@voltro/plugin-webhooks 0.27.0 → 0.29.0

package/dist/index.js

@@ -7,9 +7,9 @@ import { and as S, eq as C } from "@voltro/database";
 import { assertPublicUrl as w } from "@voltro/integration-http";
 import { publishServerError as ne } from "@voltro/protocol";
 import { createLogger as T } from "@voltro/logger";
-import { Activity as E, DurableClock as re, Workflow as ie } from "@effect/workflow";
+import { Activity as E, DurableClock as D, Workflow as re } from "@effect/workflow";
 //#region src/eventAudience.ts
-var ae = (e) => e.webhook !== void 0, D = (e) => {
+var ie = (e) => e.webhook !== void 0, O = (e) => {
 	let t = e.webhook;
 	if (t !== void 0) return {
 		_tag: "outgoingEvent",
@@ -19,8 +19,8 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		...t.version === void 0 ? {} : { version: t.version },
 		...t.rateLimit === void 0 ? {} : { globalRateLimit: t.rateLimit }
 	};
-}, oe = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, O = (e) => {
-	let t = oe.exec(e);
+}, ae = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, k = (e) => {
+	let t = ae.exec(e);
 	if (!t) throw Error(`invalid duration literal: ${e}`);
 	let n = Number(t[1]), r = t[2] ?? "s";
 	switch (r) {
@@ -31,7 +31,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		case "d": return n * 864e5;
 		default: throw Error(`unreachable unit: ${r}`);
 	}
-}, k = [
+}, A = [
 	408,
 	425,
 	429,
@@ -39,16 +39,16 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	502,
 	503,
 	504
-], se = (e, t, n) => {
-	if (t >= e.maxAttempts || n?.status !== void 0 && !(e.retryOn ?? k).includes(n.status)) return null;
+], oe = (e, t, n) => {
+	if (t >= e.maxAttempts || n?.status !== void 0 && !(e.retryOn ?? A).includes(n.status)) return null;
 	if (e.honourRetryAfter !== !1 && n?.retryAfterSeconds !== void 0) {
-		let t = n.retryAfterSeconds * 1e3, r = O(e.maxDelay), i = Math.min(t, r);
+		let t = n.retryAfterSeconds * 1e3, r = k(e.maxDelay), i = Math.min(t, r);
 		return {
 			delayMs: i,
 			baseDelayMs: i
 		};
 	}
-	let r = O(e.initialDelay), i = O(e.maxDelay), a;
+	let r = k(e.initialDelay), i = k(e.maxDelay), a;
 	switch (e.strategy) {
 		case "fixed":
 			a = r;
@@ -66,12 +66,12 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		delayMs: Math.max(1, Math.floor(o)),
 		baseDelayMs: a
 	};
-}, A = () => ({
+}, se = () => ({
 	strategy: "exponential",
 	maxAttempts: 8,
 	initialDelay: "5s",
 	maxDelay: "1h",
-	retryOn: k,
+	retryOn: A,
 	honourRetryAfter: !0,
 	jitter: "full"
 }), ce = () => ({
@@ -79,7 +79,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	maxAttempts: 120,
 	initialDelay: "30s",
 	maxDelay: "30s",
-	retryOn: k,
+	retryOn: A,
 	honourRetryAfter: !0,
 	jitter: "full"
 }), j = class extends ee.Tag("@voltro/webhooks/WebhooksService")() {}, le = 32, M = 32, N = () => v(le).toString("hex"), P = (e) => e.events ?? (e.event === void 0 ? [] : [e.event]), F = (e) => {
@@ -149,7 +149,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	url: e.url,
 	secret: r ?? e.secret ?? N(),
 	signing: e.signing ?? t?.defaultSigning ?? c(),
-	retry: e.retry ?? t?.defaultRetry ?? A(),
+	retry: e.retry ?? t?.defaultRetry ?? se(),
 	filter: e.filter ?? null,
 	scope: e.scope ?? null,
 	headers: e.headers ?? null,
@@ -206,59 +206,72 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		if ("in" in n && Array.isArray(n.in)) return n.in.includes(e);
 	}
 	return e === t;
-}, he = (e, t, n = {}) => {
+}, B = (e, t) => e !== null && Object.entries(t).every(([t, n]) => e[t] === n), V = 500, H = 200, U = async (e, t) => {
+	let n = [];
+	for (let r = 0; r < H; r += 1) {
+		let i = await e.store.query({
