@voltro/plugin-webhooks 0.85.0 → 0.87.0

package/dist/index.js

@@ -1,1304 +1,17 @@
-import { C as e, E as t, S as n, T as r, _ as i, a, b as o, c as s, d as c, f as l, g as u, h as d, i as f, l as p, m, n as h, o as g, p as _, r as v, s as y, t as ee, u as te, v as ne, w as re, x as ie, y as ae } from "./signing-DeHObNv6.js";
-import { WebhookDeliveryNotFound as oe, WebhookPayloadInvalid as se, WebhookPayloadUnrepresentable as b, WebhookPayloadVersionInvalid as x, WebhookSubscribeInvalid as S, WebhookTargetNotFound as C } from "./errors.js";
-import { _voltroWebhookDeliveriesTable as ce, _voltroWebhookEventStatsTable as le, _voltroWebhookRateWindowsTable as ue, _voltroWebhookTargetsTable as de, webhookTables as fe } from "./mixin.js";
-import { Context as pe, Effect as w, Result as me, Schema as T } from "effect";
-import { definePlugin as he, publishServerError as ge } from "@voltro/protocol";
-import { randomBytes as _e, randomUUID as E } from "node:crypto";
-import { and as D, eq as O } from "@voltro/database";
-import { assertPublicUrl as k } from "@voltro/integration-http";
-import { createLogger as A } from "@voltro/logger";
-import { Activity as j, DurableClock as ve, Workflow as ye } from "effect/workflow";
-import { defineOutboxHandler as be } from "@voltro/runtime";
-//#region src/plugin.ts
-var xe = ["network:outbound:*"], M = [{
-	destination: "runtime:registered webhook targets (_voltro_webhook_targets)",
-	purpose: "event deliveries, HMAC-signed",
-	data: ["content", "metadata"],
-	disable: "remove or pause the targets; an emit then delivers nowhere"
-}], Se = (e = {}) => he({
-	name: e.name ? `@voltro/plugin-webhooks#${e.name}` : "@voltro/plugin-webhooks",
-	description: "Outgoing webhooks (multi-target, durable-workflow delivery, HMAC signing, retry policies, rate limits) + incoming (signature verification, idempotency, provider templates). Declares wildcard outbound network access because targets are user-configured URLs.",
-	permissions: xe,
-	egress: M,
-	onActivate: (e) => w.sync(() => {
-		e.logger.info("webhooks active", { outbound: "network:outbound:* (subscriber-configured target URLs — audit visibility, not a restriction)" });
-	})
-}), Ce = (e) => e.webhook !== void 0, N = (e) => {
-	let t = e.webhook;
-	if (t !== void 0) return {
-		_tag: "outgoingEvent",
-		id: e.name,
-		payload: e.payload,
-		...t.description === void 0 ? {} : { description: t.description },
-		...t.version === void 0 ? {} : { version: t.version },
-		...t.rateLimit === void 0 ? {} : { globalRateLimit: t.rateLimit }
-	};
-}, we = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)?$/, P = (e) => {
-	let t = we.exec(e);
-	if (!t) throw Error(`invalid duration literal: ${e}`);
-	let n = Number(t[1]), r = t[2] ?? "s";
-	switch (r) {
-		case "ms": return n;
-		case "s": return n * 1e3;
-		case "m": return n * 6e4;
-		case "h": return n * 36e5;
-		case "d": return n * 864e5;
-		default: throw Error(`unreachable unit: ${r}`);
-	}
-}, F = [
-	408,
-	425,
-	429,
-	500,
-	502,
-	503,
-	504
-], Te = (e, t, n) => {
-	if (t >= e.maxAttempts || n?.status !== void 0 && !(e.retryOn ?? F).includes(n.status)) return null;
-	if (e.honourRetryAfter !== !1 && n?.retryAfterSeconds !== void 0) {
-		let t = n.retryAfterSeconds * 1e3, r = P(e.maxDelay), i = Math.min(t, r);
-		return {
-			delayMs: i,
-			baseDelayMs: i
-		};
-	}
-	let r = P(e.initialDelay), i = P(e.maxDelay), a;
-	switch (e.strategy) {
-		case "fixed":
-			a = r;
-			break;
-		case "linear":
-			a = r * t;
-			break;
-		case "exponential": a = r * 2 ** (t - 1);
-	}
-	a = Math.min(a, i);
-	let o = a;
-	return e.jitter === "full" && (o = Math.random() * a), {
-		delayMs: Math.max(1, Math.floor(o)),
-		baseDelayMs: a
-	};
-}, Ee = () => ({
-	strategy: "exponential",
-	maxAttempts: 8,
-	initialDelay: "5s",
-	maxDelay: "1h",
-	retryOn: F,
-	honourRetryAfter: !0,
-	jitter: "full"
-}), De = () => ({
-	strategy: "fixed",
-	maxAttempts: 120,
-	initialDelay: "30s",
-	maxDelay: "30s",
-	retryOn: F,
-	honourRetryAfter: !0,
-	jitter: "full"
-}), Oe = class extends pe.Service()("@voltro/webhooks/WebhooksService") {}, ke = 32, Ae = 32, je = () => _e(ke).toString("hex"), I = (e) => e.events ?? (e.event === void 0 ? [] : [e.event]), L = (e, t) => {
-	if (e !== void 0 && t?._tag === "standardWebhooks" && !ne(e)) throw new S({
-		field: "secret",
-		reason: "a standard-webhooks target needs the spec's secret serialization (\"whsec_\" + base64 of 24..64 random bytes) — mint one with generateStandardWebhooksSecret(), or omit `secret` and let subscribe mint it. If the incompatible key is inherited, rotate the endpoint secret and update the receiver before adding the event"
-	});
-}, R = (e) => {
-	let t;
-	try {
-		t = new URL(e.url);
-	} catch (e) {
-		throw new S({
-			field: "url",
-			reason: `invalid subscriber url: ${e.message}`
-		});
-	}
-	if (t.protocol !== "http:" && t.protocol !== "https:") throw new S({
-		field: "url",
-		reason: `url protocol must be http or https, got ${t.protocol}`
-	});
-	if (process.env.NODE_ENV === "production") try {
-		k(e.url);
-	} catch (e) {
-		throw new S({
-			field: "url",
-			reason: e.message
-		});
-	}
-	let n = I(e);
-	if (n.length === 0) throw new S({
-		field: "event",
-		reason: "event id required"
-	});
-	if (e.event !== void 0 && e.events !== void 0) throw new S({
-		field: "event",
-		reason: "pass `event` OR `events`, not both — the row set would be ambiguous"
-	});
-	if (n.some((e) => e.length === 0)) throw new S({
-		field: "events",
-		reason: "event id required"
-	});
-	if (new Set(n).size !== n.length) throw new S({
-		field: "events",
-		reason: "duplicate event — one row per event, so a repeat would deliver twice"
-	});
-	if (e.secret !== void 0 && e.secret.length < Ae) throw new S({
-		field: "secret",
-		reason: `secret must be at least ${Ae} chars`
-	});
-	if (L(e.secret, e.signing), e.retry !== void 0) {
-		if (e.retry.maxAttempts < 1) throw new S({
-			field: "retry",
-			reason: "retry.maxAttempts must be ≥ 1"
-		});
-		if (e.retry.maxAttempts > 1e3) throw new S({
-			field: "retry",
-			reason: "retry.maxAttempts must be ≤ 1000"
-		});
-	}
-	if (e.rateLimitPerMinute !== void 0 && e.rateLimitPerMinute < 1) throw new S({
-		field: "rateLimitPerMinute",
-		reason: "rateLimitPerMinute must be ≥ 1"
