@vorionsys/security 1.0.0

package/dist/intent/types.d.ts

@@ -0,0 +1,175 @@
+/**
+ * INTENT Module Types
+ *
+ * Shared type definitions for the INTENT module.
+ * This file exists to break circular dependencies between:
+ * - index.ts (IntentService)
+ * - queues.ts (uses IntentService)
+ * - routes.ts (uses IntentService)
+ * - shutdown.ts (uses queues.ts)
+ *
+ * @packageDocumentation
+ */
+import type { ID, Intent, IntentEvaluationRecord, IntentStatus, TrustLevel, TrustScore, EvaluationPayload } from '../common/types.js';
+import type { IntentEventRecord, PaginatedResult } from './repository.js';
+/**
+ * Payload size limits for security and performance
+ */
+export declare const PAYLOAD_LIMITS: {
+    readonly MAX_PAYLOAD_SIZE_BYTES: number;
+    readonly MAX_CONTEXT_BYTES: number;
+    readonly MAX_CONTEXT_KEYS: 100;
+    readonly MAX_STRING_LENGTH: 10000;
+};
+/**
+ * Intent submission payload (inferred from schema in index.ts)
+ */
+export interface IntentSubmission {
+    entityId: string;
+    goal: string;
+    context: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+    intentType?: string;
+    priority?: number;
+    idempotencyKey?: string;
+}
+/**
+ * Options for submitting an intent
+ */
+export interface SubmitOptions {
+    tenantId: ID;
+    trustSnapshot?: Record<string, unknown> | null;
+    /** Current trust level of the entity (for trust gate validation) */
+    trustLevel?: TrustLevel;
+    /** Skip trust gate validation (use with caution) */
+    bypassTrustGate?: boolean;
+    /** User ID for consent validation (required when consent checking is enabled) */
+    userId?: ID;
+    /** Skip consent validation (use with caution - only for system intents) */
+    bypassConsentCheck?: boolean;
+}
+/**
+ * Options for listing intents
+ */
+export interface ListOptions {
+    tenantId: ID;
+    entityId?: ID;
+    status?: IntentStatus;
+    /** Page size limit (default: 50, max: 1000) */
+    limit?: number;
+    /** Offset for pagination (default: 0) */
+    offset?: number;
+    /** Cursor for pagination (last intent ID from previous page) - mutually exclusive with offset */
+    cursor?: ID;
+    /**
+     * If true, throw an error when limit exceeds MAX_PAGE_SIZE instead of silently capping.
+     * Default: false (silently cap to MAX_PAGE_SIZE for backwards compatibility)
+     */
+    strictLimitValidation?: boolean;
+}
+/**
+ * Options for cancelling an intent
+ */
+export interface CancelOptions {
+    tenantId: ID;
+    reason: string;
+    cancelledBy?: string;
+}
+/**
+ * Intent with associated events and evaluations
+ */
+export interface IntentWithEvents {
+    intent: Intent;
+    events: IntentEventRecord[];
+    evaluations?: IntentEvaluationRecord[];
+}
+/**
+ * Options for bulk intent submission
+ */
+export interface BulkIntentOptions {
+    /** Stop processing on first error (default: false - continue processing all items) */
+    stopOnError?: boolean;
+    /** Return successful items even if some fail (default: true) */
+    returnPartial?: boolean;
+}
+/**
+ * Bulk intent submission request
+ */
+export interface BulkIntentSubmission {
+    /** Array of intents to submit (1-100 items) */
+    intents: IntentSubmission[];
+    /** Optional processing options */
+    options?: BulkIntentOptions;
+}
+/**
+ * Result for a single failed intent in bulk submission
+ * Note: 'input' uses a generic type to accommodate Zod-inferred types from the actual implementation
+ */
+export interface BulkIntentFailure<T = IntentSubmission> {
+    /** Index of the failed intent in the original array */
+    index: number;
+    /** The original input that failed */
+    input: T;
+    /** Error message describing the failure */
+    error: string;
+}
+/**
+ * Result of bulk intent submission
+ * Note: Uses generic type to accommodate Zod-inferred types from the actual implementation
+ */
+export interface BulkIntentResult<T = IntentSubmission> {
+    /** Successfully created intents */
+    successful: Intent[];
+    /** Failed intents with error details */
+    failed: BulkIntentFailure<T>[];
+    /** Summary statistics */
+    stats: {
+        /** Total number of intents in the request */
+        total: number;
+        /** Number of successfully created intents */
+        succeeded: number;
+        /** Number of failed intents */
+        failed: number;
+    };
+}
+/**
+ * Interface for the IntentService class.
+ * This interface is used to break circular dependencies by allowing
+ * other modules to depend on the interface instead of the implementation.
+ *
+ * Note: Methods use less strict types to accommodate Zod-inferred types
+ * from the actual implementation while maintaining type safety for consumers.
+ */
+export interface IIntentService {
+    submit(payload: Record<string, unknown>, options: SubmitOptions): Promise<Intent>;
+    get(id: ID, tenantId: ID): Promise<Intent | null>;
+    getWithEvents(id: ID, tenantId: ID): Promise<IntentWithEvents | null>;
+    updateStatus(id: ID, tenantId: ID, status: IntentStatus, previousStatus?: IntentStatus, options?: {
+        skipValidation?: boolean;
+        hasReason?: boolean;
+        hasPermission?: boolean;
+    }): Promise<Intent | null>;
+    cancel(id: ID, options: CancelOptions): Promise<Intent | null>;
+    delete(id: ID, tenantId: ID): Promise<Intent | null>;
+    list(options: ListOptions): Promise<PaginatedResult<Intent>>;
+    submitBulk(submissions: Record<string, unknown>[], options: {
+        tenantId: ID;
+        stopOnError?: boolean;
+        trustSnapshot?: Record<string, unknown> | null;
+        trustLevel?: TrustLevel;
+        bypassTrustGate?: boolean;
+        userId?: ID;
+        bypassConsentCheck?: boolean;
+    }): Promise<BulkIntentResult<Record<string, unknown>>>;
+    updateTrustMetadata(id: ID, tenantId: ID, trustSnapshot: Record<string, unknown> | null, trustLevel?: TrustLevel, trustScore?: TrustScore): Promise<Intent | null>;
+    recordEvaluation(intentId: ID, tenantId: ID, payload: EvaluationPayload): Promise<IntentEvaluationRecord>;
+    verifyEventChain(intentId: ID): Promise<{
+        valid: boolean;
+        invalidAt?: number;
+        error?: string;
+    }>;
+    getRequiredTrustLevel(intentType?: string | null): TrustLevel;
+}
+export type { Intent, IntentStatus, TrustLevel, TrustScore, ID, EvaluationPayload };
+export type { IntentEventRecord, PaginatedResult };
+//# sourceMappingURL=types.d.ts.map