+			table: "_voltro_webhook_targets",
+			predicate: t,
+			order: [{
+				column: "id",
+				direction: "asc"
+			}],
+			take: V,
+			skip: r === 0 ? void 0 : r * V,
+			projection: void 0
+		});
+		if (n.push(...i), i.length < V) return n;
+	}
+	throw Error(`webhooks: more than ${H * V} rows in \`_voltro_webhook_targets\` — refusing to answer a scope lookup from a partial scan. A truncated scan mints a fresh secret for a live endpoint (breaking its signatures) or reports that a real scope matches nothing.`);
+}, he = async (e, t) => {
+	let n = (await U(e)).filter((e) => B(e.scope, t));
+	if (n.length === 0) return;
+	let r = new Set(n.map((e) => e.secret));
+	if (r.size > 1) throw Error(`webhooks.subscribe: the scope ${JSON.stringify(t)} matches ${n.length} targets with ${r.size} different secrets, so it is not one endpoint. Pass \`secret\` explicitly, or narrow the scope.`);
+	return [...r][0];
+}, ge = (e, t, n = {}) => {
 	let r = new Map((n.events ?? []).map((e) => [e.id, e])), i = {
 		subscribe: async (t) => {
 			F(t);
-			let n = P(t), i = t.secret ?? N(), a = n.map((e) => I(t, r.get(e), e, i));
-			for (let t of a) await e.store.insert("_voltro_webhook_targets", {
+			let n = P(t), i = t.secret === void 0 && t.scope !== void 0 ? await he(e, t.scope) : void 0, a = t.secret ?? i ?? N(), o = n.map((e) => I(t, r.get(e), e, a));
+			for (let t of o) await e.store.insert("_voltro_webhook_targets", {
 				...t,
 				createdAt: /* @__PURE__ */ new Date(),
 				updatedAt: /* @__PURE__ */ new Date()
 			});
-			let o = a[0];
+			let s = o[0];
 			return {
-				id: o.id,
-				event: o.event,
-				url: o.url,
-				secret: o.secret,
-				signing: o.signing,
-				retry: o.retry,
-				...a.length > 1 ? { targets: a.map((e) => ({
+				id: s.id,
+				event: s.event,
+				url: s.url,
+				secret: s.secret,
+				signing: s.signing,
+				retry: s.retry,
+				...o.length > 1 ? { targets: o.map((e) => ({
 					id: e.id,
 					event: e.event
 				})) } : {}
 			};
 		},
-		emit: async (n, i) => {
-			let a = typeof n == "object" && n.kind === "event" ? D(n) : void 0, o = typeof n == "string" ? r.get(n) : a ?? n, s = typeof n == "string" ? n : n.id ?? n.name;
-			if (o !== void 0) {
-				let e = x.decodeUnknownEither(o.payload)(i, { errors: "all" });
+		emit: async (n, i, a) => {
+			let o = typeof n == "object" && n.kind === "event" ? O(n) : void 0, s = typeof n == "string" ? r.get(n) : o ?? n, c = typeof n == "string" ? n : n.id ?? n.name;
+			if (s !== void 0) {
+				let e = x.decodeUnknownEither(s.payload)(i, { errors: "all" });
 				if (te.isLeft(e)) throw new u({
-					event: s,
+					event: c,
 					issues: e.left.message
 				});
 			}
-			let c = y(), l = (await e.store.query({
-				table: "_voltro_webhook_targets",
-				predicate: C("event", s),
-				order: [{
-					column: "createdAt",
-					direction: "asc"
-				}],
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			})).filter((e) => z(e.filter, i)), d = [], f = JSON.stringify(i);
-			for (let n of l) {
+			let l = y(), d = a?.tenantId, f = (await U(e, d == null ? C("event", c) : S(C("event", c), C("tenantId", d)))).filter((e) => z(e.filter, i)), p = [], m = JSON.stringify(i);
+			for (let n of f) {
 				let r = y();
 				n.active ? (await t({
 					deliveryId: r,
 					targetId: n.id,
-					event: s,
-					eventId: c,
-					payloadJson: f
-				}), d.push({
+					event: c,
+					eventId: l,
+					payloadJson: m
+				}), p.push({
 					targetId: n.id,
 					deliveryId: r,
 					status: "dispatched"
@@ -267,23 +280,23 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 					deliveryId: r,
 					targetId: n.id,
