@voltro/plugin-webhooks 0.84.0 → 0.86.0

package/dist/index.js

@@ -1,1284 +1,17 @@
-import { C as e, E as t, S as n, T as r, _ as i, a, b as o, c as s, d as c, f as l, g as u, h as d, i as f, l as p, m, n as h, o as g, p as _, r as v, s as y, t as ee, u as te, v as ne, w as re, x as ie, y as ae } from "./signing-DeHObNv6.js";
-import { WebhookDeliveryNotFound as oe, WebhookPayloadInvalid as se, WebhookPayloadUnrepresentable as b, WebhookPayloadVersionInvalid as ce, WebhookSubscribeInvalid as x, WebhookTargetNotFound as S } from "./errors.js";
-import { _voltroWebhookDeliveriesTable as le, _voltroWebhookEventStatsTable as ue, _voltroWebhookRateWindowsTable as de, _voltroWebhookTargetsTable as fe, webhookTables as pe } from "./mixin.js";
-import { Context as me, Effect as C, Either as he, Schema as w } from "effect";
-import { definePlugin as ge, publishServerError as _e } from "@voltro/protocol";
-import { randomBytes as ve, randomUUID as T } from "node:crypto";
-import { and as E, eq as D } from "@voltro/database";
-import { assertPublicUrl as ye } from "@voltro/integration-http";
-import { createLogger as O } from "@voltro/logger";
-import { Activity as k, DurableClock as A, Workflow as be } from "@effect/workflow";
-import { defineOutboxHandler as xe } from "@voltro/runtime";
-//#region src/plugin.ts
-var j = ["network:outbound:*"], M = [{
-	destination: "runtime:registered webhook targets (_voltro_webhook_targets)",
-	purpose: "event deliveries, HMAC-signed",
-	data: ["content", "metadata"],
-	disable: "remove or pause the targets; an emit then delivers nowhere"
-}], Se = (e = {}) => ge({
-	name: e.name ? `@voltro/plugin-webhooks#${e.name}` : "@voltro/plugin-webhooks",
-	description: "Outgoing webhooks (multi-target, durable-workflow delivery, HMAC signing, retry policies, rate limits) + incoming (signature verification, idempotency, provider templates). Declares wildcard outbound network access because targets are user-configured URLs.",
-	permissions: j,
-	egress: M,
-	onActivate: (e) => C.sync(() => {
-		e.logger.info("webhooks active", { outbound: "network:outbound:* (subscriber-configured target URLs — audit visibility, not a restriction)" });
-	})
-}), Ce = (e) => e.webhook !== void 0, we = (e) => {
-	let t = e.webhook;
-	if (t !== void 0) return {
-		_tag: "outgoingEvent",
-		id: e.name,
-		payload: e.payload,
-		...t.description === void 0 ? {} : { description: t.description },
-		...t.version === void 0 ? {} : { version: t.version },
-		...t.rateLimit === void 0 ? {} : { globalRateLimit: t.rateLimit }
-	};
-}, Te = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, N = (e) => {
-	let t = Te.exec(e);
-	if (!t) throw Error(`invalid duration literal: ${e}`);
-	let n = Number(t[1]), r = t[2] ?? "s";
-	switch (r) {
-		case "ms": return n;
-		case "s": return n * 1e3;
-		case "m": return n * 6e4;
-		case "h": return n * 36e5;
-		case "d": return n * 864e5;
-		default: throw Error(`unreachable unit: ${r}`);
-	}
-}, P = [
-	408,
-	425,
-	429,
-	500,
-	502,
-	503,
-	504
-], Ee = (e, t, n) => {
-	if (t >= e.maxAttempts || n?.status !== void 0 && !(e.retryOn ?? P).includes(n.status)) return null;
-	if (e.honourRetryAfter !== !1 && n?.retryAfterSeconds !== void 0) {
-		let t = n.retryAfterSeconds * 1e3, r = N(e.maxDelay), i = Math.min(t, r);
-		return {
-			delayMs: i,
-			baseDelayMs: i
-		};
-	}
-	let r = N(e.initialDelay), i = N(e.maxDelay), a;
-	switch (e.strategy) {
-		case "fixed":
-			a = r;
-			break;
-		case "linear":
-			a = r * t;
-			break;
-		case "exponential": a = r * 2 ** (t - 1);
-	}
-	a = Math.min(a, i);
-	let o = a;
-	return e.jitter === "full" && (o = Math.random() * a), {
-		delayMs: Math.max(1, Math.floor(o)),
-		baseDelayMs: a
-	};
-}, De = () => ({
-	strategy: "exponential",
-	maxAttempts: 8,
-	initialDelay: "5s",
-	maxDelay: "1h",
-	retryOn: P,
-	honourRetryAfter: !0,
-	jitter: "full"
-}), Oe = () => ({
-	strategy: "fixed",
-	maxAttempts: 120,
-	initialDelay: "30s",
-	maxDelay: "30s",
-	retryOn: P,
-	honourRetryAfter: !0,
-	jitter: "full"
-}), ke = class extends me.Tag("@voltro/webhooks/WebhooksService")() {}, Ae = 32, je = 32, Me = () => ve(Ae).toString("hex"), F = (e) => e.events ?? (e.event === void 0 ? [] : [e.event]), I = (e, t) => {
-	if (e !== void 0 && t?._tag === "standardWebhooks" && !ne(e)) throw new x({
-		field: "secret",
-		reason: "a standard-webhooks target needs the spec's secret serialization (\"whsec_\" + base64 of 24..64 random bytes) — mint one with generateStandardWebhooksSecret(), or omit `secret` and let subscribe mint it. If the incompatible key is inherited, rotate the endpoint secret and update the receiver before adding the event"
-	});
-}, L = (e) => {
-	let t;
-	try {
-		t = new URL(e.url);
-	} catch (e) {
-		throw new x({
-			field: "url",
-			reason: `invalid subscriber url: ${e.message}`
-		});
-	}
-	if (t.protocol !== "http:" && t.protocol !== "https:") throw new x({
-		field: "url",
-		reason: `url protocol must be http or https, got ${t.protocol}`
-	});
-	if (process.env.NODE_ENV === "production") try {
-		ye(e.url);
-	} catch (e) {
-		throw new x({
-			field: "url",
-			reason: e.message
-		});
-	}
-	let n = F(e);
-	if (n.length === 0) throw new x({
-		field: "event",
-		reason: "event id required"
-	});
-	if (e.event !== void 0 && e.events !== void 0) throw new x({
-		field: "event",
-		reason: "pass `event` OR `events`, not both — the row set would be ambiguous"
-	});
-	if (n.some((e) => e.length === 0)) throw new x({
-		field: "events",
-		reason: "event id required"
-	});
-	if (new Set(n).size !== n.length) throw new x({
-		field: "events",
-		reason: "duplicate event — one row per event, so a repeat would deliver twice"
-	});
-	if (e.secret !== void 0 && e.secret.length < je) throw new x({
-		field: "secret",
-		reason: `secret must be at least ${je} chars`
-	});
-	if (I(e.secret, e.signing), e.retry !== void 0) {
-		if (e.retry.maxAttempts < 1) throw new x({
-			field: "retry",
-			reason: "retry.maxAttempts must be ≥ 1"
-		});
-		if (e.retry.maxAttempts > 1e3) throw new x({
-			field: "retry",
-			reason: "retry.maxAttempts must be ≤ 1000"
-		});
-	}
-	if (e.rateLimitPerMinute !== void 0 && e.rateLimitPerMinute < 1) throw new x({
-		field: "rateLimitPerMinute",