package/dist/intent/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/intent/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,EAAE,EACF,MAAM,EACN,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAM1E;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,EAAE,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,oEAAoE;IACpE,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,oDAAoD;IACpD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iFAAiF;IACjF,MAAM,CAAC,EAAE,EAAE,CAAC;IACZ,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,EAAE,CAAC;IACb,QAAQ,CAAC,EAAE,EAAE,CAAC;IACd,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,MAAM,CAAC,EAAE,EAAE,CAAC;IACZ;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,EAAE,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACxC;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,sFAAsF;IACtF,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gEAAgE;IAChE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,+CAA+C;IAC/C,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,kCAAkC;IAClC,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,gBAAgB;IACrD,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,KAAK,EAAE,CAAC,CAAC;IACT,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,gBAAgB;IACpD,mCAAmC;IACnC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,wCAAwC;IACxC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/B,yBAAyB;IACzB,KAAK,EAAE;QACL,6CAA6C;QAC7C,KAAK,EAAE,MAAM,CAAC;QACd,6CAA6C;QAC7C,SAAS,EAAE,MAAM,CAAC;QAClB,+BAA+B;QAC/B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClD,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACtE,YAAY,CACV,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,EAAE,EACZ,MAAM,EAAE,YAAY,EACpB,cAAc,CAAC,EAAE,YAAY,EAC7B,OAAO,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACnF,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/D,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,UAAU,CACR,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EACtC,OAAO,EAAE;QACP,QAAQ,EAAE,EAAE,CAAC;QACb,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;QACxB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,MAAM,CAAC,EAAE,EAAE,CAAC;QACZ,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,GACA,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtD,mBAAmB,CACjB,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,EAAE,EACZ,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EAC7C,UAAU,CAAC,EAAE,UAAU,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1B,gBAAgB,CACd,QAAQ,EAAE,EAAE,EACZ,QAAQ,EAAE,EAAE,EACZ,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC;QACtC,KAAK,EAAE,OAAO,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC;CAC/D;AAMD,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC;AACpF,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC"}