 					tenantId: n.tenantId ?? null,
-					event: s,
-					eventId: c,
+					event: c,
+					eventId: l,
 					attempt: 1,
 					status: "pending",
-					payload: f,
+					payload: m,
 					scheduledAt: /* @__PURE__ */ new Date(),
 					createdAt: /* @__PURE__ */ new Date(),
 					updatedAt: /* @__PURE__ */ new Date()
-				}), d.push({
+				}), p.push({
 					targetId: n.id,
 					deliveryId: r,
 					status: "queued"
 				}));
 			}
 			return {
-				eventId: c,
-				deliveries: d
+				eventId: l,
+				deliveries: p
 			};
 		},
 		replay: async (n) => {
@@ -310,14 +323,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		},
 		resolveTargets: async (t) => {
 			if (typeof t == "string") return [t];
-			let n = (await e.store.query({
-				table: "_voltro_webhook_targets",
-				predicate: void 0,
-				order: void 0,
-				take: 1e3,
-				skip: void 0,
-				projection: void 0
-			})).filter((e) => e.scope !== null && Object.entries(t.scope).every(([t, n]) => e.scope?.[t] === n)).map((e) => e.id);
+			let n = (await U(e)).filter((e) => B(e.scope, t.scope)).map((e) => e.id);
 			if (n.length === 0) throw Error(`webhooks: no target matches scope ${JSON.stringify(t.scope)} — the operation would have silently done nothing`);
 			return n;
 		},
@@ -487,15 +493,15 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		}
 	};
 	return i;
-}, ge = b.gen(function* () {
+}, _e = b.gen(function* () {
 	return yield* j;
-}), _e = (e) => {
+}), ve = (e) => {
 	if (e.webhooks === void 0) throw Error("useWebhooks: `ctx.webhooks` is not set. Add @voltro/plugin-webhooks to your app.config.ts plugin list and declare at least one *.webhook.tsx file.");
 	return e.webhooks;
-}, ve = 1e4, B = class {
+}, ye = 1e4, W = class {
 	capacity;
 	cache = /* @__PURE__ */ new Map();
-	constructor(e = ve) {
+	constructor(e = ye) {
 		this.capacity = e;
 	}
 	evictExpired() {
@@ -530,19 +536,19 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	clear() {
 		this.cache.clear();
 	}
-}, V = null, H = () => (V === null && (V = new B()), V), U = {
+}, G = null, K = () => (G === null && (G = new W()), G), q = {
 	"5m": 5 * 6e4,
 	"1h": 60 * 6e4,
 	"6h": 360 * 6e4,
 	"1d": 1440 * 6e4,
 	"7d": 10080 * 6e4,
 	"30d": 720 * 60 * 6e4
-}, W = (e) => e === void 0 ? U["7d"] : U[e] ?? U["7d"], G = (e, t) => ({
+}, J = (e) => e === void 0 ? q["7d"] : q[e] ?? q["7d"], Y = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), ye = (e, t) => {
-	let n = e.provider, r = e.signature ?? n?.signature ?? null, i = e.idempotency ?? n?.idempotency ?? null, o = e.bodyType ?? n?.bodyType ?? "json", s = t.idempotencyCache ?? H(), c = W(i?.ttl), l = t.log ?? ((e) => {
+}), be = (e, t) => {
+	let n = e.provider, r = e.signature ?? n?.signature ?? null, i = e.idempotency ?? n?.idempotency ?? null, o = e.bodyType ?? n?.bodyType ?? "json", s = t.idempotencyCache ?? K(), c = J(i?.ttl), l = t.log ?? ((e) => {
 		T({ scope: `webhook:${e.webhookId}` }).debug("incoming webhook", {
 			status: e.status,
 			signatureOk: e.signatureOk,
@@ -554,7 +560,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	return async (n) => {
 		let u = Date.now();
 		if (n.method !== "POST") {
-			let t = G(405, {
+			let t = Y(405, {
 				error: "method not allowed",
 				expected: "POST"
 			});
@@ -575,7 +581,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				r._tag === "custom" && n.headers["x-slack-request-timestamp"] && (o = `${n.headers["x-slack-request-timestamp"]}|${t ?? ""}`);
 				let s = a(r, n.rawBody, i, o);
 				if (d = s.ok, !s.ok) {
-					let t = G(401, {
+					let t = Y(401, {
 						error: "invalid signature",
 						reason: s.reason
 					});