-		reason: "rateLimitPerMinute must be ≥ 1"
-	});
-	if (e.autoDisableAfter !== void 0 && (e.autoDisableAfter < 1 || !Number.isInteger(e.autoDisableAfter))) throw new x({
-		field: "autoDisableAfter",
-		reason: `autoDisableAfter must be a positive integer, got ${e.autoDisableAfter}`
-	});
-}, R = (e, t, n, r) => {
-	let a = e.signing ?? t?.defaultSigning ?? ee(), o = a._tag === "standardWebhooks" ? i : Me, s = r ?? e.secret ?? o();
-	return I(s, a), {
-		id: T(),
-		tenantId: e.tenantId ?? null,
-		event: n ?? e.event ?? "",
-		url: e.url,
-		secret: s,
-		signing: a,
-		retry: e.retry ?? t?.defaultRetry ?? De(),
-		filter: e.filter ?? null,
-		scope: e.scope ?? null,
-		headers: e.headers ?? null,
-		rateLimitPerMinute: e.rateLimitPerMinute ?? null,
-		active: !0,
-		format: e.format ?? "json",
-		autoDisableAfter: e.autoDisableAfter ?? null,
-		consecutiveFailures: 0,
-		autoDisabledAt: null,
-		autoDisableReason: null,
-		payloadVersion: e.payloadVersion ?? t?.version ?? 1,
-		description: e.description ?? null
-	};
-}, Ne = (e) => e instanceof Date ? e.getTime() : typeof e == "string" ? Date.parse(e) : 0, z = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" ? e : null, Pe = (e) => {
-	if (typeof e != "string") return e;
-	try {
-		return JSON.parse(e);
-	} catch {
-		return e;
-	}
-}, B = (e) => ({
-	id: String(e.id),
-	deliveryId: String(e.deliveryId),
-	targetId: String(e.targetId),
-	event: String(e.event),
-	eventId: e.eventId ?? null,
-	attempt: Number(e.attempt ?? 0),
-	status: e.status,
-	responseStatus: e.responseStatus ?? null,
-	errorMessage: e.errorMessage ?? null,
-	latencyMs: e.latencyMs ?? null,
-	scheduledAt: z(e.scheduledAt),
-	nextAttemptAt: z(e.nextAttemptAt),
-	createdAt: z(e.createdAt)
-}), Fe = (e, t) => e === t ? "current" : e < t ? "behind" : "ahead", V = (e, t) => {
-	if (e === null) return !0;
-	let n = { payload: t };
-	for (let [t, r] of Object.entries(e)) if (!Le(Ie(n, t), r)) return !1;
-	return !0;
-}, Ie = (e, t) => {
-	let n = t.split("."), r = e;
-	for (let e of n) {
-		if (typeof r != "object" || !r) return;
-		r = r[e];
-	}
-	return r;
-}, H = (e, t) => {
-	if (typeof e == "number" && typeof t == "number") return e - t;
-	if (typeof e == "string" && typeof t == "string") return e < t ? -1 : +(e > t);
-}, Le = (e, t) => {
-	if (typeof t == "object" && t && !Array.isArray(t)) {
-		let n = t;
-		return "eq" in n && e !== n.eq || "in" in n && (!Array.isArray(n.in) || !n.in.includes(e)) || "gt" in n && !((H(e, n.gt) ?? 0) > 0) || "gte" in n && !((H(e, n.gte) ?? -1) >= 0) || "lt" in n && !((H(e, n.lt) ?? 0) < 0) || "lte" in n && !((H(e, n.lte) ?? 1) <= 0) ? !1 : [
-			"eq",
-			"in",
-			"gt",
-			"gte",
-			"lt",
-			"lte"
-		].some((e) => e in n);
-	}
-	return e === t;
-}, U = (e, t) => e !== null && Object.entries(t).every(([t, n]) => e[t] === n), W = 500, Re = 200, G = async (e, t) => {
-	let n = [];
-	for (let r = 0; r < Re; r += 1) {
-		let i = await e.store.query({
-			table: "_voltro_webhook_targets",
-			predicate: t,
-			order: [{
-				column: "id",
-				direction: "asc"
-			}],
-			take: W,
-			skip: r === 0 ? void 0 : r * W,
-			projection: void 0
-		});
-		if (n.push(...i), i.length < W) return n;
-	}
-	throw Error(`webhooks: more than ${Re * W} rows in \`_voltro_webhook_targets\` — refusing to answer a scope lookup from a partial scan. A truncated scan mints a fresh secret for a live endpoint (breaking its signatures) or reports that a real scope matches nothing.`);
-}, ze = async (e, t) => {
-	let n = (await G(e)).filter((e) => U(e.scope, t));
-	if (n.length === 0) return;
-	let r = new Set(n.map((e) => e.secret));
-	if (r.size > 1) throw Error(`webhooks.subscribe: the scope ${JSON.stringify(t)} matches ${n.length} targets with ${r.size} different secrets, so it is not one endpoint. Pass \`secret\` explicitly, or narrow the scope.`);
-	return [...r][0];
-}, Be = async (e, t) => {
-	try {
-		let n = await e.store.query({
-			table: "_voltro_webhook_event_stats",
-			predicate: D("event", t),
-			order: [],
-			take: 1,
-			skip: void 0,
-			projection: void 0
-		}), r = /* @__PURE__ */ new Date(), i = n[0];
-		if (i === void 0) {
-			await e.store.insert("_voltro_webhook_event_stats", {
-				event: t,
-				emitCount: 1,
-				lastEmitAt: r,
-				createdAt: r,
-				updatedAt: r
-			});
-			return;
-		}
-		await e.store.update("_voltro_webhook_event_stats", i.id, {
-			emitCount: (i.emitCount ?? 0) + 1,
-			lastEmitAt: r,
-			updatedAt: r
-		});
-	} catch {}
-}, Ve = (e, t, n = {}) => {
-	let r = new Map((n.events ?? []).map((e) => [e.id, e])), a = {
-		subscribe: async (t) => {
-			L(t);
-			let n = F(t), a = t.secret === void 0 && t.scope !== void 0 ? await ze(e, t.scope) : void 0, o = t.secret ?? a ?? i(), s = n.map((e) => R(t, r.get(e), e, o));
-			for (let t of s) await e.store.insert("_voltro_webhook_targets", {
-				...t,
-				createdAt: /* @__PURE__ */ new Date(),
-				updatedAt: /* @__PURE__ */ new Date()
-			});
-			let c = s[0];
-			return {
-				id: c.id,
-				event: c.event,
-				url: c.url,
-				secret: c.secret,
-				signing: c.signing,
-				retry: c.retry,
-				...s.length > 1 ? { targets: s.map((e) => ({
-					id: e.id,
-					event: e.event
-				})) } : {}
-			};
-		},
-		emit: async (n, i, a) => {
-			let o = typeof n == "object" && n.kind === "event" ? we(n) : void 0, s = typeof n == "string" ? r.get(n) : o ?? n, c = typeof n == "string" ? n : n.id ?? n.name;
-			if (s !== void 0) {
-				let e = w.decodeUnknownEither(s.payload)(i, { errors: "all" });
-				if (he.isLeft(e)) throw new se({
-					event: c,
-					issues: e.left.message
-				});
-			}
-			let l = T(), u = a?.tenantId, d = await G(e, u == null ? D("event", c) : E(D("event", c), D("tenantId", u)));
-			await Be(e, c);
-			let f = d.filter((e) => V(e.filter, i)), p = [], m = JSON.stringify(i);
-			for (let n of f) {
-				let r = T();
-				n.active ? (await t({
-					deliveryId: r,
-					targetId: n.id,
-					event: c,
-					eventId: l,
-					payloadJson: m
-				}), p.push({
-					targetId: n.id,
-					deliveryId: r,
-					status: "dispatched"
-				})) : (await e.store.insert("_voltro_webhook_deliveries", {
-					id: `${r}:1`,
-					deliveryId: r,
-					targetId: n.id,
