@x12i/memorix-service 3.11.1 → 3.12.0

package/dist/hooks/types.d.ts

@@ -0,0 +1,93 @@
+import type { MemorixScope } from "../scope.js";
+export declare const HOOK_EVENTS: readonly ["created", "updated", "removed"];
+export type HookEventName = (typeof HOOK_EVENTS)[number];
+export declare const DELIVERY_STATUSES: readonly ["pending", "delivered", "rejected", "failed"];
+export type DeliveryStatus = (typeof DELIVERY_STATUSES)[number];
+export type HookHealth = "ok" | "failing";
+export type HookDiscriminator = {
+    path: string;
+    equals: unknown;
+};
+export type HookMatch = {
+    objectType: string;
+    contentType: string;
+    discriminator?: HookDiscriminator;
+    events: HookEventName[];
+    ignoreCallers?: string[];
+};
+export type HookSubscription = {
+    subscriptionId: string;
+    orgId: string;
+    agentIds: string[];
+    endpoint: string;
+    signingSecret: string;
+    enabled: boolean;
+    match: HookMatch;
+    health: HookHealth;
+    createdAt: string;
+    updatedAt: string;
+};
+export type HookSubscriptionPublic = Omit<HookSubscription, "signingSecret">;
+export type HookAddress = {
+    objectType: string;
+    contentType: string;
+    recordId: string;
+    revision?: number;
+};
+export type HookDelivery = {
+    deliveryId: string;
+    subscriptionId: string;
+    endpoint: string;
+    address: HookAddress;
+    event: HookEventName;
+    attempt: number;
+    nextAttemptAt: string | null;
+    status: DeliveryStatus;
+    occurredAt: string;
+    scope: MemorixScope;
+    change: {
+        previousRevision: number | null;
+        dataChanged: boolean;
+    };
+    seq: number;
+    createdAt: string;
+    leasedUntil: string | null;
+};
+export type HookDeliveryPublic = {
+    deliveryId: string;
+    subscriptionId: string;
+    address: HookAddress;
+    event: HookEventName;
+    attempt: number;
+    nextAttemptAt: string | null;
+    status: DeliveryStatus;
+};
+export type DeliverySettle = {
+    status: DeliveryStatus;
+    nextAttemptAt: string | null;
+    leasedUntil: string | null;
+    endpoint?: string;
+};
+export type HookStore = {
+    saveSubscription(row: HookSubscription): Promise<void>;
+    findSubscription(subscriptionId: string): Promise<HookSubscription | null>;
+    listSubscriptions(): Promise<HookSubscription[]>;
+    deleteSubscription(subscriptionId: string): Promise<boolean>;
+    insertDeliveries(rows: HookDelivery[]): Promise<void>;
+    listDeliveries(subscriptionId: string, opts: {
+        status?: DeliveryStatus;
+        limit: number;
+    }): Promise<HookDelivery[]>;
+    listActionable(nowIso: string): Promise<HookDelivery[]>;
+    lease(deliveryId: string, leasedUntil: string, attempt: number, nowIso: string): Promise<HookDelivery | null>;
+    settle(deliveryId: string, patch: DeliverySettle): Promise<void>;
+    countInFlight(endpoint: string, nowIso: string): Promise<number>;
+    hasOlderOpen(endpoint: string, recordId: string, seq: number): Promise<boolean>;
+    retargetPending(subscriptionId: string, endpoint: string): Promise<void>;
+    deletePending(subscriptionId: string): Promise<void>;
+    nextSeq(count: number): Promise<number>;
+};
+export declare function toPublicSubscription(row: HookSubscription): HookSubscriptionPublic;
+export declare function toPublicDelivery(row: HookDelivery): HookDeliveryPublic;
+export declare function sameAgentIds(left: string[], right: string[]): boolean;
+//# sourceMappingURL=types.d.ts.map

package/dist/hooks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,eAAO,MAAM,WAAW,4CAA6C,CAAC;AACtE,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,eAAO,MAAM,iBAAiB,yDAA0D,CAAC;AACzF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,SAAS,CAAC;AAE1C,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;AAE7E,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE;QACN,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,cAAc,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAC3E,iBAAiB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACjD,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,cAAc,CACZ,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAC/C,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3B,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACxD,KAAK,CACH,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAChC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,aAAa,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACzC,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,GAAG,sBAAsB,CAGlF;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,GAAG,kBAAkB,CAUtE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAKrE"}