-	});
-	if (e.autoDisableAfter !== void 0 && (e.autoDisableAfter < 1 || !Number.isInteger(e.autoDisableAfter))) throw new S({
-		field: "autoDisableAfter",
-		reason: `autoDisableAfter must be a positive integer, got ${e.autoDisableAfter}`
-	});
-}, z = (e, t, n, r) => {
-	let a = e.signing ?? t?.defaultSigning ?? ee(), o = a._tag === "standardWebhooks" ? i : je, s = r ?? e.secret ?? o();
-	return L(s, a), {
-		id: E(),
-		tenantId: e.tenantId ?? null,
-		event: n ?? e.event ?? "",
-		url: e.url,
-		secret: s,
-		signing: a,
-		retry: e.retry ?? t?.defaultRetry ?? Ee(),
-		filter: e.filter ?? null,
-		scope: e.scope ?? null,
-		headers: e.headers ?? null,
-		rateLimitPerMinute: e.rateLimitPerMinute ?? null,
-		active: !0,
-		format: e.format ?? "json",
-		autoDisableAfter: e.autoDisableAfter ?? null,
-		consecutiveFailures: 0,
-		autoDisabledAt: null,
-		autoDisableReason: null,
-		payloadVersion: e.payloadVersion ?? t?.version ?? 1,
-		description: e.description ?? null
-	};
-}, Me = (e) => e instanceof Date ? e.getTime() : typeof e == "string" ? Date.parse(e) : 0, B = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" ? e : null, Ne = (e) => {
-	if (typeof e != "string") return e;
-	try {
-		return JSON.parse(e);
-	} catch {
-		return e;
-	}
-}, V = (e) => ({
-	id: String(e.id),
-	deliveryId: String(e.deliveryId),
-	targetId: String(e.targetId),
-	event: String(e.event),
-	eventId: e.eventId ?? null,
-	attempt: Number(e.attempt ?? 0),
-	status: e.status,
-	responseStatus: e.responseStatus ?? null,
-	errorMessage: e.errorMessage ?? null,
-	latencyMs: e.latencyMs ?? null,
-	scheduledAt: B(e.scheduledAt),
-	nextAttemptAt: B(e.nextAttemptAt),
-	createdAt: B(e.createdAt)
-}), Pe = (e, t) => e === t ? "current" : e < t ? "behind" : "ahead", H = (e, t) => {
-	if (e === null) return !0;
-	let n = { payload: t };
-	for (let [t, r] of Object.entries(e)) if (!Ie(Fe(n, t), r)) return !1;
-	return !0;
-}, Fe = (e, t) => {
-	let n = t.split("."), r = e;
-	for (let e of n) {
-		if (typeof r != "object" || !r) return;
-		r = r[e];
-	}
-	return r;
-}, U = (e, t) => {
-	if (typeof e == "number" && typeof t == "number") return e - t;
-	if (typeof e == "string" && typeof t == "string") return e < t ? -1 : +(e > t);
-}, Ie = (e, t) => {
-	if (typeof t == "object" && t && !Array.isArray(t)) {
-		let n = t;
-		return "eq" in n && e !== n.eq || "in" in n && (!Array.isArray(n.in) || !n.in.includes(e)) || "gt" in n && !((U(e, n.gt) ?? 0) > 0) || "gte" in n && !((U(e, n.gte) ?? -1) >= 0) || "lt" in n && !((U(e, n.lt) ?? 0) < 0) || "lte" in n && !((U(e, n.lte) ?? 1) <= 0) ? !1 : [
-			"eq",
-			"in",
-			"gt",
-			"gte",
-			"lt",
-			"lte"
-		].some((e) => e in n);
-	}
-	return e === t;
-}, W = (e, t) => e !== null && Object.entries(t).every(([t, n]) => e[t] === n), G = 500, Le = 200, K = async (e, t) => {
-	let n = [];
-	for (let r = 0; r < Le; r += 1) {
-		let i = await e.store.query({
-			table: "_voltro_webhook_targets",
-			predicate: t,
-			order: [{
-				column: "id",
-				direction: "asc"
-			}],
-			take: G,
-			skip: r === 0 ? void 0 : r * G,
-			projection: void 0
-		});
-		if (n.push(...i), i.length < G) return n;
-	}
-	throw Error(`webhooks: more than ${Le * G} rows in \`_voltro_webhook_targets\` — refusing to answer a scope lookup from a partial scan. A truncated scan mints a fresh secret for a live endpoint (breaking its signatures) or reports that a real scope matches nothing.`);
-}, Re = async (e, t) => {
-	let n = (await K(e)).filter((e) => W(e.scope, t));
-	if (n.length === 0) return;
-	let r = new Set(n.map((e) => e.secret));
-	if (r.size > 1) throw Error(`webhooks.subscribe: the scope ${JSON.stringify(t)} matches ${n.length} targets with ${r.size} different secrets, so it is not one endpoint. Pass \`secret\` explicitly, or narrow the scope.`);
-	return [...r][0];
-}, ze = async (e, t) => {
-	try {
-		let n = await e.store.query({
-			table: "_voltro_webhook_event_stats",
-			predicate: O("event", t),
-			order: [],
-			take: 1,
-			skip: void 0,
-			projection: void 0
-		}), r = /* @__PURE__ */ new Date(), i = n[0];
-		if (i === void 0) {
-			await e.store.insert("_voltro_webhook_event_stats", {
-				event: t,
-				emitCount: 1,
-				lastEmitAt: r,
-				createdAt: r,
-				updatedAt: r
-			});
-			return;
-		}
-		await e.store.update("_voltro_webhook_event_stats", i.id, {
-			emitCount: (i.emitCount ?? 0) + 1,
-			lastEmitAt: r,
-			updatedAt: r
-		});
-	} catch {}
-}, Be = (e, t, n = {}) => {
-	let r = new Map((n.events ?? []).map((e) => [e.id, e])), a = {
-		subscribe: async (t) => {
-			R(t);
-			let n = I(t), a = t.secret === void 0 && t.scope !== void 0 ? await Re(e, t.scope) : void 0, o = t.secret ?? a ?? i(), s = n.map((e) => z(t, r.get(e), e, o));
-			for (let t of s) await e.store.insert("_voltro_webhook_targets", {
-				...t,
-				createdAt: /* @__PURE__ */ new Date(),
-				updatedAt: /* @__PURE__ */ new Date()
-			});
-			let c = s[0];
-			return {
-				id: c.id,
-				event: c.event,
-				url: c.url,
-				secret: c.secret,
-				signing: c.signing,
-				retry: c.retry,
-				...s.length > 1 ? { targets: s.map((e) => ({
-					id: e.id,
-					event: e.event
-				})) } : {}
-			};
-		},
-		emit: async (n, i, a) => {
-			let o = typeof n == "object" && n.kind === "event" ? N(n) : void 0, s = typeof n == "string" ? r.get(n) : o ?? n, c = typeof n == "string" ? n : n.id ?? n.name;
-			if (s !== void 0) {
-				let e = T.decodeUnknownResult(s.payload)(i, { errors: "all" });
-				if (me.isFailure(e)) throw new se({
-					event: c,
-					issues: e.failure.message
-				});
-			}
-			let l = a?.eventId ?? E(), u = a?.tenantId, d = await K(e, u == null ? O("event", c) : D(O("event", c), O("tenantId", u)));
-			await ze(e, c);
-			let f = d.filter((e) => H(e.filter, i)), p = [], m = JSON.stringify(i), h = async (n, r) => {
-				let i = E();
-				n.active ? (await t({
-					deliveryId: i,
-					targetId: n.id,
-					event: c,
-					eventId: l,
-					payloadJson: m
-				}), p[r] = {
-					targetId: n.id,
-					deliveryId: i,
-					status: "dispatched"
-				}) : (await e.store.insert("_voltro_webhook_deliveries", {
-					id: `${i}:1`,
-					deliveryId: i,
-					targetId: n.id,
-					tenantId: n.tenantId ?? null,
-					event: c,
-					eventId: l,
-					attempt: 1,
-					status: "pending",