-					tenantId: n.tenantId ?? null,
-					event: c,
-					eventId: l,
-					attempt: 1,
-					status: "pending",
-					payload: m,
-					scheduledAt: /* @__PURE__ */ new Date(),
-					createdAt: /* @__PURE__ */ new Date(),
-					updatedAt: /* @__PURE__ */ new Date()
-				}), p.push({
-					targetId: n.id,
-					deliveryId: r,
-					status: "queued"
-				}));
-			}
-			return {
-				eventId: l,
-				deliveries: p
-			};
-		},
-		replay: async (n) => {
-			let r = (await e.store.query({
-				table: "_voltro_webhook_deliveries",
-				predicate: D("deliveryId", n),
-				order: [{
-					column: "attempt",
-					direction: "asc"
-				}],
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			}))[0];
-			if (r === void 0) throw new oe({ deliveryId: n });
-			await t({
-				deliveryId: r.deliveryId,
-				targetId: r.targetId,
-				event: r.event,
-				eventId: r.eventId ?? T(),
-				payloadJson: typeof r.payload == "string" ? r.payload : JSON.stringify(r.payload),
-				attemptEpoch: Date.now()
-			});
-		},
-		resolveTargets: async (t) => {
-			if (typeof t == "string") {
-				if ((await e.store.query({
-					table: "_voltro_webhook_targets",
-					predicate: D("id", t),
-					order: [],
-					take: 1,
-					skip: void 0,
-					projection: ["id"]
-				})).length === 0) throw new S({ targetId: t });
-				return [t];
-			}
-			let n = (await G(e)).filter((e) => U(e.scope, t.scope)).map((e) => e.id);
-			if (n.length === 0) throw Error(`webhooks: no target matches scope ${JSON.stringify(t.scope)} — the operation would have silently done nothing`);
-			return n;
-		},
-		pauseTarget: async (t) => {
-			for (let n of await a.resolveTargets(t)) await e.store.update("_voltro_webhook_targets", n, {
-				active: !1,
-				updatedAt: /* @__PURE__ */ new Date()
-			});
-		},
-		resumeTarget: async (n) => {
-			for (let r of await a.resolveTargets(n)) {
-				await e.store.update("_voltro_webhook_targets", r, {
-					active: !0,
-					consecutiveFailures: 0,
-					autoDisabledAt: null,
-					autoDisableReason: null,
-					updatedAt: /* @__PURE__ */ new Date()
-				});
-				let n = await e.store.query({
-					table: "_voltro_webhook_deliveries",
-					predicate: E(D("targetId", r), D("status", "pending")),
-					order: [{
-						column: "createdAt",
-						direction: "asc"
-					}],
-					take: 1e4,
-					skip: void 0,
-					projection: void 0
-				}), i = Date.now();
-				for (let e of n) await t({
-					deliveryId: e.deliveryId,
-					targetId: r,
-					event: e.event,
-					eventId: e.eventId ?? T(),
-					payloadJson: typeof e.payload == "string" ? e.payload : JSON.stringify(e.payload),
-					attemptEpoch: i
-				});
-			}
-		},
-		deleteTarget: async (t) => {
-			for (let n of await a.resolveTargets(t)) await e.store.delete("_voltro_webhook_targets", n), await e.store.deleteMany("_voltro_webhook_deliveries", { where: E(D("targetId", n), D("status", "pending")) });
-		},
-		rotateSecret: async (t) => {
-			let n = i();
-			for (let r of await a.resolveTargets(t)) await e.store.update("_voltro_webhook_targets", r, {
-				secret: n,
-				updatedAt: /* @__PURE__ */ new Date()
-			});
-			return { secret: n };
-		},
-		updateTarget: async (t, n) => {
-			if (n.url !== void 0 && L({
-				event: "x",
-				url: n.url
-			}), n.rateLimitPerMinute !== void 0 && n.rateLimitPerMinute !== null && (!Number.isInteger(n.rateLimitPerMinute) || n.rateLimitPerMinute < 1)) throw Error("updateTarget: rateLimitPerMinute must be a positive integer or null");
-			let r = { updatedAt: /* @__PURE__ */ new Date() };
-			for (let e of [
-				"url",
-				"description",
-				"filter",
-				"scope",
-				"headers",
-				"rateLimitPerMinute",
-				"autoDisableAfter",
-				"format"
-			]) n[e] !== void 0 && (r[e] = n[e]);
-			for (let n of await a.resolveTargets(t)) await e.store.update("_voltro_webhook_targets", n, r);
-		},
-		testTarget: async (n, r) => {
-			let i = (await e.store.query({
-				table: "_voltro_webhook_targets",
-				predicate: D("id", n),
-				order: [],
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			}))[0];
-			if (i === void 0) throw new S({ targetId: n });
-			let a = T(), o = JSON.stringify(r ?? {
-				test: !0,
-				targetId: n,
-				at: (/* @__PURE__ */ new Date()).toISOString()
-			});
-			return i.active ? await t({
-				deliveryId: a,
-				targetId: i.id,
-				event: i.event,
-				eventId: T(),
-				payloadJson: o
-			}) : await e.store.insert("_voltro_webhook_deliveries", {
-				id: `${a}:1`,
-				deliveryId: a,
-				targetId: i.id,
-				tenantId: i.tenantId ?? null,
-				event: i.event,
-				eventId: null,
-				attempt: 1,
-				status: "pending",
-				payload: o,
-				scheduledAt: /* @__PURE__ */ new Date(),
-				createdAt: /* @__PURE__ */ new Date(),
-				updatedAt: /* @__PURE__ */ new Date()
-			}), { deliveryId: a };
-		},
-		listDeliveries: async (t) => {
-			let n = t?.scope === void 0 ? void 0 : new Set(await a.resolveTargets({ scope: t.scope })), r = await e.store.query({
-				table: "_voltro_webhook_deliveries",
-				predicate: t?.targetId === void 0 ? void 0 : D("targetId", t.targetId),
-				order: [{
-					column: "createdAt",
-					direction: "desc"
-				}],
-				take: Math.min((t?.limit ?? 200) * (t?.status !== void 0 || t?.since !== void 0 ? 10 : 1), 5e3),
-				skip: void 0,
-				projection: void 0
-			}), i = t?.since?.getTime();
-			return r.filter((e) => n === void 0 || n.has(String(e.targetId))).filter((e) => t?.status === void 0 || e.status === t.status).filter((e) => i === void 0 || Ne(e.createdAt) >= i).slice(0, t?.limit ?? 200).map(B);
-		},
-		getDelivery: async (t) => {
-			let n = (await e.store.query({
-				table: "_voltro_webhook_deliveries",
-				predicate: D("id", t),
-				order: [],
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			}))[0];
-			return n === void 0 ? null : {
-				...B(n),
-				payload: Pe(n.payload),
-				responseBody: n.responseBody ?? null
-			};
-		},
-		updateTargetPayloadVersion: async (t, n) => {
-			if (n < 1 || !Number.isInteger(n)) throw new ce({ version: n });
-			await a.resolveTargets(t), await e.store.update("_voltro_webhook_targets", t, {
-				payloadVersion: n,
-				updatedAt: /* @__PURE__ */ new Date()
-			});
-		},
-		listTargets: async (t, n) => {
-			let r = await e.store.query({
