 					});
@@ -506,7 +615,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 					}), t;
 				}
 				if (t === "inflight") {
-					let t = U(409, {
+					let t = G(409, {
 						error: "request already in flight",
 						idempotencyKey: m
 					});
@@ -529,7 +638,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				idempotencyKey: m ?? "",
 				...r ? { workflows: r } : {}
 			}), m !== void 0 && s.commit(m);
-			let i = U(200, { received: !0 });
+			let i = G(200, { received: !0 });
 			return l({
 				webhookId: e.id,
 				status: 200,
@@ -539,7 +648,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			}), i;
 		} catch (t) {
 			m !== void 0 && s.release(m);
-			let n = U(500, {
+			let n = G(500, {
 				error: "handler threw",
 				reason: t.message
 			});
@@ -550,7 +659,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				idempotency: h,
 				durationMs: Date.now() - u,
 				errorMessage: t.message
-			}), ne({
+			}), re({
 				error: t,
 				source: "webhook",
 				name: e.id,
@@ -558,20 +667,20 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			}), n;
 		}
 	};
-}, _e = (e) => `/webhooks/${e}`, W = "_voltro_webhook_rate_windows", G = 6e4, ve = (e, t) => `${e}@${t}`, K = async (e, t, n) => (await e.query({
+}, ye = (e) => `/webhooks/${e}`, K = "_voltro_webhook_rate_windows", q = 6e4, be = (e, t) => `${e}@${t}`, J = async (e, t, n) => (await e.query({
 	table: "_voltro_webhook_rate_windows",
-	predicate: S(C("scope", t), C("bucket", n)),
+	predicate: x(S("scope", t), S("bucket", n)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, q = 32, J = async (e, t, n) => {
-	for (let r = 0; r < q; r++) {
+}))[0] ?? null, Y = 32, X = async (e, t, n) => {
+	for (let r = 0; r < Y; r++) {
 		r > 0 && await new Promise((e) => setTimeout(e, r));
-		let i = await K(e, t.key, n);
+		let i = await J(e, t.key, n);
 		if (i === null) {
-			await e.insertIgnore(W, {
-				id: ve(t.key, n),
+			await e.insertIgnore(K, {
+				id: be(t.key, n),
 				scope: t.key,
 				bucket: n,
 				count: 0,
@@ -584,31 +693,31 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		if (await e.updateMany("_voltro_webhook_rate_windows", {
 			count: i.count + 1,
 			updatedAt: /* @__PURE__ */ new Date()
-		}, { where: S(C("id", i.id), C("count", i.count)) }) === 1) return !0;
+		}, { where: x(S("id", i.id), S("count", i.count)) }) === 1) return !0;
 	}
-	throw Error(`webhook rate window: contention on (${t.key}, ${n}) exceeded ${q} attempts`);
-}, Y = async (e, t, n) => {
-	for (let r = 0; r < q; r++) {
+	throw Error(`webhook rate window: contention on (${t.key}, ${n}) exceeded ${Y} attempts`);
+}, Z = async (e, t, n) => {
+	for (let r = 0; r < Y; r++) {
 		r > 0 && await new Promise((e) => setTimeout(e, r));
-		let i = await K(e, t, n);
+		let i = await J(e, t, n);
 		if (i === null || i.count <= 0 || await e.updateMany("_voltro_webhook_rate_windows", {
 			count: i.count - 1,
 			updatedAt: /* @__PURE__ */ new Date()
-		}, { where: S(C("id", i.id), C("count", i.count)) }) === 1) return;
+		}, { where: x(S("id", i.id), S("count", i.count)) }) === 1) return;
 	}
-	throw Error(`webhook rate window: release contention on (${t}) exceeded ${q} attempts`);
-}, X = async (e, t, n, r = G) => {
+	throw Error(`webhook rate window: release contention on (${t}) exceeded ${Y} attempts`);
+}, xe = async (e, t, n, r = q) => {
 	if (t.length === 0) return {
 		acquired: !0,
 		retryInMs: 0
 	};
 	let i = Math.floor(n / r), a = [];
 	for (let o of t) {
-		if (await J(e, o, i)) {
+		if (await X(e, o, i)) {
 			a.push(o);
 			continue;
 		}
-		for (let t of a) await Y(e, t.key, i);
+		for (let t of a) await Z(e, t.key, i);
 		return {
 			acquired: !1,