-					payload: m,
-					scheduledAt: /* @__PURE__ */ new Date(),
-					createdAt: /* @__PURE__ */ new Date(),
-					updatedAt: /* @__PURE__ */ new Date()
-				}), p[r] = {
-					targetId: n.id,
-					deliveryId: i,
-					status: "queued"
-				});
-			}, g = 0, _ = !1, v;
-			if (await Promise.all(Array.from({ length: Math.min(4, f.length) }, async () => {
-				for (; !_ && g < f.length;) {
-					let e = g++;
-					try {
-						await h(f[e], e);
-					} catch (e) {
-						_ || (_ = !0, v = e);
-					}
-				}
-			})), _) throw v;
-			return {
-				eventId: l,
-				deliveries: p
-			};
-		},
-		replay: async (n) => {
-			let r = (await e.store.query({
-				table: "_voltro_webhook_deliveries",
-				predicate: O("deliveryId", n),
-				order: [{
-					column: "attempt",
-					direction: "asc"
-				}],
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			}))[0];
-			if (r === void 0) throw new oe({ deliveryId: n });
-			await t({
-				deliveryId: r.deliveryId,
-				targetId: r.targetId,
-				event: r.event,
-				eventId: r.eventId ?? E(),
-				payloadJson: typeof r.payload == "string" ? r.payload : JSON.stringify(r.payload),
-				attemptEpoch: Date.now()
-			});
-		},
-		resolveTargets: async (t) => {
-			if (typeof t == "string") {
-				if ((await e.store.query({
-					table: "_voltro_webhook_targets",
-					predicate: O("id", t),
-					order: [],
-					take: 1,
-					skip: void 0,
-					projection: ["id"]
-				})).length === 0) throw new C({ targetId: t });
-				return [t];
-			}
-			let n = (await K(e)).filter((e) => W(e.scope, t.scope)).map((e) => e.id);
-			if (n.length === 0) throw Error(`webhooks: no target matches scope ${JSON.stringify(t.scope)} — the operation would have silently done nothing`);
-			return n;
-		},
-		pauseTarget: async (t) => {
-			for (let n of await a.resolveTargets(t)) await e.store.update("_voltro_webhook_targets", n, {
-				active: !1,
-				updatedAt: /* @__PURE__ */ new Date()
-			});
-		},
-		resumeTarget: async (n) => {
-			for (let r of await a.resolveTargets(n)) {
-				await e.store.update("_voltro_webhook_targets", r, {
-					active: !0,
-					consecutiveFailures: 0,
-					autoDisabledAt: null,
-					autoDisableReason: null,
-					updatedAt: /* @__PURE__ */ new Date()
-				});
-				let n = await e.store.query({
-					table: "_voltro_webhook_deliveries",
-					predicate: D(O("targetId", r), O("status", "pending")),
-					order: [{
-						column: "createdAt",
-						direction: "asc"
-					}],
-					take: 1e4,
-					skip: void 0,
-					projection: void 0
-				}), i = Date.now();
-				for (let e of n) await t({
-					deliveryId: e.deliveryId,
-					targetId: r,
-					event: e.event,
-					eventId: e.eventId ?? E(),
-					payloadJson: typeof e.payload == "string" ? e.payload : JSON.stringify(e.payload),
-					attemptEpoch: i
-				});
-			}
-		},
-		deleteTarget: async (t) => {
-			for (let n of await a.resolveTargets(t)) await e.store.delete("_voltro_webhook_targets", n), await e.store.deleteMany("_voltro_webhook_deliveries", { where: D(O("targetId", n), O("status", "pending")) });
-		},
-		rotateSecret: async (t) => {
-			let n = i();
-			for (let r of await a.resolveTargets(t)) await e.store.update("_voltro_webhook_targets", r, {
-				secret: n,
-				updatedAt: /* @__PURE__ */ new Date()
-			});
-			return { secret: n };
-		},
-		updateTarget: async (t, n) => {
-			if (n.url !== void 0 && R({
-				event: "x",
-				url: n.url
-			}), n.rateLimitPerMinute !== void 0 && n.rateLimitPerMinute !== null && (!Number.isInteger(n.rateLimitPerMinute) || n.rateLimitPerMinute < 1)) throw Error("updateTarget: rateLimitPerMinute must be a positive integer or null");
-			let r = { updatedAt: /* @__PURE__ */ new Date() };
-			for (let e of [
-				"url",
-				"description",
-				"filter",
-				"scope",
-				"headers",
-				"rateLimitPerMinute",
-				"autoDisableAfter",
-				"format"
-			]) n[e] !== void 0 && (r[e] = n[e]);
-			for (let n of await a.resolveTargets(t)) await e.store.update("_voltro_webhook_targets", n, r);
-		},
-		testTarget: async (n, r) => {
-			let i = (await e.store.query({
-				table: "_voltro_webhook_targets",
-				predicate: O("id", n),
-				order: [],
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			}))[0];
-			if (i === void 0) throw new C({ targetId: n });
-			let a = E(), o = JSON.stringify(r ?? {
-				test: !0,
-				targetId: n,
-				at: (/* @__PURE__ */ new Date()).toISOString()
-			});
-			return i.active ? await t({
-				deliveryId: a,
-				targetId: i.id,
-				event: i.event,
-				eventId: E(),
-				payloadJson: o
-			}) : await e.store.insert("_voltro_webhook_deliveries", {
-				id: `${a}:1`,
-				deliveryId: a,
-				targetId: i.id,
-				tenantId: i.tenantId ?? null,
-				event: i.event,
-				eventId: null,
-				attempt: 1,
-				status: "pending",
-				payload: o,
-				scheduledAt: /* @__PURE__ */ new Date(),
-				createdAt: /* @__PURE__ */ new Date(),
-				updatedAt: /* @__PURE__ */ new Date()
-			}), { deliveryId: a };
-		},
-		listDeliveries: async (t) => {
-			let n = t?.scope === void 0 ? void 0 : new Set(await a.resolveTargets({ scope: t.scope })), r = await e.store.query({
-				table: "_voltro_webhook_deliveries",
-				predicate: t?.targetId === void 0 ? void 0 : O("targetId", t.targetId),
-				order: [{
-					column: "createdAt",
-					direction: "desc"
-				}],
-				take: Math.min((t?.limit ?? 200) * (t?.status !== void 0 || t?.since !== void 0 ? 10 : 1), 5e3),
-				skip: void 0,
-				projection: void 0
-			}), i = t?.since?.getTime();
-			return r.filter((e) => n === void 0 || n.has(String(e.targetId))).filter((e) => t?.status === void 0 || e.status === t.status).filter((e) => i === void 0 || Me(e.createdAt) >= i).slice(0, t?.limit ?? 200).map(V);
-		},
-		getDelivery: async (t) => {
-			let n = (await e.store.query({
-				table: "_voltro_webhook_deliveries",
-				predicate: O("id", t),
-				order: [],
-				take: 1,
-				skip: void 0,
-				projection: void 0
-			}))[0];
-			return n === void 0 ? null : {
-				...V(n),
-				payload: Ne(n.payload),
-				responseBody: n.responseBody ?? null
-			};
-		},
-		updateTargetPayloadVersion: async (t, n) => {
-			if (n < 1 || !Number.isInteger(n)) throw new x({ version: n });
-			await a.resolveTargets(t), await e.store.update("_voltro_webhook_targets", t, {
-				payloadVersion: n,