-				table: "_voltro_webhook_targets",
-				predicate: t === void 0 ? void 0 : D("event", t),
-				order: [{
-					column: "createdAt",
-					direction: "desc"
-				}],
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			});
-			return (n === void 0 ? r : r.filter((e) => e.scope !== null && Object.entries(n).every(([t, n]) => e.scope?.[t] === n))).map((e) => ({
-				id: e.id,
-				event: e.event,
-				url: e.url,
-				active: e.active,
-				rateLimitPerMinute: e.rateLimitPerMinute,
-				description: e.description,
-				payloadVersion: e.payloadVersion,
-				autoDisableAfter: e.autoDisableAfter,
-				consecutiveFailures: e.consecutiveFailures ?? 0,
-				autoDisabledAt: e.autoDisabledAt === null || e.autoDisabledAt === void 0 ? null : e.autoDisabledAt instanceof Date ? e.autoDisabledAt.toISOString() : String(e.autoDisabledAt),
-				autoDisableReason: e.autoDisableReason,
-				scope: e.scope,
-				filter: e.filter ?? null
-			}));
-		}
-	};
-	return a;
-}, He = C.gen(function* () {
-	return yield* ke;
-}), Ue = (e) => {
-	if (e.webhooks === void 0) throw Error("useWebhooks: `ctx.webhooks` is not set. Declare an outgoing event with a `webhook:` block in a *.event.ts file, or an incoming endpoint in a *.webhook.tsx file — the service is wired the moment the app has either.");
-	return e.webhooks;
-}, We = 1e4, Ge = class {
-	capacity;
-	cache = /* @__PURE__ */ new Map();
-	constructor(e = We) {
-		this.capacity = e;
-	}
-	evictExpired() {
-		let e = Date.now();
-		for (let [t, n] of this.cache) n.expiresAt < e && this.cache.delete(t);
-	}
-	claim(e, t) {
-		let n = this.cache.get(e);
-		if (n !== void 0 && n.expiresAt > Date.now()) return this.cache.delete(e), this.cache.set(e, n), n.value === "inflight" ? "inflight" : "duplicate";
-		if (this.cache.set(e, {
-			value: "inflight",
-			expiresAt: Date.now() + t
-		}), this.cache.size > this.capacity) {
-			let e = this.cache.keys().next().value;
-			e !== void 0 && this.cache.delete(e);
-		}
-		return "fresh";
-	}
-	commit(e) {
-		let t = this.cache.get(e);
-		t !== void 0 && this.cache.set(e, {
-			value: "processed",
-			expiresAt: t.expiresAt
-		});
-	}
-	release(e) {
-		this.cache.delete(e);
-	}
-	size() {
-		return this.evictExpired(), this.cache.size;
-	}
-	clear() {
-		this.cache.clear();
-	}
-}, K = null, Ke = () => (K === null && (K = new Ge()), K), q = {
-	"5m": 3e5,
-	"1h": 36e5,
-	"6h": 216e5,
-	"1d": 864e5,
-	"7d": 6048e5,
-	"30d": 2592e6
-}, qe = (e) => e === void 0 ? q["7d"] : q[e] ?? q["7d"], J = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), Je = "voltroWebhookVerification", Ye = class extends Error {
-	webhookId;
-	name = "UnverifiedIncomingWebhook";
-	constructor(e) {
-		super(`incoming webhook '${e}' declares no verification. It would be mounted as a public, unauthenticated POST that runs your application code, so the framework refuses to mount it. Pick one on the descriptor:\n  · provider: stripeWebhookProvider()   — a preset (HMAC scheme + idempotency + body type)\n  · signature: { _tag: 'hmac', algorithm: 'hmacSha256', header: 'X-Signature', encoding: 'hex', includeTimestamp: true }\n  · verification: 'provider'            — the handler verifies with the provider's own SDK\n  · verification: 'none'                — deliberately public; a gateway / IP allow-list owns it\nA signature-verified webhook reads its shared secret from VOLTRO_WEBHOOK_SECRET_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}. The framework never invents that value — the sender holds the other half of it.`), this.webhookId = e;
-	}
-}, Xe = (e) => `VOLTRO_WEBHOOK_SECRET_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, Ze = (e) => {
-	let t = e.signature ?? e.provider?.signature ?? null;
-	return (e.verification === void 0 || e.verification === "signature") && t === null ? null : e.verification ?? "signature";
-}, Qe = (e, t) => {
-	let n = e.provider, r = e.signature ?? n?.signature ?? null, i = e.idempotency ?? n?.idempotency ?? null, a = e.bodyType ?? n?.bodyType ?? "json", o = Ze(e);
-	if (o === null) throw new Ye(e.id);
-	let c = o;
-	c === "none" && O({ scope: `webhook:${e.id}` }).warn("incoming webhook mounted WITHOUT verification — anyone who can reach this URL can run its handler", {
-		webhookId: e.id,
-		verification: "none"
-	});
-	let l = t.idempotencyCache ?? Ke(), u = qe(i?.ttl), d = t.log ?? ((e) => {
-		O({ scope: `webhook:${e.webhookId}` }).debug("incoming webhook", {
-			status: e.status,
-			signatureOk: e.signatureOk,
-			idempotency: e.idempotency,
-			durationMs: e.durationMs,
-			...e.errorMessage === void 0 ? {} : { errorMessage: e.errorMessage }
-		});
-	});
-	return Object.assign(async (n) => {
-		let o = Date.now();
-		if (n.method !== "POST") {
-			let t = J(405, {
-				error: "method not allowed",
-				expected: "POST"
-			});
-			return d({
-				webhookId: e.id,
-				status: 405,
-				signatureOk: "skipped",
-				idempotency: "skipped",
-				durationMs: Date.now() - o
-			}), t;
-		}
-		let f = "skipped";
-		if (r !== null && c === "signature") {
-			let i = await t.resolveSecret(e.id);
-			if (i === null) {
-				let t = `no signing secret configured — set ${Xe(e.id)}`, n = J(503, {
-					error: "webhook not configured",
-					reason: t
-				});
-				return d({
-					webhookId: e.id,
-					status: 503,
-					signatureOk: !1,
-					idempotency: "skipped",
-					durationMs: Date.now() - o,
-					errorMessage: t
-				}), n;
-			}
-			{
-				let t = s(r, {
-					rawBody: n.rawBody,
-					secret: i,
-					headers: n.headers
-				});
-				if (f = t.ok, !t.ok) {
-					let n = J(401, {
-						error: "invalid signature",
-						reason: t.reason
-					});
-					return d({
-						webhookId: e.id,
-						status: 401,
-						signatureOk: !1,
-						idempotency: "skipped",
-						durationMs: Date.now() - o,
-						errorMessage: t.reason
-					}), n;
-				}
-			}
-		}
-		let p;
-		try {
-			if (a === "json") {
-				let e = new TextDecoder().decode(n.rawBody);
-				p = e.length === 0 ? null : JSON.parse(e);
-			} else if (a === "form") {
-				let e = new TextDecoder().decode(n.rawBody), t = new URLSearchParams(e), r = {};
-				for (let [e, n] of t.entries()) r[e] = n;
-				p = r;
-			} else p = n.rawBody;
-		} catch (t) {
-			let n = J(400, {