package/dist/intent/types.js

@@ -0,0 +1,25 @@
+/**
+ * INTENT Module Types
+ *
+ * Shared type definitions for the INTENT module.
+ * This file exists to break circular dependencies between:
+ * - index.ts (IntentService)
+ * - queues.ts (uses IntentService)
+ * - routes.ts (uses IntentService)
+ * - shutdown.ts (uses queues.ts)
+ *
+ * @packageDocumentation
+ */
+// =============================================================================
+// Intent Submission Types
+// =============================================================================
+/**
+ * Payload size limits for security and performance
+ */
+export const PAYLOAD_LIMITS = {
+    MAX_PAYLOAD_SIZE_BYTES: 1024 * 1024, // 1MB max total payload
+    MAX_CONTEXT_BYTES: 64 * 1024, // 64KB max context (backward compatible)
+    MAX_CONTEXT_KEYS: 100,
+    MAX_STRING_LENGTH: 10000,
+};
+//# sourceMappingURL=types.js.map

package/dist/intent/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/intent/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAaH,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,sBAAsB,EAAE,IAAI,GAAG,IAAI,EAAE,wBAAwB;IAC7D,iBAAiB,EAAE,EAAE,GAAG,IAAI,EAAE,yCAAyC;IACvE,gBAAgB,EAAE,GAAG;IACrB,iBAAiB,EAAE,KAAK;CAChB,CAAC"}

package/dist/intent/webhooks/delivery-repository.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Webhook Delivery Repository
+ *
+ * Repository for managing webhook delivery persistence.
+ * Provides CRUD operations for webhook delivery records.
+ *
+ * @packageDocumentation
+ */
+import type { ID } from '../../common/types.js';
+import type { WebhookDelivery, WebhookDeliveryStatus, CreateDeliveryOptions, UpdateDeliveryStatusOptions } from './types.js';
+/**
+ * Calculate next retry time with exponential backoff.
+ *
+ * Uses the formula: baseDelay * 2^(attempt - 1)
+ * With a maximum delay cap to prevent extremely long waits.
+ *
+ * @param attempt - Current attempt number (1-based)
+ * @param baseDelayMs - Base delay in milliseconds (default: 1000)
+ * @param maxDelayMs - Maximum delay cap in milliseconds (default: 1 hour)
+ * @returns Date when next retry should occur
+ */
+export declare function calculateNextRetryTime(attempt: number, baseDelayMs?: number, maxDelayMs?: number): Date;
+/**
+ * Repository for managing webhook delivery persistence.
+ */
+export declare class WebhookDeliveryRepository {
+    private _db;
+    /**
+     * Get database instance (lazy initialization).
+     */
+    private get db();
+    /**
+     * Create a new delivery record.
+     */
+    createDelivery(data: CreateDeliveryOptions): Promise<WebhookDelivery>;
+    /**
+     * Update delivery status with details.
+     */
+    updateDeliveryStatus(id: ID, options: UpdateDeliveryStatusOptions): Promise<WebhookDelivery>;
+    /**
+     * Get delivery by ID.
+     */
+    getDeliveryById(id: ID): Promise<WebhookDelivery | null>;
+    /**
+     * Get delivery history for a webhook.
+     */
+    getDeliveryHistory(webhookId: ID, limit?: number): Promise<WebhookDelivery[]>;
+    /**
+     * Get pending retries that are due for processing.
+     */
+    getPendingRetries(limit?: number): Promise<WebhookDelivery[]>;
+    /**
+     * Get failed deliveries for a tenant.
+     */
+    getFailedDeliveries(tenantId: ID, limit?: number): Promise<WebhookDelivery[]>;
+    /**
+     * Get deliveries by tenant with pagination.
+     */
+    getDeliveriesByTenant(tenantId: ID, options?: {
+        limit?: number;
+        offset?: number;
+        status?: WebhookDeliveryStatus;
+    }): Promise<{
+        items: WebhookDelivery[];
+        hasMore: boolean;
+    }>;
+    /**
+     * Mark a delivery for immediate replay.
+     */
+    markForReplay(id: ID): Promise<WebhookDelivery>;
+    /**
+     * Clean up old delivery records.
+     */
+    cleanupOldDeliveries(retentionDays: number): Promise<number>;
+}
+/**
+ * Create webhook delivery repository instance
+ */
+export declare function createWebhookDeliveryRepository(): WebhookDeliveryRepository;
+//# sourceMappingURL=delivery-repository.d.ts.map