-				updatedAt: /* @__PURE__ */ new Date()
-			});
-		},
-		listTargets: async (t, n) => {
-			let r = await e.store.query({
-				table: "_voltro_webhook_targets",
-				predicate: t === void 0 ? void 0 : O("event", t),
-				order: [{
-					column: "createdAt",
-					direction: "desc"
-				}],
-				take: 500,
-				skip: void 0,
-				projection: void 0
-			});
-			return (n === void 0 ? r : r.filter((e) => e.scope !== null && Object.entries(n).every(([t, n]) => e.scope?.[t] === n))).map((e) => ({
-				id: e.id,
-				event: e.event,
-				url: e.url,
-				active: e.active,
-				rateLimitPerMinute: e.rateLimitPerMinute,
-				description: e.description,
-				payloadVersion: e.payloadVersion,
-				autoDisableAfter: e.autoDisableAfter,
-				consecutiveFailures: e.consecutiveFailures ?? 0,
-				autoDisabledAt: e.autoDisabledAt === null || e.autoDisabledAt === void 0 ? null : e.autoDisabledAt instanceof Date ? e.autoDisabledAt.toISOString() : String(e.autoDisabledAt),
-				autoDisableReason: e.autoDisableReason,
-				scope: e.scope,
-				filter: e.filter ?? null
-			}));
-		}
-	};
-	return a;
-}, Ve = w.gen(function* () {
-	return yield* Oe;
-}), He = (e) => {
-	if (e.webhooks === void 0) throw Error("useWebhooks: `ctx.webhooks` is not set. Declare an outgoing event with a `webhook:` block in a *.event.ts file, or an incoming endpoint in a *.webhook.tsx file — the service is wired the moment the app has either.");
-	return e.webhooks;
-}, Ue = 1e4, We = class {
-	capacity;
-	cache = /* @__PURE__ */ new Map();
-	constructor(e = Ue) {
-		this.capacity = e;
-	}
-	evictExpired() {
-		let e = Date.now();
-		for (let [t, n] of this.cache) n.expiresAt < e && this.cache.delete(t);
-	}
-	claim(e, t) {
-		let n = this.cache.get(e);
-		if (n !== void 0 && n.expiresAt > Date.now()) return this.cache.delete(e), this.cache.set(e, n), n.value === "inflight" ? "inflight" : "duplicate";
-		if (this.cache.set(e, {
-			value: "inflight",
-			expiresAt: Date.now() + t
-		}), this.cache.size > this.capacity) {
-			let e = this.cache.keys().next().value;
-			e !== void 0 && this.cache.delete(e);
-		}
-		return "fresh";
-	}
-	commit(e) {
-		let t = this.cache.get(e);
-		t !== void 0 && this.cache.set(e, {
-			value: "processed",
-			expiresAt: t.expiresAt
-		});
-	}
-	release(e) {
-		this.cache.delete(e);
-	}
-	size() {
-		return this.evictExpired(), this.cache.size;
-	}
-	clear() {
-		this.cache.clear();
-	}
-}, q = null, Ge = () => (q === null && (q = new We()), q), J = {
-	"5m": 3e5,
-	"1h": 36e5,
-	"6h": 216e5,
-	"1d": 864e5,
-	"7d": 6048e5,
-	"30d": 2592e6
-}, Ke = (e) => e === void 0 ? J["7d"] : J[e] ?? J["7d"], Y = (e, t) => ({
-	status: e,
-	contentType: "application/json; charset=utf-8",
-	body: JSON.stringify(t)
-}), qe = "voltroWebhookVerification", Je = class extends Error {
-	webhookId;
-	name = "UnverifiedIncomingWebhook";
-	constructor(e) {
-		super(`incoming webhook '${e}' declares no verification. It would be mounted as a public, unauthenticated POST that runs your application code, so the framework refuses to mount it. Pick one on the descriptor:\n  · provider: stripeWebhookProvider()   — a preset (HMAC scheme + idempotency + body type)\n  · signature: { _tag: 'hmac', algorithm: 'hmacSha256', header: 'X-Signature', encoding: 'hex', includeTimestamp: true }\n  · verification: 'provider'            — the handler verifies with the provider's own SDK\n  · verification: 'none'                — deliberately public; a gateway / IP allow-list owns it\nA signature-verified webhook reads its shared secret from VOLTRO_WEBHOOK_SECRET_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}. The framework never invents that value — the sender holds the other half of it.`), this.webhookId = e;
-	}
-}, Ye = (e) => `VOLTRO_WEBHOOK_SECRET_${e.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, Xe = (e) => {
-	let t = e.signature ?? e.provider?.signature ?? null;
-	return (e.verification === void 0 || e.verification === "signature") && t === null ? null : e.verification ?? "signature";
-}, Ze = (e, t) => {
-	let n = e.provider, r = e.signature ?? n?.signature ?? null, i = e.idempotency ?? n?.idempotency ?? null, a = e.bodyType ?? n?.bodyType ?? "json", o = Xe(e);
-	if (o === null) throw new Je(e.id);
-	let c = o;
-	c === "none" && A({ scope: `webhook:${e.id}` }).warn("incoming webhook mounted WITHOUT verification — anyone who can reach this URL can run its handler", {
-		webhookId: e.id,
-		verification: "none"
-	});
-	let l = t.idempotencyCache ?? Ge(), u = Ke(i?.ttl), d = t.log ?? ((e) => {
-		A({ scope: `webhook:${e.webhookId}` }).debug("incoming webhook", {
-			status: e.status,
-			signatureOk: e.signatureOk,
-			idempotency: e.idempotency,
-			durationMs: e.durationMs,
-			...e.errorMessage === void 0 ? {} : { errorMessage: e.errorMessage }
-		});
-	});
-	return Object.assign(async (n) => {
-		let o = Date.now();
-		if (n.method !== "POST") {
-			let t = Y(405, {
-				error: "method not allowed",
-				expected: "POST"
-			});
-			return d({
-				webhookId: e.id,
-				status: 405,
-				signatureOk: "skipped",
-				idempotency: "skipped",
-				durationMs: Date.now() - o
-			}), t;
-		}
-		let f = "skipped";
-		if (r !== null && c === "signature") {
-			let i = await t.resolveSecret(e.id);
-			if (i === null) {
-				let t = `no signing secret configured — set ${Ye(e.id)}`, n = Y(503, {
-					error: "webhook not configured",
-					reason: t
-				});
-				return d({
-					webhookId: e.id,
-					status: 503,
-					signatureOk: !1,
-					idempotency: "skipped",
-					durationMs: Date.now() - o,
-					errorMessage: t
-				}), n;
-			}
-			{
-				let t = s(r, {
-					rawBody: n.rawBody,
-					secret: i,
-					headers: n.headers
-				});
-				if (f = t.ok, !t.ok) {
-					let n = Y(401, {
-						error: "invalid signature",
-						reason: t.reason
-					});
-					return d({
-						webhookId: e.id,
-						status: 401,
-						signatureOk: !1,
-						idempotency: "skipped",
-						durationMs: Date.now() - o,
-						errorMessage: t.reason
-					}), n;
-				}
-			}
-		}
-		let p;
-		try {
-			if (a === "json") {
-				let e = new TextDecoder().decode(n.rawBody);
-				p = e.length === 0 ? null : JSON.parse(e);
-			} else if (a === "form") {
-				let e = new TextDecoder().decode(n.rawBody), t = new URLSearchParams(e), r = {};