-				error: "malformed body",
-				reason: t.message
-			});
-			return d({
-				webhookId: e.id,
-				status: 400,
-				signatureOk: f,
-				idempotency: "skipped",
-				durationMs: Date.now() - o,
-				errorMessage: t.message
-			}), n;
-		}
-		let m;
-		try {
-			m = w.decodeUnknownSync(e.payload)(p);
-		} catch (t) {
-			let n = J(422, {
-				error: "schema validation failed",
-				reason: t.message
-			});
-			return d({
-				webhookId: e.id,
-				status: 422,
-				signatureOk: f,
-				idempotency: "skipped",
-				durationMs: Date.now() - o,
-				errorMessage: t.message
-			}), n;
-		}
-		let h, g = "skipped";
-		if (i !== null) {
-			let t = i.from;
-			if (h = typeof t == "string" ? n.headers[t.toLowerCase()] : t(n.headers, n.rawBody), h !== void 0 && h.length > 0) {
-				let t = l.claim(h, u);
-				if (g = t, t === "duplicate") {
-					let t = J(200, {
-						received: !0,
-						duplicate: !0
-					});
-					return d({
-						webhookId: e.id,
-						status: 200,
-						signatureOk: f,
-						idempotency: "duplicate",
-						durationMs: Date.now() - o
-					}), t;
-				}
-				if (t === "inflight") {
-					let t = J(409, {
-						error: "request already in flight",
-						idempotencyKey: h
-					});
-					return d({
-						webhookId: e.id,
-						status: 409,
-						signatureOk: f,
-						idempotency: "inflight",
-						durationMs: Date.now() - o
-					}), t;
-				}
-			}
-		}
-		try {
-			let r = t.resolveWorkflows?.();
-			await e.handler({
-				body: m,
-				rawBody: n.rawBody,
-				headers: n.headers,
-				idempotencyKey: h ?? "",
-				...r ? { workflows: r } : {}
-			}), h !== void 0 && l.commit(h);
-			let i = J(200, { received: !0 });
-			return d({
-				webhookId: e.id,
-				status: 200,
-				signatureOk: f,
-				idempotency: g,
-				durationMs: Date.now() - o
-			}), i;
-		} catch (t) {
-			h !== void 0 && l.release(h);
-			let n = J(500, {
-				error: "handler threw",
-				reason: t.message
-			});
-			return d({
-				webhookId: e.id,
-				status: 500,
-				signatureOk: f,
-				idempotency: g,
-				durationMs: Date.now() - o,
-				errorMessage: t.message
-			}), _e({
-				error: t,
-				source: "webhook",
-				name: e.id,
-				fields: { status: 500 }
-			}), n;
-		}
-	}, { [Je]: c });
-}, $e = (e) => `/webhooks/${e}`, et = "_voltro_webhook_rate_windows", tt = 6e4, nt = (e, t) => `${e}@${t}`, rt = async (e, t, n) => (await e.query({
-	table: "_voltro_webhook_rate_windows",
-	predicate: E(D("scope", t), D("bucket", n)),
-	order: [],
-	take: 1,
-	skip: void 0,
-	projection: void 0
-}))[0] ?? null, Y = 32, X = async (e, t, n) => {
-	for (let r = 0; r < Y; r++) {
-		r > 0 && await new Promise((e) => setTimeout(e, r));
-		let i = await rt(e, t.key, n);
-		if (i === null) {
-			await e.insertIgnore(et, {
-				id: nt(t.key, n),
-				scope: t.key,
-				bucket: n,
-				count: 0,
-				createdAt: /* @__PURE__ */ new Date(),
-				updatedAt: /* @__PURE__ */ new Date()
-			}, { conflictColumns: ["id"] });
-			continue;
-		}
-		if (i.count >= t.limit) return !1;
-		if (await e.updateMany("_voltro_webhook_rate_windows", {
-			count: i.count + 1,
-			updatedAt: /* @__PURE__ */ new Date()
-		}, { where: E(D("id", i.id), D("count", i.count)) }) === 1) return !0;
-	}
-	throw Error(`webhook rate window: contention on (${t.key}, ${n}) exceeded ${Y} attempts`);
-}, it = async (e, t, n) => {
-	for (let r = 0; r < Y; r++) {
-		r > 0 && await new Promise((e) => setTimeout(e, r));
-		let i = await rt(e, t, n);
-		if (i === null || i.count <= 0 || await e.updateMany("_voltro_webhook_rate_windows", {
-			count: i.count - 1,
-			updatedAt: /* @__PURE__ */ new Date()
-		}, { where: E(D("id", i.id), D("count", i.count)) }) === 1) return;
-	}
-	throw Error(`webhook rate window: release contention on (${t}) exceeded ${Y} attempts`);
-}, at = async (e, t, n, r = tt) => {
-	if (t.length === 0) return {
-		acquired: !0,
-		retryInMs: 0
-	};
-	let i = Math.floor(n / r), a = [];
-	for (let o of t) {
-		if (await X(e, o, i)) {
-			a.push(o);
-			continue;
-		}
-		for (let t of a) await it(e, t.key, i);
-		return {
-			acquired: !1,
-			retryInMs: (i + 1) * r - n
-		};
-	}
-	return {
-		acquired: !0,
-		retryInMs: 0
-	};
-}, ot = (e, t) => {
-	if (e === "json") return {
-		contentType: "application/json",
-		bytes: Buffer.from(t, "utf8")
-	};
-	let n;
-	try {
-		n = JSON.parse(t);
-	} catch (t) {
-		throw new b({
-			format: e,
-			reason: `payload is not valid JSON: ${t.message}`
-		});
-	}
-	return e === "form" ? {
-		contentType: "application/x-www-form-urlencoded",
-		bytes: Buffer.from(st(n), "utf8")
-	} : {
-		contentType: "application/xml",
-		bytes: Buffer.from(lt(n), "utf8")
-	};
-}, st = (e) => {
-	if (typeof e != "object" || !e || Array.isArray(e)) throw new b({
-		format: "form",
-		reason: `form encoding requires a JSON object at the top level, got ${ft(e)}`
-	});
-	let t = new URLSearchParams();
-	for (let [n, r] of Object.entries(e)) Z(t, n, r);
-	return t.toString();
-}, Z = (e, t, n) => {
-	if (n === null) {
-		e.append(t, "");
-		return;
-	}
-	if (Array.isArray(n)) {
-		n.forEach((n, r) => Z(e, `${t}[${r}]`, n));
-		return;
-	}
-	if (typeof n == "object") {
-		for (let [r, i] of Object.entries(n)) Z(e, `${t}[${r}]`, i);
-		return;
-	}
-	e.append(t, String(n));
-}, ct = /^[A-Za-z_][A-Za-z0-9_.-]*$/, lt = (e) => `<?xml version="1.0" encoding="UTF-8"?>${Q("webhook", e)}`, Q = (e, t) => {
-	if (!ct.test(e)) throw new b({
-		format: "xml",
-		reason: `object key ${JSON.stringify(e)} is not a valid XML element name`
-	});
-	return `<${e}>${ut(e, t)}</${e}>`;
-}, ut = (e, t) => t == null ? "" : Array.isArray(t) ? t.map((e) => Q("item", e)).join("") : typeof t == "object" ? Object.entries(t).map(([e, t]) => Q(e, t)).join("") : dt(String(t)), dt = (e) => e.replace(/[&<>"']/g, (e) => {
-	switch (e) {
-		case "&": return "&amp;";
-		case "<": return "&lt;";
-		case ">": return "&gt;";
-		case "\"": return "&quot;";
-		default: return "&apos;";
-	}
-}), ft = (e) => e === null ? "null" : Array.isArray(e) ? "array" : typeof e, pt = "_voltro_webhook_targets", mt = 32, ht = async (e, t) => (await e.query({
-	table: "_voltro_webhook_targets",
-	predicate: D("id", t),
-	order: [],
-	take: 1,
-	skip: void 0,
-	projection: void 0