 			retryInMs: (i + 1) * r - n
@@ -618,7 +727,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		acquired: !0,
 		retryInMs: 0
 	};
-}, Z = (e, t) => {
+}, Se = (e, t) => {
 	if (e === "json") return {
 		contentType: "application/json",
 		bytes: Buffer.from(t, "utf8")
@@ -634,15 +743,15 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	}
 	return e === "form" ? {
 		contentType: "application/x-www-form-urlencoded",
-		bytes: Buffer.from(ye(n), "utf8")
+		bytes: Buffer.from(Ce(n), "utf8")
 	} : {
 		contentType: "application/xml",
-		bytes: Buffer.from(xe(n), "utf8")
+		bytes: Buffer.from(Te(n), "utf8")
 	};
-}, ye = (e) => {
+}, Ce = (e) => {
 	if (typeof e != "object" || !e || Array.isArray(e)) throw new d({
 		format: "form",
-		reason: `form encoding requires a JSON object at the top level, got ${we(e)}`
+		reason: `form encoding requires a JSON object at the top level, got ${Oe(e)}`
 	});
 	let t = new URLSearchParams();
 	for (let [n, r] of Object.entries(e)) Q(t, n, r);
@@ -661,13 +770,13 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		return;
 	}
 	e.append(t, String(n));
-}, be = /^[A-Za-z_][A-Za-z0-9_.-]*$/, xe = (e) => `<?xml version="1.0" encoding="UTF-8"?>${$("webhook", e)}`, $ = (e, t) => {
-	if (!be.test(e)) throw new d({
+}, we = /^[A-Za-z_][A-Za-z0-9_.-]*$/, Te = (e) => `<?xml version="1.0" encoding="UTF-8"?>${$("webhook", e)}`, $ = (e, t) => {
+	if (!we.test(e)) throw new d({
 		format: "xml",
 		reason: `object key ${JSON.stringify(e)} is not a valid XML element name`
 	});
-	return `<${e}>${Se(e, t)}</${e}>`;
-}, Se = (e, t) => t == null ? "" : Array.isArray(t) ? t.map((e) => $("item", e)).join("") : typeof t == "object" ? Object.entries(t).map(([e, t]) => $(e, t)).join("") : Ce(String(t)), Ce = (e) => e.replace(/[&<>"']/g, (e) => {
+	return `<${e}>${Ee(e, t)}</${e}>`;
+}, Ee = (e, t) => t == null ? "" : Array.isArray(t) ? t.map((e) => $("item", e)).join("") : typeof t == "object" ? Object.entries(t).map(([e, t]) => $(e, t)).join("") : De(String(t)), De = (e) => e.replace(/[&<>"']/g, (e) => {
 	switch (e) {
 		case "&": return "&amp;";
 		case "<": return "&lt;";
@@ -675,17 +784,17 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		case "\"": return "&quot;";
 		default: return "&apos;";
 	}
-}), we = (e) => e === null ? "null" : Array.isArray(e) ? "array" : typeof e, Te = "_voltro_webhook_targets", Ee = 32, De = async (e, t) => (await e.query({
+}), Oe = (e) => e === null ? "null" : Array.isArray(e) ? "array" : typeof e, ke = "_voltro_webhook_targets", Ae = 32, je = async (e, t) => (await e.query({
 	table: "_voltro_webhook_targets",
-	predicate: C("id", t),
+	predicate: S("id", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Oe = async (e, t, n, r, i = /* @__PURE__ */ new Date()) => {
-	for (let a = 0; a < Ee; a++) {
+}))[0] ?? null, Me = async (e, t, n, r, i = /* @__PURE__ */ new Date()) => {
+	for (let a = 0; a < Ae; a++) {
 		a > 0 && await new Promise((e) => setTimeout(e, a));
-		let o = await De(e, t);
+		let o = await je(e, t);
 		if (o === null) return {
 			consecutiveFailures: 0,
 			autoDisabled: !1
@@ -695,7 +804,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			if (s === 0 || await e.updateMany("_voltro_webhook_targets", {
 				consecutiveFailures: 0,
 				updatedAt: i
-			}, { where: S(C("id", t), C("consecutiveFailures", s)) }) === 1) return {
+			}, { where: x(S("id", t), S("consecutiveFailures", s)) }) === 1) return {
 				consecutiveFailures: 0,
 				autoDisabled: !1
 			};
@@ -705,68 +814,68 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			consecutiveFailures: c,
 			updatedAt: i
 		};