-				for (let [e, n] of t.entries()) r[e] = n;
-				p = r;
-			} else p = n.rawBody;
-		} catch (t) {
-			let n = Y(400, {
-				error: "malformed body",
-				reason: t.message
-			});
-			return d({
-				webhookId: e.id,
-				status: 400,
-				signatureOk: f,
-				idempotency: "skipped",
-				durationMs: Date.now() - o,
-				errorMessage: t.message
-			}), n;
-		}
-		let m;
-		try {
-			m = T.decodeUnknownSync(e.payload)(p);
-		} catch (t) {
-			let n = Y(422, {
-				error: "schema validation failed",
-				reason: t.message
-			});
-			return d({
-				webhookId: e.id,
-				status: 422,
-				signatureOk: f,
-				idempotency: "skipped",
-				durationMs: Date.now() - o,
-				errorMessage: t.message
-			}), n;
-		}
-		let h, g = "skipped";
-		if (i !== null) {
-			let t = i.from;
-			if (h = typeof t == "string" ? n.headers[t.toLowerCase()] : t(n.headers, n.rawBody), h !== void 0 && h.length > 0) {
-				let t = l.claim(h, u);
-				if (g = t, t === "duplicate") {
-					let t = Y(200, {
-						received: !0,
-						duplicate: !0
-					});
-					return d({
-						webhookId: e.id,
-						status: 200,
-						signatureOk: f,
-						idempotency: "duplicate",
-						durationMs: Date.now() - o
-					}), t;
-				}
-				if (t === "inflight") {
-					let t = Y(409, {
-						error: "request already in flight",
-						idempotencyKey: h
-					});
-					return d({
-						webhookId: e.id,
-						status: 409,
-						signatureOk: f,
-						idempotency: "inflight",
-						durationMs: Date.now() - o
-					}), t;
-				}
-			}
-		}
-		try {
-			let r = t.resolveWorkflows?.();
-			await e.handler({
-				body: m,
-				rawBody: n.rawBody,
-				headers: n.headers,
-				idempotencyKey: h ?? "",
-				...r ? { workflows: r } : {}
-			}), h !== void 0 && l.commit(h);
-			let i = Y(200, { received: !0 });
-			return d({
-				webhookId: e.id,
-				status: 200,
-				signatureOk: f,
-				idempotency: g,
-				durationMs: Date.now() - o
-			}), i;
-		} catch (t) {
-			h !== void 0 && l.release(h);
-			let n = Y(500, {
-				error: "handler threw",
-				reason: t.message
-			});
-			return d({
-				webhookId: e.id,
-				status: 500,
-				signatureOk: f,
-				idempotency: g,
-				durationMs: Date.now() - o,
-				errorMessage: t.message
-			}), ge({
-				error: t,
-				source: "webhook",
-				name: e.id,
-				fields: { status: 500 }
-			}), n;
-		}
-	}, { [qe]: c });
-}, Qe = (e) => `/webhooks/${e}`, $e = "_voltro_webhook_rate_windows", et = 6e4, tt = (e, t) => `${e}@${t}`, nt = async (e, t, n) => (await e.query({
-	table: "_voltro_webhook_rate_windows",
-	predicate: D(O("scope", t), O("bucket", n)),
-	order: [],
-	take: 1,
-	skip: void 0,
-	projection: void 0
-}))[0] ?? null, X = 32, rt = async (e, t, n) => {
-	for (let r = 0; r < X; r++) {
-		r > 0 && await new Promise((e) => setTimeout(e, r));
-		let i = await nt(e, t.key, n);
-		if (i === null) {
-			await e.insertIgnore($e, {
-				id: tt(t.key, n),
-				scope: t.key,
-				bucket: n,
-				count: 0,
-				createdAt: /* @__PURE__ */ new Date(),
-				updatedAt: /* @__PURE__ */ new Date()
-			}, { conflictColumns: ["id"] });
-			continue;
-		}
-		if (i.count >= t.limit) return !1;
-		if (await e.updateMany("_voltro_webhook_rate_windows", {
-			count: i.count + 1,
-			updatedAt: /* @__PURE__ */ new Date()
-		}, { where: D(O("id", i.id), O("count", i.count)) }) === 1) return !0;
-	}
-	throw Error(`webhook rate window: contention on (${t.key}, ${n}) exceeded ${X} attempts`);
-}, it = async (e, t, n) => {
-	for (let r = 0; r < X; r++) {
-		r > 0 && await new Promise((e) => setTimeout(e, r));
-		let i = await nt(e, t, n);
-		if (i === null || i.count <= 0 || await e.updateMany("_voltro_webhook_rate_windows", {
-			count: i.count - 1,
-			updatedAt: /* @__PURE__ */ new Date()
-		}, { where: D(O("id", i.id), O("count", i.count)) }) === 1) return;
-	}
-	throw Error(`webhook rate window: release contention on (${t}) exceeded ${X} attempts`);
-}, at = async (e, t, n, r = et) => {
-	if (t.length === 0) return {
-		acquired: !0,
-		retryInMs: 0
-	};
-	let i = Math.floor(n / r), a = [];
-	for (let o of t) {
-		if (await rt(e, o, i)) {
-			a.push(o);
-			continue;
-		}
-		for (let t of a) await it(e, t.key, i);
-		return {
-			acquired: !1,
-			retryInMs: (i + 1) * r - n
-		};
-	}
-	return {
-		acquired: !0,
-		retryInMs: 0
-	};
-}, ot = (e, t) => {
-	if (e === "json") return {
-		contentType: "application/json",
-		bytes: Buffer.from(t, "utf8")
-	};
-	let n;
-	try {
-		n = JSON.parse(t);
-	} catch (t) {
-		throw new b({
-			format: e,
-			reason: `payload is not valid JSON: ${t.message}`
-		});
-	}
-	return e === "form" ? {
-		contentType: "application/x-www-form-urlencoded",
-		bytes: Buffer.from(st(n), "utf8")
-	} : {
-		contentType: "application/xml",
-		bytes: Buffer.from(lt(n), "utf8")
-	};
-}, st = (e) => {
-	if (typeof e != "object" || !e || Array.isArray(e)) throw new b({
-		format: "form",
-		reason: `form encoding requires a JSON object at the top level, got ${ft(e)}`
-	});
-	let t = new URLSearchParams();
-	for (let [n, r] of Object.entries(e)) Z(t, n, r);
-	return t.toString();
-}, Z = (e, t, n) => {
-	if (n === null) {
-		e.append(t, "");
-		return;
-	}
-	if (Array.isArray(n)) {
-		n.forEach((n, r) => Z(e, `${t}[${r}]`, n));
-		return;
-	}
-	if (typeof n == "object") {
-		for (let [r, i] of Object.entries(n)) Z(e, `${t}[${r}]`, i);
-		return;
-	}
-	e.append(t, String(n));
-}, ct = /^[A-Za-z_][A-Za-z0-9_.-]*$/, lt = (e) => `<?xml version="1.0" encoding="UTF-8"?>${Q("webhook", e)}`, Q = (e, t) => {
-	if (!ct.test(e)) throw new b({
-		format: "xml",
-		reason: `object key ${JSON.stringify(e)} is not a valid XML element name`
-	});
-	return `<${e}>${ut(e, t)}</${e}>`;
-}, ut = (e, t) => t == null ? "" : Array.isArray(t) ? t.map((e) => Q("item", e)).join("") : typeof t == "object" ? Object.entries(t).map(([e, t]) => Q(e, t)).join("") : dt(String(t)), dt = (e) => e.replace(/[&<>"']/g, (e) => {
-	switch (e) {
-		case "&": return "&amp;";
-		case "<": return "&lt;";
-		case ">": return "&gt;";
-		case "\"": return "&quot;";
-		default: return "&apos;";
-	}
-}), ft = (e) => e === null ? "null" : Array.isArray(e) ? "array" : typeof e, pt = "_voltro_webhook_targets", mt = 32, ht = async (e, t) => (await e.query({
-	table: "_voltro_webhook_targets",
-	predicate: O("id", t),