-}))[0] ?? null, gt = async (e, t, n, r, i = /* @__PURE__ */ new Date(), a = !1) => {
-	for (let o = 0; o < mt; o++) {
-		o > 0 && await new Promise((e) => setTimeout(e, o));
-		let s = await ht(e, t);
-		if (s === null) return {
-			consecutiveFailures: 0,
-			autoDisabled: !1
-		};
-		let c = s.consecutiveFailures ?? 0;
-		if (n) {
-			if (c === 0 || await e.updateMany("_voltro_webhook_targets", {
-				consecutiveFailures: 0,
-				updatedAt: i
-			}, { where: E(D("id", t), D("consecutiveFailures", c)) }) === 1) return {
-				consecutiveFailures: 0,
-				autoDisabled: !1
-			};
-			continue;
-		}
-		let l = c + 1, u = s.autoDisableAfter, d = s.active && (a || typeof u == "number" && u > 0 && l >= u), f = {
-			consecutiveFailures: l,
-			updatedAt: i
-		};
-		if (d && (f.active = !1, f.autoDisabledAt = i, f.autoDisableReason = r.slice(0, 500)), await e.updateMany("_voltro_webhook_targets", f, { where: E(D("id", t), D("consecutiveFailures", c)) }) === 1) return {
-			consecutiveFailures: l,
-			autoDisabled: d
-		};
-	}
-	throw Error(`webhook auto-disable: streak CAS contention on target ${t} exceeded ${mt} attempts`);
-}, _t = w.Struct({
-	status: w.Number,
-	body: w.String,
-	latencyMs: w.Number,
-	retryAfterSec: w.Union(w.Number, w.Undefined),
-	transportError: w.Union(w.String, w.Undefined),
-	encodeError: w.Union(w.String, w.Undefined)
-}), vt = w.Struct({
-	outcome: w.Literal("succeeded", "failed", "retry"),
-	delayMs: w.Union(w.Number, w.Undefined),
-	reason: w.Union(w.String, w.Undefined),
-	autoDisabled: w.Union(w.Boolean, w.Undefined),
-	consecutiveFailures: w.Union(w.Number, w.Undefined)
-}), yt = w.Struct({
-	acquired: w.Boolean,
-	retryInMs: w.Number
-}), bt = {
-	deliveryId: w.String,
-	targetId: w.String,
-	event: w.String,
-	eventId: w.String,
-	payloadJson: w.String,
-	attemptEpoch: w.optionalWith(w.Number, { default: () => 0 })
-}, xt = be.make({
-	name: "voltro.deliverWebhook",
-	payload: bt,
-	success: w.Struct({
-		finalStatus: w.Literal("succeeded", "failed", "deferred"),
-		attempts: w.Number
-	}),
-	idempotencyKey: ({ deliveryId: e, attemptEpoch: t }) => `voltro.deliverWebhook:${e}:${t ?? 0}`
-}), St = 3e4, Ct = (e, t) => {
-	if (e !== void 0) return e;
-	let n = Number(t.VOLTRO_WEBHOOK_TIMEOUT_MS);
-	return Number.isFinite(n) && n > 0 ? n : St;
-}, wt = (e, t = {}) => (n, r) => {
-	let { deliveryId: i, targetId: a, event: o, eventId: s, payloadJson: c } = n, l = O({ scope: `webhook:${i}` });
-	return C.gen(function* () {
-		let n = yield* k.make({
-			name: "fetch-target",
-			success: w.Union(w.Null, w.Struct({
-				id: w.String,
-				event: w.String,
-				url: w.String,
-				secret: w.String,
-				signing: w.Any,
-				retry: w.Any,
-				headers: w.Union(w.Record({
-					key: w.String,
-					value: w.String
-				}), w.Null),
-				rateLimitPerMinute: w.Union(w.Number, w.Null),
-				active: w.Boolean,
-				format: w.Literal("json", "form", "xml"),
-				tenantId: w.Union(w.String, w.Null)
-			})),
-			execute: C.tryPromise({
-				try: async () => (await e.store.query({
-					table: "_voltro_webhook_targets",
-					predicate: D("id", a),
-					order: [{
-						column: "createdAt",
-						direction: "asc"
-					}],
-					take: 1,
-					skip: void 0,
-					projection: void 0
-				}))[0] ?? null,
-				catch: (e) => (l.debug("fetch-target raw error", {
-					targetId: a,
-					event: o,
-					cause: String(e)
-				}), /* @__PURE__ */ Error(`fetch-target failed: ${e.message}`))
-			}).pipe(C.orDie)
-		});
-		if (n === null) return {
-			finalStatus: "failed",
-			attempts: 0
-		};
-		let r = async (t, r, l) => {
-			await e.store.update("_voltro_webhook_deliveries", t, {
-				...l,
-				updatedAt: /* @__PURE__ */ new Date()
-			}) === null && await e.store.insert("_voltro_webhook_deliveries", {
-				id: t,
-				deliveryId: i,
-				targetId: a,
-				tenantId: n.tenantId ?? null,
-				event: o,
-				eventId: s,
-				attempt: r,
-				payload: c,
-				scheduledAt: /* @__PURE__ */ new Date(),
-				createdAt: /* @__PURE__ */ new Date(),
-				updatedAt: /* @__PURE__ */ new Date(),
-				...l
-			});
-		};
-		if (n.active !== !0) return yield* k.make({
-			name: "record-paused-pending",
-			success: w.Void,
-			execute: C.tryPromise({
-				try: () => r(`${i}:1`, 1, { status: "pending" }),
-				catch: (e) => /* @__PURE__ */ Error(`record-paused-pending failed: ${e.message}`)
-			}).pipe(C.orDie)
-		}), {
-			finalStatus: "deferred",
-			attempts: 0
-		};
-		let u = (e) => typeof e == "string" ? JSON.parse(e) : e, d = u(n.retry), p = u(n.signing), m = n.headers === null ? null : u(n.headers), h = t.rateWindowMs ?? 6e4, g = Ct(t.timeoutMs, process.env), _ = t.events?.find((e) => e.id === o)?.globalRateLimit, v = [...typeof n.rateLimitPerMinute == "number" && n.rateLimitPerMinute > 0 ? [{
-			key: `target:${n.id}`,
-			limit: n.rateLimitPerMinute
-		}] : [], ..._ !== void 0 && _.perMinute > 0 ? [{
-			key: `event:${o}`,
-			limit: _.perMinute
-		}] : []];
-		for (let t = 1; t <= d.maxAttempts; t++) {
-			let u = `${i}:${t}`;
-			if (v.length > 0) for (let n = 0;; n++) {
-				let i = yield* k.make({
-					name: `rate-acquire-${t}-${n}`,
-					success: yt,
-					execute: C.tryPromise({
-						try: () => at(e.store, v, Date.now(), h),
-						catch: (e) => (l.debug("rate-acquire raw error", {
-							targetId: a,
-							event: o,
-							attempt: t,
-							cause: String(e)
-						}), /* @__PURE__ */ Error(`rate-acquire failed: ${e.message}`))
-					}).pipe(C.orDie)
-				});
-				if (i.acquired) break;
-				yield* k.make({
-					name: `record-rate-deferral-${t}-${n}`,
-					success: w.Void,
-					execute: C.tryPromise({
-						try: () => r(u, t, {
-							status: "pending",
-							nextAttemptAt: new Date(Date.now() + i.retryInMs)
-						}),
-						catch: (e) => /* @__PURE__ */ Error(`record-rate-deferral failed: ${e.message}`)
-					}).pipe(C.orDie)
-				}), yield* A.sleep({
-					name: `rate-window-sleep-${t}-${n}`,
-					duration: `${i.retryInMs} millis`
-				});
-			}
-			yield* k.make({
-				name: `record-attempt-start-${t}`,
-				success: w.Void,
-				execute: C.tryPromise({
-					try: () => r(u, t, {
-						status: "inFlight",
-						nextAttemptAt: null,
-						scheduledAt: /* @__PURE__ */ new Date()
-					}),