package/dist/intent/webhooks/delivery-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-repository.d.ts","sourceRoot":"","sources":["../../../src/intent/webhooks/delivery-repository.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,uBAAuB,CAAC;AAMhD,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,YAAY,CAAC;AAoCpB;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAa,EAC1B,UAAU,GAAE,MAAgB,GAC3B,IAAI,CAGN;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,GAAG,CAA+C;IAE1D;;OAEG;IACH,OAAO,KAAK,EAAE,GAKb;IAED;;OAEG;IACG,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;IA2B3E;;OAEG;IACG,oBAAoB,CACxB,EAAE,EAAE,EAAE,EACN,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,eAAe,CAAC;IA6C3B;;OAEG;IACG,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAS9D;;OAEG;IACG,kBAAkB,CACtB,SAAS,EAAE,EAAE,EACb,KAAK,GAAE,MAAmC,GACzC,OAAO,CAAC,eAAe,EAAE,CAAC;IAa7B;;OAEG;IACG,iBAAiB,CAAC,KAAK,GAAE,MAAY,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAkBxE;;OAEG;IACG,mBAAmB,CACvB,QAAQ,EAAE,EAAE,EACZ,KAAK,GAAE,MAAmC,GACzC,OAAO,CAAC,eAAe,EAAE,CAAC;IAkB7B;;OAEG;IACG,qBAAqB,CACzB,QAAQ,EAAE,EAAE,EACZ,OAAO,GAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,qBAAqB,CAAC;KAC3B,GACL,OAAO,CAAC;QAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA0B1D;;OAEG;IACG,aAAa,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC;IA4BrD;;OAEG;IACG,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAoBnE;AAED;;GAEG;AACH,wBAAgB,+BAA+B,IAAI,yBAAyB,CAE3E"}