-	order: [],
-	take: 1,
-	skip: void 0,
-	projection: void 0
-}))[0] ?? null, gt = async (e, t, n, r, i = /* @__PURE__ */ new Date(), a = !1) => {
-	for (let o = 0; o < mt; o++) {
-		o > 0 && await new Promise((e) => setTimeout(e, o));
-		let s = await ht(e, t);
-		if (s === null) return {
-			consecutiveFailures: 0,
-			autoDisabled: !1
-		};
-		let c = s.consecutiveFailures ?? 0;
-		if (n) {
-			if (c === 0 || await e.updateMany("_voltro_webhook_targets", {
-				consecutiveFailures: 0,
-				updatedAt: i
-			}, { where: D(O("id", t), O("consecutiveFailures", c)) }) === 1) return {
-				consecutiveFailures: 0,
-				autoDisabled: !1
-			};
-			continue;
-		}
-		let l = c + 1, u = s.autoDisableAfter, d = s.active && (a || typeof u == "number" && u > 0 && l >= u), f = {
-			consecutiveFailures: l,
-			updatedAt: i
-		};
-		if (d && (f.active = !1, f.autoDisabledAt = i, f.autoDisableReason = r.slice(0, 500)), await e.updateMany("_voltro_webhook_targets", f, { where: D(O("id", t), O("consecutiveFailures", c)) }) === 1) return {
-			consecutiveFailures: l,
-			autoDisabled: d
-		};
-	}
-	throw Error(`webhook auto-disable: streak CAS contention on target ${t} exceeded ${mt} attempts`);
-}, _t = T.Struct({
-	status: T.Number,
-	body: T.String,
-	latencyMs: T.Number,
-	retryAfterSec: T.Union([T.Number, T.Undefined]),
-	transportError: T.Union([T.String, T.Undefined]),
-	encodeError: T.Union([T.String, T.Undefined])
-}), vt = T.Struct({
-	outcome: T.Literals([
-		"succeeded",
-		"failed",
-		"retry"
-	]),
-	delayMs: T.Union([T.Number, T.Undefined]),
-	reason: T.Union([T.String, T.Undefined]),
-	autoDisabled: T.Union([T.Boolean, T.Undefined]),
-	consecutiveFailures: T.Union([T.Number, T.Undefined])
-}), yt = T.Struct({
-	acquired: T.Boolean,
-	retryInMs: T.Number
-}), bt = {
-	deliveryId: T.String,
-	targetId: T.String,
-	event: T.String,
-	eventId: T.String,
-	payloadJson: T.String,
-	attemptEpoch: T.optional(T.Number)
-}, xt = ye.make("voltro.deliverWebhook", {
-	payload: bt,
-	success: T.Struct({
-		finalStatus: T.Literals([
-			"succeeded",
-			"failed",
-			"deferred"
-		]),
-		attempts: T.Number
-	}),
-	idempotencyKey: ({ deliveryId: e, attemptEpoch: t }) => `voltro.deliverWebhook:${e}:${t ?? 0}`
-}), St = 3e4, Ct = (e, t) => {
-	if (e !== void 0) return e;
-	let n = Number(t.VOLTRO_WEBHOOK_TIMEOUT_MS);
-	return Number.isFinite(n) && n > 0 ? n : St;
-}, wt = (e, t = {}) => (n, r) => {
-	let { deliveryId: i, targetId: a, event: o, eventId: s, payloadJson: c } = n, l = A({ scope: `webhook:${i}` });
-	return w.gen(function* () {
-		let n = yield* j.make({
-			name: "fetch-target",
-			success: T.Union([T.Null, T.Struct({
-				id: T.String,
-				event: T.String,
-				url: T.String,
-				secret: T.String,
-				signing: T.Any,
-				retry: T.Any,
-				headers: T.Union([T.Record(T.String, T.String), T.Null]),
-				rateLimitPerMinute: T.Union([T.Number, T.Null]),
-				active: T.Boolean,
-				format: T.Literals([
-					"json",
-					"form",
-					"xml"
-				]),
-				tenantId: T.Union([T.String, T.Null])
-			})]),
-			execute: w.tryPromise({
-				try: async () => (await e.store.query({
-					table: "_voltro_webhook_targets",
-					predicate: O("id", a),
-					order: [{
-						column: "createdAt",
-						direction: "asc"
-					}],
-					take: 1,
-					skip: void 0,
-					projection: void 0
-				}))[0] ?? null,
-				catch: (e) => (l.debug("fetch-target raw error", {
-					targetId: a,
-					event: o,
-					cause: String(e)
-				}), /* @__PURE__ */ Error(`fetch-target failed: ${e.message}`))
-			}).pipe(w.orDie)
-		});
-		if (n === null) return {
-			finalStatus: "failed",
-			attempts: 0
-		};
-		let r = async (t, r, l) => {
-			await e.store.update("_voltro_webhook_deliveries", t, {
-				...l,
-				updatedAt: /* @__PURE__ */ new Date()
-			}) === null && await e.store.insert("_voltro_webhook_deliveries", {
-				id: t,
-				deliveryId: i,
-				targetId: a,
-				tenantId: n.tenantId ?? null,
-				event: o,
-				eventId: s,
-				attempt: r,
-				payload: c,
-				scheduledAt: /* @__PURE__ */ new Date(),
-				createdAt: /* @__PURE__ */ new Date(),
-				updatedAt: /* @__PURE__ */ new Date(),
-				...l
-			});
-		};
-		if (n.active !== !0) return yield* j.make({
-			name: "record-paused-pending",
-			success: T.Void,
-			execute: w.tryPromise({
-				try: () => r(`${i}:1`, 1, { status: "pending" }),
-				catch: (e) => /* @__PURE__ */ Error(`record-paused-pending failed: ${e.message}`)
-			}).pipe(w.orDie)
-		}), {
-			finalStatus: "deferred",
-			attempts: 0
-		};
-		let u = (e) => typeof e == "string" ? JSON.parse(e) : e, d = u(n.retry), p = u(n.signing), m = n.headers === null ? null : u(n.headers), h = t.rateWindowMs ?? 6e4, g = Ct(t.timeoutMs, process.env), _ = t.events?.find((e) => e.id === o)?.globalRateLimit, v = [...typeof n.rateLimitPerMinute == "number" && n.rateLimitPerMinute > 0 ? [{
-			key: `target:${n.id}`,
-			limit: n.rateLimitPerMinute
-		}] : [], ..._ !== void 0 && _.perMinute > 0 ? [{
-			key: `event:${o}`,
-			limit: _.perMinute
-		}] : []];
-		for (let t = 1; t <= d.maxAttempts; t++) {
-			let u = `${i}:${t}`;
-			if (v.length > 0) for (let n = 0;; n++) {
-				let i = yield* j.make({
-					name: `rate-acquire-${t}-${n}`,
-					success: yt,
-					execute: w.tryPromise({
-						try: () => at(e.store, v, Date.now(), h),
-						catch: (e) => (l.debug("rate-acquire raw error", {
-							targetId: a,
-							event: o,
-							attempt: t,
-							cause: String(e)
-						}), /* @__PURE__ */ Error(`rate-acquire failed: ${e.message}`))
-					}).pipe(w.orDie)
-				});
-				if (i.acquired) break;
-				yield* j.make({
-					name: `record-rate-deferral-${t}-${n}`,
-					success: T.Void,
-					execute: w.tryPromise({
-						try: () => r(u, t, {
-							status: "pending",
-							nextAttemptAt: new Date(Date.now() + i.retryInMs)
-						}),
-						catch: (e) => /* @__PURE__ */ Error(`record-rate-deferral failed: ${e.message}`)
-					}).pipe(w.orDie)
-				}), yield* ve.sleep({
-					name: `rate-window-sleep-${t}-${n}`,
-					duration: `${i.retryInMs} millis`
-				});
-			}
-			yield* j.make({
-				name: `record-attempt-start-${t}`,
-				success: T.Void,
-				execute: w.tryPromise({
-					try: () => r(u, t, {
-						status: "inFlight",
-						nextAttemptAt: null,
-						scheduledAt: /* @__PURE__ */ new Date()