@@ -601,7 +607,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				f = r;
 			} else f = n.rawBody;
 		} catch (t) {
-			let n = G(400, {
+			let n = Y(400, {
 				error: "malformed body",
 				reason: t.message
 			});
@@ -618,7 +624,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		try {
 			p = x.decodeUnknownSync(e.payload)(f);
 		} catch (t) {
-			let n = G(422, {
+			let n = Y(422, {
 				error: "schema validation failed",
 				reason: t.message
 			});
@@ -637,7 +643,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			if (m = typeof t == "string" ? n.headers[t.toLowerCase()] : t(n.headers, n.rawBody), m !== void 0 && m.length > 0) {
 				let t = s.claim(m, c);
 				if (h = t, t === "duplicate") {
-					let t = G(200, {
+					let t = Y(200, {
 						received: !0,
 						duplicate: !0
 					});
@@ -650,7 +656,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 					}), t;
 				}
 				if (t === "inflight") {
-					let t = G(409, {
+					let t = Y(409, {
 						error: "request already in flight",
 						idempotencyKey: m
 					});
@@ -673,7 +679,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				idempotencyKey: m ?? "",
 				...r ? { workflows: r } : {}
 			}), m !== void 0 && s.commit(m);
-			let i = G(200, { received: !0 });
+			let i = Y(200, { received: !0 });
 			return l({
 				webhookId: e.id,
 				status: 200,
@@ -683,7 +689,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			}), i;
 		} catch (t) {
 			m !== void 0 && s.release(m);
-			let n = G(500, {
+			let n = Y(500, {
 				error: "handler threw",
 				reason: t.message
 			});
@@ -702,20 +708,20 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			}), n;
 		}
 	};
-}, be = (e) => `/webhooks/${e}`, K = "_voltro_webhook_rate_windows", q = 6e4, xe = (e, t) => `${e}@${t}`, J = async (e, t, n) => (await e.query({
+}, xe = (e) => `/webhooks/${e}`, X = "_voltro_webhook_rate_windows", Se = 6e4, Ce = (e, t) => `${e}@${t}`, we = async (e, t, n) => (await e.query({
 	table: "_voltro_webhook_rate_windows",
 	predicate: S(C("scope", t), C("bucket", n)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Y = 32, X = async (e, t, n) => {
-	for (let r = 0; r < Y; r++) {
+}))[0] ?? null, Z = 32, Te = async (e, t, n) => {
+	for (let r = 0; r < Z; r++) {
 		r > 0 && await new Promise((e) => setTimeout(e, r));
-		let i = await J(e, t.key, n);
+		let i = await we(e, t.key, n);
 		if (i === null) {
-			await e.insertIgnore(K, {
-				id: xe(t.key, n),
+			await e.insertIgnore(X, {
+				id: Ce(t.key, n),
 				scope: t.key,
 				bucket: n,
 				count: 0,
@@ -730,29 +736,29 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			updatedAt: /* @__PURE__ */ new Date()
 		}, { where: S(C("id", i.id), C("count", i.count)) }) === 1) return !0;
 	}
-	throw Error(`webhook rate window: contention on (${t.key}, ${n}) exceeded ${Y} attempts`);
-}, Z = async (e, t, n) => {
-	for (let r = 0; r < Y; r++) {
+	throw Error(`webhook rate window: contention on (${t.key}, ${n}) exceeded ${Z} attempts`);
+}, Ee = async (e, t, n) => {
+	for (let r = 0; r < Z; r++) {
 		r > 0 && await new Promise((e) => setTimeout(e, r));
-		let i = await J(e, t, n);
+		let i = await we(e, t, n);
 		if (i === null || i.count <= 0 || await e.updateMany("_voltro_webhook_rate_windows", {
 			count: i.count - 1,
 			updatedAt: /* @__PURE__ */ new Date()
 		}, { where: S(C("id", i.id), C("count", i.count)) }) === 1) return;
 	}
-	throw Error(`webhook rate window: release contention on (${t}) exceeded ${Y} attempts`);
-}, Se = async (e, t, n, r = q) => {
+	throw Error(`webhook rate window: release contention on (${t}) exceeded ${Z} attempts`);
+}, De = async (e, t, n, r = Se) => {