package/dist/hooks/types.js

@@ -0,0 +1,25 @@
+export const HOOK_EVENTS = ["created", "updated", "removed"];
+export const DELIVERY_STATUSES = ["pending", "delivered", "rejected", "failed"];
+export function toPublicSubscription(row) {
+    const { signingSecret: _secret, ...publicRow } = row;
+    return publicRow;
+}
+export function toPublicDelivery(row) {
+    return {
+        deliveryId: row.deliveryId,
+        subscriptionId: row.subscriptionId,
+        address: row.address,
+        event: row.event,
+        attempt: row.attempt,
+        nextAttemptAt: row.nextAttemptAt,
+        status: row.status,
+    };
+}
+export function sameAgentIds(left, right) {
+    if (left.length !== right.length)
+        return false;
+    const a = [...left].sort((x, y) => x.localeCompare(y));
+    const b = [...right].sort((x, y) => x.localeCompare(y));
+    return a.every((id, index) => id === b[index]);
+}
+//# sourceMappingURL=types.js.map

package/dist/hooks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/hooks/types.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAGtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAsGzF,MAAM,UAAU,oBAAoB,CAAC,GAAqB;IACxD,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,GAAG,GAAG,CAAC;IACrD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAiB;IAChD,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAc,EAAE,KAAe;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/hooks/validate.d.ts

@@ -0,0 +1,19 @@
+import { type DeliveryStatus, type HookMatch } from "./types.js";
+export type SubscriptionBody = {
+    endpoint: string;
+    enabled: boolean;
+    signingSecret?: string;
+    match: HookMatch;
+};
+export type SubscriptionPatch = {
+    endpoint?: string;
+    enabled?: boolean;
+    match?: HookMatch;
+};
+export declare function assertSubscriptionId(raw: unknown): string;
+export declare function assertEndpoint(raw: unknown): string;
+export declare function parseSubscriptionPut(body: unknown): SubscriptionBody;
+export declare function parseSubscriptionPatch(body: unknown): SubscriptionPatch;
+export declare function parseDeliveryStatus(raw: unknown): DeliveryStatus | undefined;
+export declare function parseDeliveryLimit(raw: unknown): number;
+//# sourceMappingURL=validate.d.ts.map

package/dist/hooks/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/hooks/validate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkC,KAAK,cAAc,EAAsB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAWrH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,SAAS,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAmBF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAKzD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAanD;AAqED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,CAiBpE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAYvE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,GAAG,SAAS,CAM5E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAOvD"}