-					}),
-					catch: (e) => /* @__PURE__ */ Error(`record-attempt-start failed: ${e.message}`)
-				}).pipe(w.orDie)
-			});
-			let _ = yield* j.make({
-				name: `sign-and-post-${t}`,
-				success: _t,
-				execute: w.promise(async () => {
-					let e = Date.now(), r;
-					try {
-						r = ot(n.format, c);
-					} catch (t) {
-						if (t instanceof b) return {
-							status: 0,
-							body: "",
-							latencyMs: Date.now() - e,
-							retryAfterSec: void 0,
-							transportError: void 0,
-							encodeError: t.reason
-						};
-						throw t;
-					}
-					let a = Buffer.from(r.bytes), { headers: l } = f(p, {
-						rawBody: a,
-						secret: n.secret,
-						messageId: i
-					});
-					process.env.NODE_ENV === "production" && k(n.url);
-					try {
-						let c = await fetch(n.url, {
-							method: "POST",
-							headers: {
-								"content-type": r.contentType,
-								...l,
-								"x-voltro-event": o,
-								"x-voltro-event-id": s,
-								"x-voltro-delivery-id": i,
-								"x-voltro-attempt": String(t),
-								"idempotency-key": i,
-								...m ?? {}
-							},
-							body: a,
-							redirect: "manual",
-							signal: AbortSignal.timeout(g)
-						}), u = (await c.text()).slice(0, 8192), d = c.headers.get("retry-after");
-						return {
-							status: c.status,
-							body: u,
-							latencyMs: Date.now() - e,
-							retryAfterSec: d !== null && /^\d+$/.test(d) ? Number(d) : void 0,
-							transportError: void 0,
-							encodeError: void 0
-						};
-					} catch (t) {
-						return {
-							status: 0,
-							body: "",
-							latencyMs: Date.now() - e,
-							retryAfterSec: void 0,
-							transportError: t.message,
-							encodeError: void 0
-						};
-					}
-				})
-			}), y = yield* j.make({
-				name: `classify-and-record-${t}`,
-				success: vt,
-				execute: w.tryPromise({
-					try: async () => {
-						let r = _.status >= 200 && _.status < 300, i = _.transportError !== void 0, o = _.encodeError !== void 0, s = _.status === 410, c = (t, n) => gt(e.store, a, t, n, /* @__PURE__ */ new Date(), !t && s);
-						if (r) {
-							await e.store.update("_voltro_webhook_deliveries", u, {
-								status: "succeeded",
-								responseStatus: _.status,
-								responseBody: _.body,
-								latencyMs: _.latencyMs,
-								updatedAt: /* @__PURE__ */ new Date()
-							});
-							let t = await c(!0, "");
-							return {
-								outcome: "succeeded",
-								delayMs: void 0,
-								reason: void 0,
-								autoDisabled: t.autoDisabled,
-								consecutiveFailures: t.consecutiveFailures
-							};
-						}
-						let l = o ? null : Te(d, t, {
-							...i ? {} : { status: _.status },
-							..._.retryAfterSec === void 0 ? {} : { retryAfterSeconds: _.retryAfterSec }
-						});
-						if (l === null) {
-							let t = o ? `encode (${n.format}): ${_.encodeError}` : i ? `transport: ${_.transportError}` : `http ${_.status}: ${_.body.slice(0, 200)}`;
-							await e.store.update("_voltro_webhook_deliveries", u, {
-								status: "failed",
-								responseStatus: i || o ? null : _.status,
-								responseBody: i || o ? null : _.body,
-								errorMessage: o ? t : _.transportError ?? null,
-								latencyMs: _.latencyMs,
-								updatedAt: /* @__PURE__ */ new Date()
-							});
-							let r = await c(!1, t);
-							return {
-								outcome: "failed",
-								delayMs: void 0,
-								reason: t,
-								autoDisabled: r.autoDisabled,
-								consecutiveFailures: r.consecutiveFailures
-							};
-						}
-						return await e.store.update("_voltro_webhook_deliveries", u, {
-							status: "retryScheduled",
-							responseStatus: i ? null : _.status,
-							responseBody: i ? null : _.body,
-							errorMessage: _.transportError ?? null,
-							latencyMs: _.latencyMs,
-							nextAttemptAt: new Date(Date.now() + l.delayMs),
-							updatedAt: /* @__PURE__ */ new Date()
-						}), {
-							outcome: "retry",
-							delayMs: l.delayMs,
-							reason: void 0,
-							autoDisabled: void 0,
-							consecutiveFailures: void 0
-						};
-					},
-					catch: (e) => (l.debug("classify-and-record raw error", {
-						targetId: a,
-						event: o,
-						attempt: t,
-						cause: String(e)
-					}), /* @__PURE__ */ Error(`classify-and-record failed: ${e.message}`))
-				}).pipe(w.orDie)
-			});
-			if (y.autoDisabled === !0 && l.warn("target auto-disabled after consecutive failures", {
-				targetId: a,
-				event: o,
-				consecutiveFailures: y.consecutiveFailures ?? null,
-				reason: y.reason ?? null
-			}), y.outcome === "succeeded") return {
-				finalStatus: "succeeded",
-				attempts: t
-			};
-			if (y.outcome === "failed") return {
-				finalStatus: "failed",
-				attempts: t
-			};
-			y.delayMs !== void 0 && (yield* ve.sleep({
-				name: `retry-sleep-${t}`,
-				duration: `${y.delayMs} millis`
-			}));
-		}
-		return {
-			finalStatus: "failed",
-			attempts: d.maxAttempts
-		};
-	});
-}, $ = "voltro.webhook.emit", Tt = (e) => typeof e.event == "string", Et = (e) => be({
-	effect: $,
-	maxAttempts: 1,
-	handler: async ({ payload: t, outboxId: n }) => {
-		if (!Tt(t)) throw Error(`${$}: row payload has no \`event\` name — cannot resolve a descriptor. Got keys: ${Object.keys(t).join(", ") || "(none)"}`);
-		let r = e();
-		if (r === void 0) throw Error(`${$}: the outgoing-webhooks service is not available in this process. An emit was enqueued by a build that had the plugin registered; this one does not.`);
-		await r.emit(t.event, t.payload, {
-			tenantId: t.tenantId,
-			eventId: n
-		});
-	}
-});
-//#endregion