-		if (u && (d.active = !1, d.autoDisabledAt = i, d.autoDisableReason = r.slice(0, 500)), await e.updateMany("_voltro_webhook_targets", d, { where: S(C("id", t), C("consecutiveFailures", s)) }) === 1) return {
+		if (u && (d.active = !1, d.autoDisabledAt = i, d.autoDisableReason = r.slice(0, 500)), await e.updateMany("_voltro_webhook_targets", d, { where: x(S("id", t), S("consecutiveFailures", s)) }) === 1) return {
 			consecutiveFailures: c,
 			autoDisabled: u
 		};
 	}
-	throw Error(`webhook auto-disable: streak CAS contention on target ${t} exceeded ${Ee} attempts`);
-}, ke = x.Struct({
-	status: x.Number,
-	body: x.String,
-	latencyMs: x.Number,
-	retryAfterSec: x.Union(x.Number, x.Undefined),
-	transportError: x.Union(x.String, x.Undefined),
-	encodeError: x.Union(x.String, x.Undefined)
-}), Ae = x.Struct({
-	outcome: x.Literal("succeeded", "failed", "retry"),
-	delayMs: x.Union(x.Number, x.Undefined),
-	reason: x.Union(x.String, x.Undefined),
-	autoDisabled: x.Union(x.Boolean, x.Undefined),
-	consecutiveFailures: x.Union(x.Number, x.Undefined)
-}), je = x.Struct({
-	acquired: x.Boolean,
-	retryInMs: x.Number
-}), Me = ie.make({
+	throw Error(`webhook auto-disable: streak CAS contention on target ${t} exceeded ${Ae} attempts`);
+}, Ne = b.Struct({
+	status: b.Number,
+	body: b.String,
+	latencyMs: b.Number,
+	retryAfterSec: b.Union(b.Number, b.Undefined),
+	transportError: b.Union(b.String, b.Undefined),
+	encodeError: b.Union(b.String, b.Undefined)
+}), Pe = b.Struct({
+	outcome: b.Literal("succeeded", "failed", "retry"),
+	delayMs: b.Union(b.Number, b.Undefined),
+	reason: b.Union(b.String, b.Undefined),
+	autoDisabled: b.Union(b.Boolean, b.Undefined),
+	consecutiveFailures: b.Union(b.Number, b.Undefined)
+}), Fe = b.Struct({
+	acquired: b.Boolean,
+	retryInMs: b.Number
+}), Ie = ie.make({
 	name: "voltro.deliverWebhook",
 	payload: {
-		deliveryId: x.String,
-		targetId: x.String,
-		event: x.String,
-		eventId: x.String,
-		payloadJson: x.String,
-		attemptEpoch: x.optionalWith(x.Number, { default: () => 0 })
+		deliveryId: b.String,
+		targetId: b.String,
+		event: b.String,
+		eventId: b.String,
+		payloadJson: b.String,
+		attemptEpoch: b.optionalWith(b.Number, { default: () => 0 })
 	},
-	success: x.Struct({
-		finalStatus: x.Literal("succeeded", "failed", "deferred"),
-		attempts: x.Number
+	success: b.Struct({
+		finalStatus: b.Literal("succeeded", "failed", "deferred"),
+		attempts: b.Number
 	}),
 	idempotencyKey: ({ deliveryId: e, attemptEpoch: t }) => `voltro.deliverWebhook:${e}:${t ?? 0}`
-}), Ne = (e, t = {}) => (n, r) => {
-	let { deliveryId: i, targetId: a, event: s, eventId: c, payloadJson: l } = n, u = re({ scope: `webhook:${i}` });
-	return b.gen(function* () {
+}), Le = (e, t = {}) => (n, r) => {
+	let { deliveryId: i, targetId: a, event: s, eventId: c, payloadJson: l } = n, u = w({ scope: `webhook:${i}` });
+	return y.gen(function* () {
 		let n = yield* T.make({
 			name: "fetch-target",
-			success: x.Union(x.Null, x.Struct({
-				id: x.String,
-				event: x.String,
-				url: x.String,
-				secret: x.String,
-				signing: x.Any,
-				retry: x.Any,
-				headers: x.Union(x.Record({
-					key: x.String,
-					value: x.String
-				}), x.Null),
-				rateLimitPerMinute: x.Union(x.Number, x.Null),
-				active: x.Boolean,
-				format: x.Literal("json", "form", "xml"),
-				tenantId: x.Union(x.String, x.Null)
+			success: b.Union(b.Null, b.Struct({
+				id: b.String,
+				event: b.String,
+				url: b.String,
+				secret: b.String,
+				signing: b.Any,
+				retry: b.Any,
+				headers: b.Union(b.Record({
+					key: b.String,
+					value: b.String
+				}), b.Null),
+				rateLimitPerMinute: b.Union(b.Number, b.Null),
+				active: b.Boolean,
+				format: b.Literal("json", "form", "xml"),