package/dist/intent/webhooks/delivery-repository.js

@@ -0,0 +1,251 @@
+/**
+ * Webhook Delivery Repository
+ *
+ * Repository for managing webhook delivery persistence.
+ * Provides CRUD operations for webhook delivery records.
+ *
+ * @packageDocumentation
+ */
+import { and, desc, eq, lt, lte } from 'drizzle-orm';
+import { createLogger } from '../../common/logger.js';
+import { getDatabase } from '../../common/db.js';
+import { NotFoundError, ValidationError } from '../../common/errors.js';
+import { webhookDeliveries, } from '../schema.js';
+const logger = createLogger({ component: 'webhook-delivery-repository' });
+/**
+ * Default page size for delivery history queries
+ */
+const DEFAULT_DELIVERY_PAGE_SIZE = 50;
+/**
+ * Maximum page size for delivery history queries
+ */
+const MAX_DELIVERY_PAGE_SIZE = 100;
+/**
+ * Map database row to WebhookDelivery
+ */
+function mapDeliveryRow(row) {
+    return {
+        id: row.id,
+        webhookId: row.webhookId,
+        tenantId: row.tenantId,
+        eventType: row.eventType,
+        payload: (row.payload ?? {}),
+        status: row.status,
+        attempts: row.attempts,
+        lastAttemptAt: row.lastAttemptAt?.toISOString() ?? null,
+        lastError: row.lastError ?? null,
+        nextRetryAt: row.nextRetryAt?.toISOString() ?? null,
+        deliveredAt: row.deliveredAt?.toISOString() ?? null,
+        responseStatus: row.responseStatus ?? null,
+        responseBody: row.responseBody ?? null,
+        createdAt: row.createdAt.toISOString(),
+    };
+}
+/**
+ * Calculate next retry time with exponential backoff.
+ *
+ * Uses the formula: baseDelay * 2^(attempt - 1)
+ * With a maximum delay cap to prevent extremely long waits.
+ *
+ * @param attempt - Current attempt number (1-based)
+ * @param baseDelayMs - Base delay in milliseconds (default: 1000)
+ * @param maxDelayMs - Maximum delay cap in milliseconds (default: 1 hour)
+ * @returns Date when next retry should occur
+ */
+export function calculateNextRetryTime(attempt, baseDelayMs = 1000, maxDelayMs = 3600000 // 1 hour
+) {
+    const delayMs = Math.min(baseDelayMs * Math.pow(2, attempt - 1), maxDelayMs);
+    return new Date(Date.now() + delayMs);
+}
+/**
+ * Repository for managing webhook delivery persistence.
+ */
+export class WebhookDeliveryRepository {
+    _db = null;
+    /**
+     * Get database instance (lazy initialization).
+     */
+    get db() {
+        if (!this._db) {
+            this._db = getDatabase();
+        }
+        return this._db;
+    }
+    /**
+     * Create a new delivery record.
+     */
+    async createDelivery(data) {
+        const insertData = {
+            webhookId: data.webhookId,
+            tenantId: data.tenantId,
+            eventType: data.eventType,
+            payload: data.payload,
+            status: 'pending',
+            attempts: 0,
+        };
+        const [row] = await this.db
+            .insert(webhookDeliveries)
+            .values(insertData)
+            .returning();
+        if (!row) {
+            throw new Error('Failed to create webhook delivery record');
+        }
+        logger.info({ deliveryId: row.id, webhookId: data.webhookId, tenantId: data.tenantId, eventType: data.eventType }, 'Created webhook delivery record');
+        return mapDeliveryRow(row);
+    }
+    /**
+     * Update delivery status with details.
+     */
+    async updateDeliveryStatus(id, options) {
+        const updateData = {
+            status: options.status,
+        };
+        if (options.attempts !== undefined) {
+            updateData.attempts = options.attempts;
+        }
+        if (options.lastAttemptAt !== undefined) {
+            updateData.lastAttemptAt = options.lastAttemptAt;
+        }
+        if (options.lastError !== undefined) {
+            updateData.lastError = options.lastError;
+        }
+        if (options.nextRetryAt !== undefined) {
+            updateData.nextRetryAt = options.nextRetryAt;
+        }
+        if (options.deliveredAt !== undefined) {
+            updateData.deliveredAt = options.deliveredAt;
+        }
+        if (options.responseStatus !== undefined) {
+            updateData.responseStatus = options.responseStatus;
+        }
+        if (options.responseBody !== undefined) {
+            updateData.responseBody = options.responseBody;
+        }
+        const [row] = await this.db
+            .update(webhookDeliveries)
+            .set(updateData)
+            .where(eq(webhookDeliveries.id, id))
+            .returning();
+        if (!row) {
+            throw new NotFoundError(`Webhook delivery not found: ${id}`);
+        }
+        logger.debug({ deliveryId: id, status: options.status, attempts: options.attempts }, 'Updated webhook delivery status');