-					catch: (e) => /* @__PURE__ */ Error(`record-attempt-start failed: ${e.message}`)
-				}).pipe(C.orDie)
-			});
-			let _ = yield* k.make({
-				name: `sign-and-post-${t}`,
-				success: _t,
-				execute: C.promise(async () => {
-					let e = Date.now(), r;
-					try {
-						r = ot(n.format, c);
-					} catch (t) {
-						if (t instanceof b) return {
-							status: 0,
-							body: "",
-							latencyMs: Date.now() - e,
-							retryAfterSec: void 0,
-							transportError: void 0,
-							encodeError: t.reason
-						};
-						throw t;
-					}
-					let a = Buffer.from(r.bytes), { headers: l } = f(p, {
-						rawBody: a,
-						secret: n.secret,
-						messageId: i
-					});
-					process.env.NODE_ENV === "production" && ye(n.url);
-					try {
-						let c = await fetch(n.url, {
-							method: "POST",
-							headers: {
-								"content-type": r.contentType,
-								...l,
-								"x-voltro-event": o,
-								"x-voltro-event-id": s,
-								"x-voltro-delivery-id": i,
-								"x-voltro-attempt": String(t),
-								"idempotency-key": i,
-								...m ?? {}
-							},
-							body: a,
-							redirect: "manual",
-							signal: AbortSignal.timeout(g)
-						}), u = (await c.text()).slice(0, 8192), d = c.headers.get("retry-after");
-						return {
-							status: c.status,
-							body: u,
-							latencyMs: Date.now() - e,
-							retryAfterSec: d !== null && /^\d+$/.test(d) ? Number(d) : void 0,
-							transportError: void 0,
-							encodeError: void 0
-						};
-					} catch (t) {
-						return {
-							status: 0,
-							body: "",
-							latencyMs: Date.now() - e,
-							retryAfterSec: void 0,
-							transportError: t.message,
-							encodeError: void 0
-						};
-					}
-				})
-			}), y = yield* k.make({
-				name: `classify-and-record-${t}`,
-				success: vt,
-				execute: C.tryPromise({
-					try: async () => {
-						let r = _.status >= 200 && _.status < 300, i = _.transportError !== void 0, o = _.encodeError !== void 0, s = _.status === 410, c = (t, n) => gt(e.store, a, t, n, /* @__PURE__ */ new Date(), !t && s);
-						if (r) {
-							await e.store.update("_voltro_webhook_deliveries", u, {
-								status: "succeeded",
-								responseStatus: _.status,
-								responseBody: _.body,
-								latencyMs: _.latencyMs,
-								updatedAt: /* @__PURE__ */ new Date()
-							});
-							let t = await c(!0, "");
-							return {
-								outcome: "succeeded",
-								delayMs: void 0,
-								reason: void 0,
-								autoDisabled: t.autoDisabled,
-								consecutiveFailures: t.consecutiveFailures
-							};
-						}
-						let l = o ? null : Ee(d, t, {
-							...i ? {} : { status: _.status },
-							..._.retryAfterSec === void 0 ? {} : { retryAfterSeconds: _.retryAfterSec }
-						});
-						if (l === null) {
-							let t = o ? `encode (${n.format}): ${_.encodeError}` : i ? `transport: ${_.transportError}` : `http ${_.status}: ${_.body.slice(0, 200)}`;
-							await e.store.update("_voltro_webhook_deliveries", u, {
-								status: "failed",
-								responseStatus: i || o ? null : _.status,
-								responseBody: i || o ? null : _.body,
-								errorMessage: o ? t : _.transportError ?? null,
-								latencyMs: _.latencyMs,
-								updatedAt: /* @__PURE__ */ new Date()
-							});
-							let r = await c(!1, t);
-							return {
-								outcome: "failed",
-								delayMs: void 0,
-								reason: t,
-								autoDisabled: r.autoDisabled,
-								consecutiveFailures: r.consecutiveFailures
-							};
-						}
-						return await e.store.update("_voltro_webhook_deliveries", u, {
-							status: "retryScheduled",
-							responseStatus: i ? null : _.status,
-							responseBody: i ? null : _.body,
-							errorMessage: _.transportError ?? null,
-							latencyMs: _.latencyMs,
-							nextAttemptAt: new Date(Date.now() + l.delayMs),
-							updatedAt: /* @__PURE__ */ new Date()
-						}), {
-							outcome: "retry",
-							delayMs: l.delayMs,
-							reason: void 0,
-							autoDisabled: void 0,
-							consecutiveFailures: void 0
-						};
-					},
-					catch: (e) => (l.debug("classify-and-record raw error", {
-						targetId: a,
-						event: o,
-						attempt: t,
-						cause: String(e)
-					}), /* @__PURE__ */ Error(`classify-and-record failed: ${e.message}`))
-				}).pipe(C.orDie)
-			});
-			if (y.autoDisabled === !0 && l.warn("target auto-disabled after consecutive failures", {
-				targetId: a,
-				event: o,
-				consecutiveFailures: y.consecutiveFailures ?? null,
-				reason: y.reason ?? null
-			}), y.outcome === "succeeded") return {
-				finalStatus: "succeeded",
-				attempts: t
-			};
-			if (y.outcome === "failed") return {
-				finalStatus: "failed",
-				attempts: t
-			};
-			y.delayMs !== void 0 && (yield* A.sleep({
-				name: `retry-sleep-${t}`,
-				duration: `${y.delayMs} millis`
-			}));
-		}
-		return {
-			finalStatus: "failed",
-			attempts: d.maxAttempts
-		};
-	});
-}, $ = "voltro.webhook.emit", Tt = (e) => typeof e.event == "string", Et = (e) => xe({
-	effect: $,
-	maxAttempts: 1,
-	handler: async ({ payload: t }) => {
-		if (!Tt(t)) throw Error(`${$}: row payload has no \`event\` name — cannot resolve a descriptor. Got keys: ${Object.keys(t).join(", ") || "(none)"}`);
-		let n = e();
-		if (n === void 0) throw Error(`${$}: the outgoing-webhooks service is not available in this process. An emit was enqueued by a build that had the plugin registered; this one does not.`);
-		await n.emit(t.event, t.payload, { tenantId: t.tenantId });
-	}
-});
-//#endregion