+				tenantId: b.Union(b.String, b.Null)
 			})),
-			execute: b.tryPromise({
+			execute: y.tryPromise({
 				try: async () => (await e.store.query({
 					table: "_voltro_webhook_targets",
-					predicate: C("id", a),
+					predicate: S("id", a),
 					order: [{
 						column: "createdAt",
 						direction: "asc"
@@ -780,7 +889,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 					event: s,
 					cause: String(e)
 				}), /* @__PURE__ */ Error(`fetch-target failed: ${e.message}`))
-			}).pipe(b.orDie)
+			}).pipe(y.orDie)
 		});
 		if (n === null) return {
 			finalStatus: "failed",
@@ -807,49 +916,49 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		};
 		if (n.active !== !0) return yield* T.make({
 			name: "record-paused-pending",
-			success: x.Void,
-			execute: b.tryPromise({
+			success: b.Void,
+			execute: y.tryPromise({
 				try: () => r(`${i}:1`, 1, { status: "pending" }),
 				catch: (e) => /* @__PURE__ */ Error(`record-paused-pending failed: ${e.message}`)
-			}).pipe(b.orDie)
+			}).pipe(y.orDie)
 		}), {
 			finalStatus: "deferred",
 			attempts: 0
 		};
-		let f = (e) => typeof e == "string" ? JSON.parse(e) : e, p = f(n.retry), m = f(n.signing), h = n.headers === null ? null : f(n.headers), g = t.rateWindowMs ?? 6e4, _ = t.events?.find((e) => e.id === s)?.globalRateLimit, v = [...typeof n.rateLimitPerMinute == "number" && n.rateLimitPerMinute > 0 ? [{
+		let f = (e) => typeof e == "string" ? JSON.parse(e) : e, p = f(n.retry), m = f(n.signing), h = n.headers === null ? null : f(n.headers), ee = t.rateWindowMs ?? 6e4, g = t.events?.find((e) => e.id === s)?.globalRateLimit, _ = [...typeof n.rateLimitPerMinute == "number" && n.rateLimitPerMinute > 0 ? [{
 			key: `target:${n.id}`,
 			limit: n.rateLimitPerMinute
-		}] : [], ..._ !== void 0 && _.perMinute > 0 ? [{
+		}] : [], ...g !== void 0 && g.perMinute > 0 ? [{
 			key: `event:${s}`,
-			limit: _.perMinute
+			limit: g.perMinute
 		}] : []];
 		for (let t = 1; t <= p.maxAttempts; t++) {
 			let f = `${i}:${t}`;
-			if (v.length > 0) for (let n = 0;; n++) {
+			if (_.length > 0) for (let n = 0;; n++) {
 				let i = yield* T.make({
 					name: `rate-acquire-${t}-${n}`,
-					success: je,
-					execute: b.tryPromise({
-						try: () => X(e.store, v, Date.now(), g),
+					success: Fe,
+					execute: y.tryPromise({
+						try: () => xe(e.store, _, Date.now(), ee),
 						catch: (e) => (u.debug("rate-acquire raw error", {
 							targetId: a,
 							event: s,
 							attempt: t,
 							cause: String(e)
 						}), /* @__PURE__ */ Error(`rate-acquire failed: ${e.message}`))
-					}).pipe(b.orDie)
+					}).pipe(y.orDie)
 				});
 				if (i.acquired) break;
 				yield* T.make({
 					name: `record-rate-deferral-${t}-${n}`,
-					success: x.Void,
-					execute: b.tryPromise({
+					success: b.Void,
+					execute: y.tryPromise({
 						try: () => r(f, t, {
 							status: "pending",
 							nextAttemptAt: new Date(Date.now() + i.retryInMs)
 						}),
 						catch: (e) => /* @__PURE__ */ Error(`record-rate-deferral failed: ${e.message}`)
-					}).pipe(b.orDie)
+					}).pipe(y.orDie)
 				}), yield* E.sleep({
 					name: `rate-window-sleep-${t}-${n}`,
 					duration: `${i.retryInMs} millis`
@@ -857,23 +966,23 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			}
 			yield* T.make({
 				name: `record-attempt-start-${t}`,
-				success: x.Void,
-				execute: b.tryPromise({
+				success: b.Void,
+				execute: y.tryPromise({
 					try: () => r(f, t, {
 						status: "inFlight",
 						nextAttemptAt: null,
 						scheduledAt: /* @__PURE__ */ new Date()
 					}),
 					catch: (e) => /* @__PURE__ */ Error(`record-attempt-start failed: ${e.message}`)