+        return mapDeliveryRow(row);
+    }
+    /**
+     * Get delivery by ID.
+     */
+    async getDeliveryById(id) {
+        const [row] = await this.db
+            .select()
+            .from(webhookDeliveries)
+            .where(eq(webhookDeliveries.id, id));
+        return row ? mapDeliveryRow(row) : null;
+    }
+    /**
+     * Get delivery history for a webhook.
+     */
+    async getDeliveryHistory(webhookId, limit = DEFAULT_DELIVERY_PAGE_SIZE) {
+        const effectiveLimit = Math.min(limit, MAX_DELIVERY_PAGE_SIZE);
+        const rows = await this.db
+            .select()
+            .from(webhookDeliveries)
+            .where(eq(webhookDeliveries.webhookId, webhookId))
+            .orderBy(desc(webhookDeliveries.createdAt))
+            .limit(effectiveLimit);
+        return rows.map(mapDeliveryRow);
+    }
+    /**
+     * Get pending retries that are due for processing.
+     */
+    async getPendingRetries(limit = 100) {
+        const now = new Date();
+        const rows = await this.db
+            .select()
+            .from(webhookDeliveries)
+            .where(and(eq(webhookDeliveries.status, 'retrying'), lte(webhookDeliveries.nextRetryAt, now)))
+            .orderBy(webhookDeliveries.nextRetryAt)
+            .limit(limit);
+        return rows.map(mapDeliveryRow);
+    }
+    /**
+     * Get failed deliveries for a tenant.
+     */
+    async getFailedDeliveries(tenantId, limit = DEFAULT_DELIVERY_PAGE_SIZE) {
+        const effectiveLimit = Math.min(limit, MAX_DELIVERY_PAGE_SIZE);
+        const rows = await this.db
+            .select()
+            .from(webhookDeliveries)
+            .where(and(eq(webhookDeliveries.tenantId, tenantId), eq(webhookDeliveries.status, 'failed')))
+            .orderBy(desc(webhookDeliveries.createdAt))
+            .limit(effectiveLimit);
+        return rows.map(mapDeliveryRow);
+    }
+    /**
+     * Get deliveries by tenant with pagination.
+     */
+    async getDeliveriesByTenant(tenantId, options = {}) {
+        const limit = Math.min(options.limit ?? DEFAULT_DELIVERY_PAGE_SIZE, MAX_DELIVERY_PAGE_SIZE);
+        const offset = options.offset ?? 0;
+        const whereConditions = [eq(webhookDeliveries.tenantId, tenantId)];
+        if (options.status) {
+            whereConditions.push(eq(webhookDeliveries.status, options.status));
+        }
+        const rows = await this.db
+            .select()
+            .from(webhookDeliveries)
+            .where(and(...whereConditions))
+            .orderBy(desc(webhookDeliveries.createdAt))
+            .limit(limit + 1)
+            .offset(offset);
+        const hasMore = rows.length > limit;
+        const items = hasMore ? rows.slice(0, limit) : rows;
+        return {
+            items: items.map(mapDeliveryRow),
+            hasMore,
+        };
+    }
+    /**
+     * Mark a delivery for immediate replay.
+     */
+    async markForReplay(id) {
+        const delivery = await this.getDeliveryById(id);
+        if (!delivery) {
+            throw new NotFoundError(`Webhook delivery not found: ${id}`);
+        }
+        // Only allow replay of failed deliveries
+        if (delivery.status !== 'failed') {
+            throw new ValidationError(`Cannot replay delivery with status '${delivery.status}'. Only failed deliveries can be replayed.`, { deliveryId: id, currentStatus: delivery.status });
+        }
+        const updatedDelivery = await this.updateDeliveryStatus(id, {
+            status: 'retrying',
+            nextRetryAt: new Date(), // Immediate retry
+            lastError: null, // Clear last error for retry
+        });
+        logger.info({ deliveryId: id, webhookId: delivery.webhookId, tenantId: delivery.tenantId }, 'Marked webhook delivery for replay');
+        return updatedDelivery;
+    }
+    /**
+     * Clean up old delivery records.
+     */
+    async cleanupOldDeliveries(retentionDays) {
+        const cutoffDate = new Date();
+        cutoffDate.setDate(cutoffDate.getDate() - retentionDays);
+        const result = await this.db
+            .delete(webhookDeliveries)
+            .where(lt(webhookDeliveries.createdAt, cutoffDate))
+            .returning({ id: webhookDeliveries.id });
+        const deletedCount = result.length;
+        if (deletedCount > 0) {
+            logger.info({ deletedCount, retentionDays, cutoffDate: cutoffDate.toISOString() }, 'Cleaned up old webhook delivery records');
+        }
+        return deletedCount;
+    }
+}
+/**
+ * Create webhook delivery repository instance
+ */
+export function createWebhookDeliveryRepository() {
+    return new WebhookDeliveryRepository();
+}
+//# sourceMappingURL=delivery-repository.js.map