package/dist/hooks/validate.js

@@ -0,0 +1,173 @@
+import { CALLER_MAX_LEN, CALLER_PATTERN } from "../caller-identity.js";
+import { ServiceError } from "../errors.js";
+import { DELIVERY_STATUSES, HOOK_EVENTS } from "./types.js";
+const SUBSCRIPTION_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+const TYPE_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+const PATH = /^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/;
+const PUT_KEYS = new Set(["endpoint", "enabled", "signingSecret", "match"]);
+const PATCH_KEYS = new Set(["enabled", "endpoint", "match"]);
+const MATCH_KEYS = new Set(["objectType", "contentType", "discriminator", "events", "ignoreCallers"]);
+const DISC_KEYS = new Set(["path", "equals"]);
+function invalid(message) {
+    throw new ServiceError("HOOK_SUBSCRIPTION_INVALID", message, 400);
+}
+function isPlainObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function rejectUnknown(value, allowed) {
+    for (const key of Object.keys(value)) {
+        if (!allowed.has(key)) {
+            const safe = /password|secret|token|api[_-]?key|credential/i.test(key) ? "not allowed" : key;
+            invalid(`unknown field ${safe}`);
+        }
+    }
+}
+export function assertSubscriptionId(raw) {
+    if (typeof raw !== "string" || !SUBSCRIPTION_ID.test(raw)) {
+        invalid("subscriptionId must be 1-128 letters, digits, dots, underscores, or hyphens");
+    }
+    return raw;
+}
+export function assertEndpoint(raw) {
+    if (typeof raw !== "string" || !raw.trim())
+        invalid("endpoint is required");
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        invalid("endpoint must be an absolute http or https URL");
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        invalid("endpoint must be an absolute http or https URL");
+    }
+    if (!url.hostname)
+        invalid("endpoint must be an absolute http or https URL");
+    return raw;
+}
+function assertTypeId(raw, field) {
+    if (typeof raw !== "string" || !TYPE_ID.test(raw))
+        invalid(`${field} is required`);
+    return raw;
+}
+function assertEvents(raw) {
+    if (!Array.isArray(raw) || raw.length === 0)
+        invalid("match.events must list at least one event");
+    const events = [];
+    for (const item of raw) {
+        if (typeof item !== "string" || !HOOK_EVENTS.includes(item)) {
+            invalid("match.events must be a subset of created, updated, removed");
+        }
+        if (events.includes(item))
+            invalid("match.events must not repeat an event");
+        events.push(item);
+    }
+    return events;
+}
+function assertIgnoreCallers(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!Array.isArray(raw))
+        invalid("match.ignoreCallers must be an array of caller ids");
+    const callers = [];
+    for (const item of raw) {
+        if (typeof item !== "string" || item.length > CALLER_MAX_LEN || !CALLER_PATTERN.test(item)) {
+            invalid("match.ignoreCallers entries must be caller ids");
+        }
+        callers.push(item);
+    }
+    return callers;
+}
+function assertMatch(raw) {
+    if (!isPlainObject(raw))
+        invalid("match is required");
+    rejectUnknown(raw, MATCH_KEYS);
+    const objectType = assertTypeId(raw.objectType, "match.objectType");
+    const contentType = assertTypeId(raw.contentType, "match.contentType");
+    const events = assertEvents(raw.events);
+    const ignoreCallers = assertIgnoreCallers(raw.ignoreCallers);
+    let discriminator;
+    if (raw.discriminator !== undefined) {
+        if (!isPlainObject(raw.discriminator))
+            invalid("match.discriminator must be an object");
+        rejectUnknown(raw.discriminator, DISC_KEYS);
+        if (typeof raw.discriminator.path !== "string" || !PATH.test(raw.discriminator.path)) {
+            invalid("match.discriminator.path must be a dotted path");
+        }
+        if (!Object.prototype.hasOwnProperty.call(raw.discriminator, "equals")) {
+            invalid("match.discriminator.equals is required");
+        }
+        discriminator = { path: raw.discriminator.path, equals: raw.discriminator.equals };
+    }
+    return {
+        objectType,
+        contentType,
+        events,
+        ...(discriminator ? { discriminator } : {}),
+        ...(ignoreCallers ? { ignoreCallers } : {}),
+    };
+}
+function assertSecret(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (typeof raw !== "string" || raw.length === 0 || raw.length > 512) {
+        invalid("signing key must be a non-empty string");
+    }
+    return raw;
+}
+export function parseSubscriptionPut(body) {
+    if (!isPlainObject(body))
+        invalid("body must be an object");
+    rejectUnknown(body, PUT_KEYS);
+    const endpoint = assertEndpoint(body.endpoint);
+    const match = assertMatch(body.match);
+    const signingSecret = assertSecret(body.signingSecret);
+    let enabled = true;
+    if (body.enabled !== undefined) {
+        if (typeof body.enabled !== "boolean")
+            invalid("enabled must be a boolean");
+        enabled = body.enabled;
+    }
+    return {
+        endpoint,
+        enabled,
+        match,
+        ...(signingSecret !== undefined ? { signingSecret } : {}),
+    };
+}
+export function parseSubscriptionPatch(body) {
+    if (!isPlainObject(body))
+        invalid("body must be an object");
+    rejectUnknown(body, PATCH_KEYS);
+    if (Object.keys(body).length === 0)
+        invalid("patch body is empty");
+    const patch = {};
+    if (body.endpoint !== undefined)
+        patch.endpoint = assertEndpoint(body.endpoint);
+    if (body.enabled !== undefined) {
+        if (typeof body.enabled !== "boolean")
+            invalid("enabled must be a boolean");
+        patch.enabled = body.enabled;
+    }
+    if (body.match !== undefined)
+        patch.match = assertMatch(body.match);
+    return patch;
+}
+export function parseDeliveryStatus(raw) {
+    if (raw === undefined || raw === "")
+        return undefined;
+    if (typeof raw !== "string" || !DELIVERY_STATUSES.includes(raw)) {
+        invalid("status must be pending, delivered, rejected, or failed");
+    }
+    return raw;
+}
+export function parseDeliveryLimit(raw) {
+    if (raw === undefined || raw === "")
+        return 50;
+    const limit = typeof raw === "number" ? raw : Number(raw);
+    if (!Number.isInteger(limit) || limit < 1 || limit > 200) {
+        invalid("limit must be an integer from 1 to 200");
+    }
+    return limit;
+}
+//# sourceMappingURL=validate.js.map

package/dist/hooks/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/hooks/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAA2D,MAAM,YAAY,CAAC;AAErH,MAAM,eAAe,GAAG,oCAAoC,CAAC;AAC7D,MAAM,OAAO,GAAG,oCAAoC,CAAC;AACrD,MAAM,IAAI,GAAG,qCAAqC,CAAC;AAEnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;AAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;AACtG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAe9C,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,YAAY,CAAC,2BAA2B,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B,EAAE,OAAoB;IACzE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,+CAA+C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;YAC7F,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,6EAA6E,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5E,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,CAAC,gDAAgD,CAAC,CAAC;IAC7E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAY,EAAE,KAAa;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IACnF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAClG,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnF,OAAO,CAAC,4DAA4D,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAqB,CAAC;YAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC7F,MAAM,CAAC,IAAI,CAAC,IAAqB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,oDAAoD,CAAC,CAAC;IACvF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3F,OAAO,CAAC,gDAAgD,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtD,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7D,IAAI,aAAyC,CAAC;IAC9C,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACxF,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACrF,OAAO,CAAC,gDAAgD,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,wCAAwC,CAAC,CAAC;QACpD,CAAC;QACD,aAAa,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,UAAU;QACV,WAAW;QACX,MAAM;QACN,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpE,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC5D,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAC5E,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,CAAC;IACD,OAAO;QACL,QAAQ;QACR,OAAO;QACP,KAAK;QACL,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC5D,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnE,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;QAC5E,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,wDAAwD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACzD,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/hooks/worker.d.ts