-				}).pipe(b.orDie)
+				}).pipe(y.orDie)
 			});
-			let _ = yield* T.make({
+			let g = yield* T.make({
 				name: `sign-and-post-${t}`,
-				success: ke,
-				execute: b.promise(async () => {
+				success: Ne,
+				execute: y.promise(async () => {
 					let e = Date.now(), r;
 					try {
-						r = Z(n.format, l);
+						r = Se(n.format, l);
 					} catch (t) {
 						if (t instanceof d) return {
 							status: 0,
@@ -886,7 +995,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 						throw t;
 					}
 					let a = Buffer.from(r.bytes), { headerName: u, headerValue: f } = o(m, a, n.secret);
-					process.env.NODE_ENV === "production" && w(n.url);
+					process.env.NODE_ENV === "production" && C(n.url);
 					try {
 						let o = await fetch(n.url, {
 							method: "POST",
@@ -921,18 +1030,18 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 						};
 					}
 				})
-			}), y = yield* T.make({
+			}), v = yield* T.make({
 				name: `classify-and-record-${t}`,
-				success: Ae,
-				execute: b.tryPromise({
+				success: Pe,
+				execute: y.tryPromise({
 					try: async () => {
-						let r = _.status >= 200 && _.status < 300, i = _.transportError !== void 0, o = _.encodeError !== void 0, s = (t, n) => Oe(e.store, a, t, n);
+						let r = g.status >= 200 && g.status < 300, i = g.transportError !== void 0, o = g.encodeError !== void 0, s = (t, n) => Me(e.store, a, t, n);
 						if (r) {
 							await e.store.update("_voltro_webhook_deliveries", f, {
 								status: "succeeded",
-								responseStatus: _.status,
-								responseBody: _.body,
-								latencyMs: _.latencyMs,
+								responseStatus: g.status,
+								responseBody: g.body,
+								latencyMs: g.latencyMs,
 								updatedAt: /* @__PURE__ */ new Date()
 							});
 							let t = await s(!0, "");
@@ -945,17 +1054,17 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 							};
 						}
 						let c = o ? null : A(p, t, {
-							...i ? {} : { status: _.status },
-							..._.retryAfterSec === void 0 ? {} : { retryAfterSeconds: _.retryAfterSec }
+							...i ? {} : { status: g.status },
+							...g.retryAfterSec === void 0 ? {} : { retryAfterSeconds: g.retryAfterSec }
 						});
 						if (c === null) {
-							let t = o ? `encode (${n.format}): ${_.encodeError}` : i ? `transport: ${_.transportError}` : `http ${_.status}: ${_.body.slice(0, 200)}`;
+							let t = o ? `encode (${n.format}): ${g.encodeError}` : i ? `transport: ${g.transportError}` : `http ${g.status}: ${g.body.slice(0, 200)}`;
 							await e.store.update("_voltro_webhook_deliveries", f, {
 								status: "failed",
-								responseStatus: i || o ? null : _.status,
-								responseBody: i || o ? null : _.body,
-								errorMessage: o ? t : _.transportError ?? null,
-								latencyMs: _.latencyMs,
+								responseStatus: i || o ? null : g.status,
+								responseBody: i || o ? null : g.body,
+								errorMessage: o ? t : g.transportError ?? null,
+								latencyMs: g.latencyMs,
 								updatedAt: /* @__PURE__ */ new Date()
 							});
 							let r = await s(!1, t);
@@ -969,10 +1078,10 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 						}
 						return await e.store.update("_voltro_webhook_deliveries", f, {
 							status: "retryScheduled",
-							responseStatus: i ? null : _.status,
-							responseBody: i ? null : _.body,
-							errorMessage: _.transportError ?? null,
-							latencyMs: _.latencyMs,
+							responseStatus: i ? null : g.status,
+							responseBody: i ? null : g.body,
+							errorMessage: g.transportError ?? null,
+							latencyMs: g.latencyMs,
 							nextAttemptAt: new Date(Date.now() + c.delayMs),
 							updatedAt: /* @__PURE__ */ new Date()