-export { We as IdempotencyCache, et as RATE_WINDOW_MS, $e as RATE_WINDOW_TABLE, p as STANDARD_WEBHOOKS_DEFAULT_TOLERANCE_SECONDS, te as STANDARD_WEBHOOKS_ID_HEADER, c as STANDARD_WEBHOOKS_MAX_KEY_BYTES, l as STANDARD_WEBHOOKS_MIN_KEY_BYTES, _ as STANDARD_WEBHOOKS_SECRET_PREFIX, m as STANDARD_WEBHOOKS_SIGNATURE_HEADER, d as STANDARD_WEBHOOKS_TIMESTAMP_HEADER, u as STANDARD_WEBHOOKS_VERSION, pt as TARGETS_TABLE, Je as UnverifiedIncomingWebhook, M as WEBHOOKS_EGRESS, xe as WEBHOOKS_PLUGIN_PERMISSIONS, $ as WEBHOOK_EMIT_EFFECT, qe as WEBHOOK_VERIFICATION_PROPERTY, oe as WebhookDeliveryNotFound, se as WebhookPayloadInvalid, b as WebhookPayloadUnrepresentable, x as WebhookPayloadVersionInvalid, S as WebhookSubscribeInvalid, C as WebhookTargetNotFound, Oe as WebhooksService, ce as _voltroWebhookDeliveriesTable, le as _voltroWebhookEventStatsTable, ue as _voltroWebhookRateWindowsTable, de as _voltroWebhookTargetsTable, at as acquireRateSlots, N as asOutgoingEvent, wt as buildDeliverWebhookExecute, Be as buildWebhooksService, Pe as compareVersions, rt as consumeRateSlot, Qe as defaultIncomingPath, ee as defaultOutgoingSignature, Ee as defaultRetryPolicy, re as defineIncomingWebhook, r as defineWebhookProvider, xt as deliverWebhookWorkflow, ot as encodePayload, I as eventsOf, De as fastRetryPolicy, je as generateSecret, i as generateStandardWebhooksSecret, h as genericHmacSignature, Ge as getIdempotencyCache, v as githubSignature, Ce as hasWebhookAudience, Xe as incomingWebhookVerification, ne as isStandardWebhooksSecret, t as isWebhookDescriptor, Et as makeDeferredEmitHandler, H as matchesFilter, Ze as mountIncomingWebhook, Te as nextRetry, P as parseDuration, Ke as parseTtl, gt as recordDeliveryOutcome, it as releaseRateSlot, z as resolveSubscribe, f as signRequest, a as slackSignature, ae as standardWebhooksHeaders, o as standardWebhooksKey, g as standardWebhooksSignature, ie as standardWebhooksSignatureToken, n as standardWebhooksSignedContent, y as stripeSignature, He as useWebhooks, Ve as useWebhooksEffect, R as validateSubscribe, s as verifyRequest, e as verifyStandardWebhooks, fe as webhookTables, Se as webhooksPlugin };
+import { WEBHOOKS_EGRESS as e, WEBHOOKS_PLUGIN_PERMISSIONS as t, webhooksPlugin as n } from "./plugin.js";
+import { defineIncomingWebhook as r, defineWebhookProvider as i, isWebhookDescriptor as a } from "./dsl.js";
+import { asOutgoingEvent as o, hasWebhookAudience as s } from "./eventAudience.js";
+import { STANDARD_WEBHOOKS_DEFAULT_TOLERANCE_SECONDS as c, STANDARD_WEBHOOKS_ID_HEADER as l, STANDARD_WEBHOOKS_MAX_KEY_BYTES as u, STANDARD_WEBHOOKS_MIN_KEY_BYTES as d, STANDARD_WEBHOOKS_SECRET_PREFIX as f, STANDARD_WEBHOOKS_SIGNATURE_HEADER as p, STANDARD_WEBHOOKS_TIMESTAMP_HEADER as m, STANDARD_WEBHOOKS_VERSION as h, generateStandardWebhooksSecret as g, isStandardWebhooksSecret as _, standardWebhooksHeaders as v, standardWebhooksKey as y, standardWebhooksSignatureToken as b, standardWebhooksSignedContent as x, verifyStandardWebhooks as S } from "./standardWebhooks.js";
+import { defaultOutgoingSignature as C, genericHmacSignature as w, githubSignature as T, signRequest as E, slackSignature as D, standardWebhooksSignature as O, stripeSignature as k, verifyRequest as A } from "./signing.js";
+import { defaultRetryPolicy as j, fastRetryPolicy as M, nextRetry as N, parseDuration as P } from "./retry.js";
+import { WebhookDeliveryNotFound as F, WebhookPayloadInvalid as I, WebhookPayloadUnrepresentable as L, WebhookPayloadVersionInvalid as R, WebhookSubscribeInvalid as z, WebhookTargetNotFound as B } from "./errors.js";
+import { MAX_SECRET_OVERLAP_SECONDS as V, WebhooksService as H, buildWebhooksService as U, compareVersions as W, eventsOf as G, generateSecret as K, matchesFilter as q, resolveSubscribe as J, useWebhooks as Y, useWebhooksEffect as X, validateSubscribe as Z } from "./service.js";
+import { IdempotencyCache as Q, getIdempotencyCache as $, parseTtl as ee } from "./idempotency.js";
+import { UnverifiedIncomingWebhook as te, WEBHOOK_VERIFICATION_PROPERTY as ne, defaultIncomingPath as re, incomingWebhookVerification as ie, mountIncomingWebhook as ae } from "./incoming.js";
+import { RATE_WINDOW_MS as oe, RATE_WINDOW_TABLE as se, acquireRateSlots as ce, consumeRateSlot as le, releaseRateSlot as ue } from "./rateLimit.js";
+import { encodePayload as de } from "./encode.js";
+import { TARGETS_TABLE as fe, recordDeliveryOutcome as pe } from "./autoDisable.js";
+import { buildDeliverWebhookExecute as me, deliverWebhookWorkflow as he } from "./deliverWorkflow.js";
+import { _voltroWebhookDeliveriesTable as ge, _voltroWebhookEventStatsTable as _e, _voltroWebhookRateWindowsTable as ve, _voltroWebhookTargetsTable as ye, webhookTables as be } from "./mixin.js";
+import { WEBHOOK_EMIT_EFFECT as xe, makeDeferredEmitHandler as Se } from "./deferredEmit.js";
+export { Q as IdempotencyCache, V as MAX_SECRET_OVERLAP_SECONDS, oe as RATE_WINDOW_MS, se as RATE_WINDOW_TABLE, c as STANDARD_WEBHOOKS_DEFAULT_TOLERANCE_SECONDS, l as STANDARD_WEBHOOKS_ID_HEADER, u as STANDARD_WEBHOOKS_MAX_KEY_BYTES, d as STANDARD_WEBHOOKS_MIN_KEY_BYTES, f as STANDARD_WEBHOOKS_SECRET_PREFIX, p as STANDARD_WEBHOOKS_SIGNATURE_HEADER, m as STANDARD_WEBHOOKS_TIMESTAMP_HEADER, h as STANDARD_WEBHOOKS_VERSION, fe as TARGETS_TABLE, te as UnverifiedIncomingWebhook, e as WEBHOOKS_EGRESS, t as WEBHOOKS_PLUGIN_PERMISSIONS, xe as WEBHOOK_EMIT_EFFECT, ne as WEBHOOK_VERIFICATION_PROPERTY, F as WebhookDeliveryNotFound, I as WebhookPayloadInvalid, L as WebhookPayloadUnrepresentable, R as WebhookPayloadVersionInvalid, z as WebhookSubscribeInvalid, B as WebhookTargetNotFound, H as WebhooksService, ge as _voltroWebhookDeliveriesTable, _e as _voltroWebhookEventStatsTable, ve as _voltroWebhookRateWindowsTable, ye as _voltroWebhookTargetsTable, ce as acquireRateSlots, o as asOutgoingEvent, me as buildDeliverWebhookExecute, U as buildWebhooksService, W as compareVersions, le as consumeRateSlot, re as defaultIncomingPath, C as defaultOutgoingSignature, j as defaultRetryPolicy, r as defineIncomingWebhook, i as defineWebhookProvider, he as deliverWebhookWorkflow, de as encodePayload, G as eventsOf, M as fastRetryPolicy, K as generateSecret, g as generateStandardWebhooksSecret, w as genericHmacSignature, $ as getIdempotencyCache, T as githubSignature, s as hasWebhookAudience, ie as incomingWebhookVerification, _ as isStandardWebhooksSecret, a as isWebhookDescriptor, Se as makeDeferredEmitHandler, q as matchesFilter, ae as mountIncomingWebhook, N as nextRetry, P as parseDuration, ee as parseTtl, pe as recordDeliveryOutcome, ue as releaseRateSlot, J as resolveSubscribe, E as signRequest, D as slackSignature, v as standardWebhooksHeaders, y as standardWebhooksKey, O as standardWebhooksSignature, b as standardWebhooksSignatureToken, x as standardWebhooksSignedContent, k as stripeSignature, Y as useWebhooks, X as useWebhooksEffect, Z as validateSubscribe, A as verifyRequest, S as verifyStandardWebhooks, be as webhookTables, n as webhooksPlugin };