package/dist/intent/webhooks/delivery-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-repository.js","sourceRoot":"","sources":["../../../src/intent/webhooks/delivery-repository.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAExE,OAAO,EACL,iBAAiB,GAGlB,MAAM,cAAc,CAAC;AAQtB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,6BAA6B,EAAE,CAAC,CAAC;AAE1E;;GAEG;AACH,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAEtC;;GAEG;AACH,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC;;GAEG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B;QACvD,MAAM,EAAE,GAAG,CAAC,MAA+B;QAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,IAAI;QACvD,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;QAChC,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,IAAI;QACnD,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,IAAI;QACnD,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;QAC1C,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,cAAsB,IAAI,EAC1B,aAAqB,OAAO,CAAC,SAAS;;IAEtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7E,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,yBAAyB;IAC5B,GAAG,GAA0C,IAAI,CAAC;IAE1D;;OAEG;IACH,IAAY,EAAE;QACZ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,GAAG,WAAW,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,IAA2B;QAC9C,MAAM,UAAU,GAA0B;YACxC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC;SACZ,CAAC;QAEF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC,UAAU,CAAC;aAClB,SAAS,EAAE,CAAC;QAEf,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACrG,iCAAiC,CAClC,CAAC;QAEF,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,EAAM,EACN,OAAoC;QAEpC,MAAM,UAAU,GAAgC;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QAEF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,UAAU,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACzC,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACxC,UAAU,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,UAAU,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAC3C,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACzC,UAAU,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACvC,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACjD,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,CAAC,iBAAiB,CAAC;aACzB,GAAG,CAAC,UAAU,CAAC;aACf,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACnC,SAAS,EAAE,CAAC;QAEf,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,aAAa,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,CAAC,KAAK,CACV,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EACtE,iCAAiC,CAClC,CAAC;QAEF,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,EAAM;QAC1B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAEvC,OAAO,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,SAAa,EACb,QAAgB,0BAA0B;QAE1C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QAE/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACjD,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;aAC1C,KAAK,CAAC,cAAc,CAAC,CAAC;QAEzB,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB,GAAG;QACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,EACxC,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,CACxC,CACF;aACA,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC;aACtC,KAAK,CAAC,KAAK,CAAC,CAAC;QAEhB,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,QAAY,EACZ,QAAgB,0BAA0B;QAE1C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QAE/D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACxC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CACvC,CACF;aACA,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;aAC1C,KAAK,CAAC,cAAc,CAAC,CAAC;QAEzB,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACzB,QAAY,EACZ,UAII,EAAE;QAEN,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,0BAA0B,EAAE,sBAAsB,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAEnC,MAAM,eAAe,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,iBAAiB,CAAC;aACvB,KAAK,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;aAC9B,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;aAC1C,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;aAChB,MAAM,CAAC,MAAM,CAAC,CAAC;QAElB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpD,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;YAChC,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,EAAM;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,yCAAyC;QACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,eAAe,CACvB,uCAAuC,QAAQ,CAAC,MAAM,4CAA4C,EAClG,EAAE,UAAU,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE;YAC1D,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,IAAI,IAAI,EAAE,EAAE,kBAAkB;YAC3C,SAAS,EAAE,IAAI,EAAE,6BAA6B;SAC/C,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAC9E,oCAAoC,CACrC,CAAC;QAEF,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,aAAqB;QAC9C,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;QAC9B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,iBAAiB,CAAC;aACzB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;aAClD,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC;QAE3C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QAEnC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,EAAE,EACrE,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,+BAA+B;IAC7C,OAAO,IAAI,yBAAyB,EAAE,CAAC;AACzC,CAAC"}