 						}), {
@@ -989,24 +1098,24 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 						attempt: t,
 						cause: String(e)
 					}), /* @__PURE__ */ Error(`classify-and-record failed: ${e.message}`))
-				}).pipe(b.orDie)
+				}).pipe(y.orDie)
 			});
-			if (y.autoDisabled === !0 && u.warn("target auto-disabled after consecutive failures", {
+			if (v.autoDisabled === !0 && u.warn("target auto-disabled after consecutive failures", {
 				targetId: a,
 				event: s,
-				consecutiveFailures: y.consecutiveFailures ?? null,
-				reason: y.reason ?? null
-			}), y.outcome === "succeeded") return {
+				consecutiveFailures: v.consecutiveFailures ?? null,
+				reason: v.reason ?? null
+			}), v.outcome === "succeeded") return {
 				finalStatus: "succeeded",
 				attempts: t
 			};
-			if (y.outcome === "failed") return {
+			if (v.outcome === "failed") return {
 				finalStatus: "failed",
 				attempts: t
 			};
-			y.delayMs !== void 0 && (yield* E.sleep({
+			v.delayMs !== void 0 && (yield* E.sleep({
 				name: `retry-sleep-${t}`,
-				duration: `${y.delayMs} millis`
+				duration: `${v.delayMs} millis`
 			}));
 		}
 		return {
@@ -1016,4 +1125,4 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	});
 };
 //#endregion
-export { R as IdempotencyCache, G as RATE_WINDOW_MS, W as RATE_WINDOW_TABLE, Te as TARGETS_TABLE, l as WebhookDeliveryNotFound, u as WebhookPayloadInvalid, d as WebhookPayloadUnrepresentable, f as WebhookPayloadVersionInvalid, p as WebhookSubscribeInvalid, M as WebhooksService, m as _voltroWebhookDeliveriesTable, h as _voltroWebhookRateWindowsTable, g as _voltroWebhookTargetsTable, X as acquireRateSlots, D as asOutgoingEvent, Ne as buildDeliverWebhookExecute, fe as buildWebhooksService, le as compareVersions, J as consumeRateSlot, _e as defaultIncomingPath, c as defaultOutgoingSignature, j as defaultRetryPolicy, s as defineIncomingWebhook, t as defineWebhookProvider, Me as deliverWebhookWorkflow, Z as encodePayload, se as fastRetryPolicy, P as generateSecret, B as getIdempotencyCache, i as githubSignature, ae as hasWebhookAudience, r as isWebhookDescriptor, L as matchesFilter, ge as mountIncomingWebhook, A as nextRetry, O as parseDuration, H as parseTtl, Oe as recordDeliveryOutcome, Y as releaseRateSlot, I as resolveSubscribe, o as signPayload, n as slackSignature, e as stripeSignature, me as useWebhooks, pe as useWebhooksEffect, F as validateSubscribe, a as verifySignature, _ as webhookTables };
+export { B as IdempotencyCache, q as RATE_WINDOW_MS, K as RATE_WINDOW_TABLE, ke as TARGETS_TABLE, l as WebhookDeliveryNotFound, u as WebhookPayloadInvalid, d as WebhookPayloadUnrepresentable, f as WebhookPayloadVersionInvalid, p as WebhookSubscribeInvalid, M as WebhooksService, m as _voltroWebhookDeliveriesTable, h as _voltroWebhookRateWindowsTable, ee as _voltroWebhookTargetsTable, xe as acquireRateSlots, D as asOutgoingEvent, Le as buildDeliverWebhookExecute, me as buildWebhooksService, de as compareVersions, X as consumeRateSlot, ye as defaultIncomingPath, c as defaultOutgoingSignature, j as defaultRetryPolicy, s as defineIncomingWebhook, t as defineWebhookProvider, Ie as deliverWebhookWorkflow, Se as encodePayload, se as fastRetryPolicy, P as generateSecret, H as getIdempotencyCache, i as githubSignature, ae as hasWebhookAudience, r as isWebhookDescriptor, z as matchesFilter, ve as mountIncomingWebhook, A as nextRetry, O as parseDuration, W as parseTtl, Me as recordDeliveryOutcome, Z as releaseRateSlot, I as resolveSubscribe, o as signPayload, n as slackSignature, e as stripeSignature, ge as useWebhooks, he as useWebhooksEffect, F as validateSubscribe, a as verifySignature, g as webhookTables };