 	if (t.length === 0) return {
 		acquired: !0,
 		retryInMs: 0
 	};
 	let i = Math.floor(n / r), a = [];
 	for (let o of t) {
-		if (await X(e, o, i)) {
+		if (await Te(e, o, i)) {
 			a.push(o);
 			continue;
 		}
-		for (let t of a) await Z(e, t.key, i);
+		for (let t of a) await Ee(e, t.key, i);
 		return {
 			acquired: !1,
 			retryInMs: (i + 1) * r - n
@@ -762,7 +768,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		acquired: !0,
 		retryInMs: 0
 	};
-}, Ce = (e, t) => {
+}, Oe = (e, t) => {
 	if (e === "json") return {
 		contentType: "application/json",
 		bytes: Buffer.from(t, "utf8")
@@ -778,15 +784,15 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	}
 	return e === "form" ? {
 		contentType: "application/x-www-form-urlencoded",
-		bytes: Buffer.from(we(n), "utf8")
+		bytes: Buffer.from(ke(n), "utf8")
 	} : {
 		contentType: "application/xml",
-		bytes: Buffer.from(Ee(n), "utf8")
+		bytes: Buffer.from(je(n), "utf8")
 	};
-}, we = (e) => {
+}, ke = (e) => {
 	if (typeof e != "object" || !e || Array.isArray(e)) throw new d({
 		format: "form",
-		reason: `form encoding requires a JSON object at the top level, got ${ke(e)}`
+		reason: `form encoding requires a JSON object at the top level, got ${Pe(e)}`
 	});
 	let t = new URLSearchParams();
 	for (let [n, r] of Object.entries(e)) Q(t, n, r);
@@ -805,13 +811,13 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		return;
 	}
 	e.append(t, String(n));
-}, Te = /^[A-Za-z_][A-Za-z0-9_.-]*$/, Ee = (e) => `<?xml version="1.0" encoding="UTF-8"?>${$("webhook", e)}`, $ = (e, t) => {
-	if (!Te.test(e)) throw new d({
+}, Ae = /^[A-Za-z_][A-Za-z0-9_.-]*$/, je = (e) => `<?xml version="1.0" encoding="UTF-8"?>${$("webhook", e)}`, $ = (e, t) => {
+	if (!Ae.test(e)) throw new d({
 		format: "xml",
 		reason: `object key ${JSON.stringify(e)} is not a valid XML element name`
 	});
-	return `<${e}>${De(e, t)}</${e}>`;
-}, De = (e, t) => t == null ? "" : Array.isArray(t) ? t.map((e) => $("item", e)).join("") : typeof t == "object" ? Object.entries(t).map(([e, t]) => $(e, t)).join("") : Oe(String(t)), Oe = (e) => e.replace(/[&<>"']/g, (e) => {
+	return `<${e}>${Me(e, t)}</${e}>`;
+}, Me = (e, t) => t == null ? "" : Array.isArray(t) ? t.map((e) => $("item", e)).join("") : typeof t == "object" ? Object.entries(t).map(([e, t]) => $(e, t)).join("") : Ne(String(t)), Ne = (e) => e.replace(/[&<>"']/g, (e) => {
 	switch (e) {
 		case "&": return "&amp;";
 		case "<": return "&lt;";
@@ -819,17 +825,17 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		case "\"": return "&quot;";
 		default: return "&apos;";
 	}
-}), ke = (e) => e === null ? "null" : Array.isArray(e) ? "array" : typeof e, Ae = "_voltro_webhook_targets", je = 32, Me = async (e, t) => (await e.query({
+}), Pe = (e) => e === null ? "null" : Array.isArray(e) ? "array" : typeof e, Fe = "_voltro_webhook_targets", Ie = 32, Le = async (e, t) => (await e.query({
 	table: "_voltro_webhook_targets",
 	predicate: C("id", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Ne = async (e, t, n, r, i = /* @__PURE__ */ new Date()) => {
-	for (let a = 0; a < je; a++) {
+}))[0] ?? null, Re = async (e, t, n, r, i = /* @__PURE__ */ new Date()) => {
+	for (let a = 0; a < Ie; a++) {
 		a > 0 && await new Promise((e) => setTimeout(e, a));
-		let o = await Me(e, t);
+		let o = await Le(e, t);
 		if (o === null) return {
 			consecutiveFailures: 0,
 			autoDisabled: !1
@@ -854,24 +860,24 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			autoDisabled: u
 		};
 	}
-	throw Error(`webhook auto-disable: streak CAS contention on target ${t} exceeded ${je} attempts`);