package/dist/intent/webhooks/dns-pinning.d.ts

@@ -0,0 +1,30 @@
+/**
+ * DNS Pinning Protection
+ *
+ * Validates webhook IP consistency to prevent DNS rebinding attacks.
+ *
+ * @packageDocumentation
+ */
+/**
+ * DNS Rebinding Attack Detection Result
+ */
+export interface DnsConsistencyResult {
+    valid: boolean;
+    reason?: string;
+    currentIp?: string;
+    storedIp?: string;
+}
+/**
+ * Validate webhook IP consistency (DNS pinning).
+ * Compares the currently resolved IP with the IP stored at registration time.
+ * This prevents DNS rebinding attacks where an attacker:
+ * 1. Registers webhook with attacker.com -> resolves to public IP (passes validation)
+ * 2. Changes DNS: attacker.com -> 169.254.169.254 (AWS metadata)
+ * 3. Webhook delivery resolves new DNS -> blocked because IP changed
+ *
+ * @param url The webhook URL to validate
+ * @param storedIp The IP address stored at registration time
+ * @returns Validation result with current and stored IPs for logging
+ */
+export declare function validateWebhookIpConsistency(url: string, storedIp: string | undefined): Promise<DnsConsistencyResult>;
+//# sourceMappingURL=dns-pinning.d.ts.map

package/dist/intent/webhooks/dns-pinning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-pinning.d.ts","sourceRoot":"","sources":["../../../src/intent/webhooks/dns-pinning.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAyD/B"}

package/dist/intent/webhooks/dns-pinning.js

@@ -0,0 +1,69 @@
+/**
+ * DNS Pinning Protection
+ *
+ * Validates webhook IP consistency to prevent DNS rebinding attacks.
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../../common/logger.js';
+const logger = createLogger({ component: 'dns-pinning' });
+/**
+ * Validate webhook IP consistency (DNS pinning).
+ * Compares the currently resolved IP with the IP stored at registration time.
+ * This prevents DNS rebinding attacks where an attacker:
+ * 1. Registers webhook with attacker.com -> resolves to public IP (passes validation)
+ * 2. Changes DNS: attacker.com -> 169.254.169.254 (AWS metadata)
+ * 3. Webhook delivery resolves new DNS -> blocked because IP changed
+ *
+ * @param url The webhook URL to validate
+ * @param storedIp The IP address stored at registration time
+ * @returns Validation result with current and stored IPs for logging
+ */
+export async function validateWebhookIpConsistency(url, storedIp) {
+    // If no stored IP (legacy webhook), skip consistency check but log warning
+    if (!storedIp) {
+        logger.warn({ url }, 'Webhook has no stored IP - DNS pinning cannot be enforced. Re-register webhook to enable DNS rebinding protection.');
+        return { valid: true, reason: 'No stored IP (legacy webhook)' };
+    }
+    try {
+        const { hostname } = new URL(url);
+        // For IP addresses in the URL, compare directly
+        if (/^(\d{1,3}\.){3}\d{1,3}$/.test(hostname)) {
+            if (hostname !== storedIp) {
+                return {
+                    valid: false,
+                    reason: 'IP address in URL does not match stored IP',
+                    currentIp: hostname,
+                    storedIp,
+                };
+            }
+            return { valid: true, currentIp: hostname, storedIp };
+        }
+        // Perform DNS lookup
+        const dns = await import('node:dns');
+        const { promisify } = await import('node:util');
+        const lookup = promisify(dns.lookup);
+        const result = await lookup(hostname);
+        const currentIp = result.address;
+        // Check if IP changed since registration
+        if (currentIp !== storedIp) {
+            logger.warn({ url, currentIp, storedIp }, 'DNS rebinding attack detected: webhook IP changed since registration');
+            return {
+                valid: false,
+                reason: 'DNS resolved IP does not match stored IP from registration',
+                currentIp,
+                storedIp,
+            };
+        }
+        return { valid: true, currentIp, storedIp };
+    }
+    catch (error) {
+        logger.warn({ url, storedIp, error }, 'Failed to resolve webhook URL for IP consistency check');
+        return {
+            valid: false,
+            reason: 'Failed to resolve webhook URL hostname',
+            storedIp,
+        };
+    }
+}
+//# sourceMappingURL=dns-pinning.js.map