-export { Ge as IdempotencyCache, tt as RATE_WINDOW_MS, et as RATE_WINDOW_TABLE, p as STANDARD_WEBHOOKS_DEFAULT_TOLERANCE_SECONDS, te as STANDARD_WEBHOOKS_ID_HEADER, c as STANDARD_WEBHOOKS_MAX_KEY_BYTES, l as STANDARD_WEBHOOKS_MIN_KEY_BYTES, _ as STANDARD_WEBHOOKS_SECRET_PREFIX, m as STANDARD_WEBHOOKS_SIGNATURE_HEADER, d as STANDARD_WEBHOOKS_TIMESTAMP_HEADER, u as STANDARD_WEBHOOKS_VERSION, pt as TARGETS_TABLE, Ye as UnverifiedIncomingWebhook, M as WEBHOOKS_EGRESS, j as WEBHOOKS_PLUGIN_PERMISSIONS, $ as WEBHOOK_EMIT_EFFECT, Je as WEBHOOK_VERIFICATION_PROPERTY, oe as WebhookDeliveryNotFound, se as WebhookPayloadInvalid, b as WebhookPayloadUnrepresentable, ce as WebhookPayloadVersionInvalid, x as WebhookSubscribeInvalid, S as WebhookTargetNotFound, ke as WebhooksService, le as _voltroWebhookDeliveriesTable, ue as _voltroWebhookEventStatsTable, de as _voltroWebhookRateWindowsTable, fe as _voltroWebhookTargetsTable, at as acquireRateSlots, we as asOutgoingEvent, wt as buildDeliverWebhookExecute, Ve as buildWebhooksService, Fe as compareVersions, X as consumeRateSlot, $e as defaultIncomingPath, ee as defaultOutgoingSignature, De as defaultRetryPolicy, re as defineIncomingWebhook, r as defineWebhookProvider, xt as deliverWebhookWorkflow, ot as encodePayload, F as eventsOf, Oe as fastRetryPolicy, Me as generateSecret, i as generateStandardWebhooksSecret, h as genericHmacSignature, Ke as getIdempotencyCache, v as githubSignature, Ce as hasWebhookAudience, Ze as incomingWebhookVerification, ne as isStandardWebhooksSecret, t as isWebhookDescriptor, Et as makeDeferredEmitHandler, V as matchesFilter, Qe as mountIncomingWebhook, Ee as nextRetry, N as parseDuration, qe as parseTtl, gt as recordDeliveryOutcome, it as releaseRateSlot, R as resolveSubscribe, f as signRequest, a as slackSignature, ae as standardWebhooksHeaders, o as standardWebhooksKey, g as standardWebhooksSignature, ie as standardWebhooksSignatureToken, n as standardWebhooksSignedContent, y as stripeSignature, Ue as useWebhooks, He as useWebhooksEffect, L as validateSubscribe, s as verifyRequest, e as verifyStandardWebhooks, pe as webhookTables, Se as webhooksPlugin };
+import { WEBHOOKS_EGRESS as e, WEBHOOKS_PLUGIN_PERMISSIONS as t, webhooksPlugin as n } from "./plugin.js";
+import { defineIncomingWebhook as r, defineWebhookProvider as i, isWebhookDescriptor as a } from "./dsl.js";
+import { asOutgoingEvent as o, hasWebhookAudience as s } from "./eventAudience.js";
+import { STANDARD_WEBHOOKS_DEFAULT_TOLERANCE_SECONDS as c, STANDARD_WEBHOOKS_ID_HEADER as l, STANDARD_WEBHOOKS_MAX_KEY_BYTES as u, STANDARD_WEBHOOKS_MIN_KEY_BYTES as d, STANDARD_WEBHOOKS_SECRET_PREFIX as f, STANDARD_WEBHOOKS_SIGNATURE_HEADER as p, STANDARD_WEBHOOKS_TIMESTAMP_HEADER as m, STANDARD_WEBHOOKS_VERSION as h, generateStandardWebhooksSecret as g, isStandardWebhooksSecret as _, standardWebhooksHeaders as v, standardWebhooksKey as y, standardWebhooksSignatureToken as b, standardWebhooksSignedContent as x, verifyStandardWebhooks as S } from "./standardWebhooks.js";
+import { defaultOutgoingSignature as C, genericHmacSignature as w, githubSignature as T, signRequest as E, slackSignature as D, standardWebhooksSignature as O, stripeSignature as k, verifyRequest as A } from "./signing.js";
+import { defaultRetryPolicy as j, fastRetryPolicy as M, nextRetry as N, parseDuration as P } from "./retry.js";
+import { WebhookDeliveryNotFound as F, WebhookPayloadInvalid as I, WebhookPayloadUnrepresentable as L, WebhookPayloadVersionInvalid as R, WebhookSubscribeInvalid as z, WebhookTargetNotFound as B } from "./errors.js";
+import { WebhooksService as V, buildWebhooksService as H, compareVersions as U, eventsOf as W, generateSecret as G, matchesFilter as K, resolveSubscribe as q, useWebhooks as J, useWebhooksEffect as Y, validateSubscribe as X } from "./service.js";
+import { IdempotencyCache as Z, getIdempotencyCache as Q, parseTtl as $ } from "./idempotency.js";
+import { UnverifiedIncomingWebhook as ee, WEBHOOK_VERIFICATION_PROPERTY as te, defaultIncomingPath as ne, incomingWebhookVerification as re, mountIncomingWebhook as ie } from "./incoming.js";
+import { RATE_WINDOW_MS as ae, RATE_WINDOW_TABLE as oe, acquireRateSlots as se, consumeRateSlot as ce, releaseRateSlot as le } from "./rateLimit.js";
+import { encodePayload as ue } from "./encode.js";
+import { TARGETS_TABLE as de, recordDeliveryOutcome as fe } from "./autoDisable.js";
+import { buildDeliverWebhookExecute as pe, deliverWebhookWorkflow as me } from "./deliverWorkflow.js";
+import { _voltroWebhookDeliveriesTable as he, _voltroWebhookEventStatsTable as ge, _voltroWebhookRateWindowsTable as _e, _voltroWebhookTargetsTable as ve, webhookTables as ye } from "./mixin.js";
+import { WEBHOOK_EMIT_EFFECT as be, makeDeferredEmitHandler as xe } from "./deferredEmit.js";
+export { Z as IdempotencyCache, ae as RATE_WINDOW_MS, oe as RATE_WINDOW_TABLE, c as STANDARD_WEBHOOKS_DEFAULT_TOLERANCE_SECONDS, l as STANDARD_WEBHOOKS_ID_HEADER, u as STANDARD_WEBHOOKS_MAX_KEY_BYTES, d as STANDARD_WEBHOOKS_MIN_KEY_BYTES, f as STANDARD_WEBHOOKS_SECRET_PREFIX, p as STANDARD_WEBHOOKS_SIGNATURE_HEADER, m as STANDARD_WEBHOOKS_TIMESTAMP_HEADER, h as STANDARD_WEBHOOKS_VERSION, de as TARGETS_TABLE, ee as UnverifiedIncomingWebhook, e as WEBHOOKS_EGRESS, t as WEBHOOKS_PLUGIN_PERMISSIONS, be as WEBHOOK_EMIT_EFFECT, te as WEBHOOK_VERIFICATION_PROPERTY, F as WebhookDeliveryNotFound, I as WebhookPayloadInvalid, L as WebhookPayloadUnrepresentable, R as WebhookPayloadVersionInvalid, z as WebhookSubscribeInvalid, B as WebhookTargetNotFound, V as WebhooksService, he as _voltroWebhookDeliveriesTable, ge as _voltroWebhookEventStatsTable, _e as _voltroWebhookRateWindowsTable, ve as _voltroWebhookTargetsTable, se as acquireRateSlots, o as asOutgoingEvent, pe as buildDeliverWebhookExecute, H as buildWebhooksService, U as compareVersions, ce as consumeRateSlot, ne as defaultIncomingPath, C as defaultOutgoingSignature, j as defaultRetryPolicy, r as defineIncomingWebhook, i as defineWebhookProvider, me as deliverWebhookWorkflow, ue as encodePayload, W as eventsOf, M as fastRetryPolicy, G as generateSecret, g as generateStandardWebhooksSecret, w as genericHmacSignature, Q as getIdempotencyCache, T as githubSignature, s as hasWebhookAudience, re as incomingWebhookVerification, _ as isStandardWebhooksSecret, a as isWebhookDescriptor, xe as makeDeferredEmitHandler, K as matchesFilter, ie as mountIncomingWebhook, N as nextRetry, P as parseDuration, $ as parseTtl, fe as recordDeliveryOutcome, le as releaseRateSlot, q as resolveSubscribe, E as signRequest, D as slackSignature, v as standardWebhooksHeaders, y as standardWebhooksKey, O as standardWebhooksSignature, b as standardWebhooksSignatureToken, x as standardWebhooksSignedContent, k as stripeSignature, J as useWebhooks, Y as useWebhooksEffect, X as validateSubscribe, A as verifyRequest, S as verifyStandardWebhooks, ye as webhookTables, n as webhooksPlugin };