-}, Pe = x.Struct({
+	throw Error(`webhook auto-disable: streak CAS contention on target ${t} exceeded ${Ie} attempts`);
+}, ze = x.Struct({
 	status: x.Number,
 	body: x.String,
 	latencyMs: x.Number,
 	retryAfterSec: x.Union(x.Number, x.Undefined),
 	transportError: x.Union(x.String, x.Undefined),
 	encodeError: x.Union(x.String, x.Undefined)
-}), Fe = x.Struct({
+}), Be = x.Struct({
 	outcome: x.Literal("succeeded", "failed", "retry"),
 	delayMs: x.Union(x.Number, x.Undefined),
 	reason: x.Union(x.String, x.Undefined),
 	autoDisabled: x.Union(x.Boolean, x.Undefined),
 	consecutiveFailures: x.Union(x.Number, x.Undefined)
-}), Ie = x.Struct({
+}), Ve = x.Struct({
 	acquired: x.Boolean,
 	retryInMs: x.Number
-}), Le = ie.make({
+}), He = re.make({
 	name: "voltro.deliverWebhook",
 	payload: {
 		deliveryId: x.String,
@@ -886,7 +892,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 		attempts: x.Number
 	}),
 	idempotencyKey: ({ deliveryId: e, attemptEpoch: t }) => `voltro.deliverWebhook:${e}:${t ?? 0}`
-}), Re = (e, t = {}) => (n, r) => {
+}), Ue = (e, t = {}) => (n, r) => {
 	let { deliveryId: i, targetId: a, event: s, eventId: c, payloadJson: l } = n, u = T({ scope: `webhook:${i}` });
 	return b.gen(function* () {
 		let n = yield* E.make({
@@ -972,9 +978,9 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			if (v.length > 0) for (let n = 0;; n++) {
 				let i = yield* E.make({
 					name: `rate-acquire-${t}-${n}`,
-					success: Ie,
+					success: Ve,
 					execute: b.tryPromise({
-						try: () => Se(e.store, v, Date.now(), g),
+						try: () => De(e.store, v, Date.now(), g),
 						catch: (e) => (u.debug("rate-acquire raw error", {
 							targetId: a,
 							event: s,
@@ -994,7 +1000,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 						}),
 						catch: (e) => /* @__PURE__ */ Error(`record-rate-deferral failed: ${e.message}`)
 					}).pipe(b.orDie)
-				}), yield* re.sleep({
+				}), yield* D.sleep({
 					name: `rate-window-sleep-${t}-${n}`,
 					duration: `${i.retryInMs} millis`
 				});
@@ -1013,11 +1019,11 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 			});
 			let _ = yield* E.make({
 				name: `sign-and-post-${t}`,
-				success: Pe,
+				success: ze,
 				execute: b.promise(async () => {
 					let e = Date.now(), r;
 					try {
-						r = Ce(n.format, l);
+						r = Oe(n.format, l);
 					} catch (t) {
 						if (t instanceof d) return {
 							status: 0,
@@ -1067,10 +1073,10 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				})
 			}), y = yield* E.make({
 				name: `classify-and-record-${t}`,
-				success: Fe,
+				success: Be,
 				execute: b.tryPromise({
 					try: async () => {
-						let r = _.status >= 200 && _.status < 300, i = _.transportError !== void 0, o = _.encodeError !== void 0, s = (t, n) => Ne(e.store, a, t, n);
+						let r = _.status >= 200 && _.status < 300, i = _.transportError !== void 0, o = _.encodeError !== void 0, s = (t, n) => Re(e.store, a, t, n);
 						if (r) {
 							await e.store.update("_voltro_webhook_deliveries", f, {
 								status: "succeeded",
@@ -1088,7 +1094,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 								consecutiveFailures: t.consecutiveFailures
 							};
 						}
-						let c = o ? null : se(p, t, {
+						let c = o ? null : oe(p, t, {
 							...i ? {} : { status: _.status },
 							..._.retryAfterSec === void 0 ? {} : { retryAfterSeconds: _.retryAfterSec }
 						});
@@ -1148,7 +1154,7 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 				finalStatus: "failed",
 				attempts: t
 			};
-			y.delayMs !== void 0 && (yield* re.sleep({
+			y.delayMs !== void 0 && (yield* D.sleep({
 				name: `retry-sleep-${t}`,
 				duration: `${y.delayMs} millis`
 			}));
@@ -1160,4 +1166,4 @@ var ae = (e) => e.webhook !== void 0, D = (e) => {
 	});
 };
 //#endregion
-export { B as IdempotencyCache, q as RATE_WINDOW_MS, K as RATE_WINDOW_TABLE, Ae as TARGETS_TABLE, l as WebhookDeliveryNotFound, u as WebhookPayloadInvalid, d as WebhookPayloadUnrepresentable, f as WebhookPayloadVersionInvalid, p as WebhookSubscribeInvalid, j as WebhooksService, m as _voltroWebhookDeliveriesTable, h as _voltroWebhookRateWindowsTable, g as _voltroWebhookTargetsTable, Se as acquireRateSlots, D as asOutgoingEvent, Re as buildDeliverWebhookExecute, he as buildWebhooksService, fe as compareVersions, X as consumeRateSlot, be as defaultIncomingPath, c as defaultOutgoingSignature, A as defaultRetryPolicy, s as defineIncomingWebhook, t as defineWebhookProvider, Le as deliverWebhookWorkflow, Ce as encodePayload, P as eventsOf, ce as fastRetryPolicy, N as generateSecret, H as getIdempotencyCache, i as githubSignature, ae as hasWebhookAudience, r as isWebhookDescriptor, z as matchesFilter, ye as mountIncomingWebhook, se as nextRetry, O as parseDuration, W as parseTtl, Ne as recordDeliveryOutcome, Z as releaseRateSlot, I as resolveSubscribe, o as signPayload, n as slackSignature, e as stripeSignature, _e as useWebhooks, ge as useWebhooksEffect, F as validateSubscribe, a as verifySignature, _ as webhookTables };
+export { W as IdempotencyCache, Se as RATE_WINDOW_MS, X as RATE_WINDOW_TABLE, Fe as TARGETS_TABLE, l as WebhookDeliveryNotFound, u as WebhookPayloadInvalid, d as WebhookPayloadUnrepresentable, f as WebhookPayloadVersionInvalid, p as WebhookSubscribeInvalid, j as WebhooksService, m as _voltroWebhookDeliveriesTable, h as _voltroWebhookRateWindowsTable, g as _voltroWebhookTargetsTable, De as acquireRateSlots, O as asOutgoingEvent, Ue as buildDeliverWebhookExecute, ge as buildWebhooksService, fe as compareVersions, Te as consumeRateSlot, xe as defaultIncomingPath, c as defaultOutgoingSignature, se as defaultRetryPolicy, s as defineIncomingWebhook, t as defineWebhookProvider, He as deliverWebhookWorkflow, Oe as encodePayload, P as eventsOf, ce as fastRetryPolicy, N as generateSecret, K as getIdempotencyCache, i as githubSignature, ie as hasWebhookAudience, r as isWebhookDescriptor, z as matchesFilter, be as mountIncomingWebhook, oe as nextRetry, k as parseDuration, J as parseTtl, Re as recordDeliveryOutcome, Ee as releaseRateSlot, I as resolveSubscribe, o as signPayload, n as slackSignature, e as stripeSignature, ve as useWebhooks, _e as useWebhooksEffect, F as validateSubscribe, a as verifySignature, _ as webhookTables };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/plugin-webhooks",
-  "version": "0.27.0",
+  "version": "0.29.0",
   "description": "Webhooks plugin — first-class outgoing (multi-target, durable-workflow delivery, HMAC signing, retry policies, rate limits) + incoming (signature verification, idempotency, provider templates for Stripe / GitHub / Slack / generic).",
   "keywords": [
     "voltro",
@@ -48,12 +48,12 @@
   },
   "dependencies": {
     "@effect/workflow": "^0.19.0",
-    "@voltro/database": "0.27.0",
-    "@voltro/integration-http": "0.27.0",
-    "@voltro/logger": "0.27.0",
-    "@voltro/plugin-multitenancy": "0.27.0",
-    "@voltro/protocol": "0.27.0",
-    "@voltro/runtime": "0.27.0"
+    "@voltro/database": "0.29.0",
+    "@voltro/integration-http": "0.29.0",
+    "@voltro/logger": "0.29.0",
+    "@voltro/plugin-multitenancy": "0.29.0",
+    "@voltro/protocol": "0.29.0",
+    "@voltro/runtime": "0.29.0"
   },
   "peerDependencies": {
     "effect": "^3.22.0"