@@ -0,0 +1,13 @@
+import { classifyDeliveryResponse } from "./deliver.js";
+import type { HookStore } from "./types.js";
+export type TickHooksOptions = {
+    now?: Date;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+    backoffMs?: (attempt: number) => number;
+    inflightCap?: number;
+    maxAttempts?: number;
+};
+export declare function tickHookStore(store: HookStore, opts?: TickHooksOptions): Promise<void>;
+export { classifyDeliveryResponse };
+//# sourceMappingURL=worker.d.ts.map

package/dist/hooks/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/hooks/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EAOzB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,wBAAsB,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2EhG;AAED,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/dist/hooks/worker.js

@@ -0,0 +1,80 @@
+import { classifyDeliveryResponse, hookBackoffMs, HOOK_INFLIGHT_CAP, HOOK_LEASE_MS, HOOK_MAX_ATTEMPTS, HOOK_TIMEOUT_MS, postDelivery, } from "./deliver.js";
+export async function tickHookStore(store, opts = {}) {
+    const now = opts.now ?? new Date();
+    const nowIso = now.toISOString();
+    const cap = opts.inflightCap ?? HOOK_INFLIGHT_CAP;
+    const maxAttempts = opts.maxAttempts ?? HOOK_MAX_ATTEMPTS;
+    const backoff = opts.backoffMs ?? hookBackoffMs;
+    const due = await store.listActionable(nowIso);
+    const inflight = new Map();
+    const tasks = [];
+    for (const candidate of due) {
+        const subscription = await store.findSubscription(candidate.subscriptionId);
+        if (!subscription) {
+            await store.settle(candidate.deliveryId, { status: "failed", nextAttemptAt: null, leasedUntil: null });
+            continue;
+        }
+        if (!subscription.enabled)
+            continue;
+        const endpoint = subscription.endpoint;
+        if (await store.hasOlderOpen(endpoint, candidate.address.recordId, candidate.seq))
+            continue;
+        if (!inflight.has(endpoint))
+            inflight.set(endpoint, await store.countInFlight(endpoint, nowIso));
+        const used = inflight.get(endpoint) ?? 0;
+        if (used >= cap)
+            continue;
+        const leased = await store.lease(candidate.deliveryId, new Date(now.getTime() + HOOK_LEASE_MS).toISOString(), candidate.attempt + 1, nowIso);
+        if (!leased)
+            continue;
+        inflight.set(endpoint, used + 1);
+        if (leased.endpoint !== endpoint) {
+            await store.settle(leased.deliveryId, {
+                status: "pending",
+                nextAttemptAt: leased.nextAttemptAt,
+                leasedUntil: leased.leasedUntil,
+                endpoint,
+            });
+        }
+        const sending = { ...leased, endpoint };
+        tasks.push((async () => {
+            const outcome = await postDelivery({
+                delivery: sending,
+                endpoint,
+                secret: subscription.signingSecret,
+                fetchImpl: opts.fetchImpl,
+                timeoutMs: opts.timeoutMs ?? HOOK_TIMEOUT_MS,
+                now,
+            });
+            if (outcome === "delivered") {
+                await store.settle(sending.deliveryId, { status: "delivered", nextAttemptAt: null, leasedUntil: null });
+                const current = await store.findSubscription(subscription.subscriptionId);
+                if (current?.health === "failing") {
+                    await store.saveSubscription({ ...current, health: "ok", updatedAt: new Date().toISOString() });
+                }
+                return;
+            }
+            if (outcome === "rejected") {
+                await store.settle(sending.deliveryId, { status: "rejected", nextAttemptAt: null, leasedUntil: null });
+                return;
+            }
+            if (outcome === "failing") {
+                await store.settle(sending.deliveryId, { status: "failed", nextAttemptAt: null, leasedUntil: null });
+                const current = await store.findSubscription(subscription.subscriptionId);
+                if (current) {
+                    await store.saveSubscription({ ...current, health: "failing", updatedAt: new Date().toISOString() });
+                }
+                return;
+            }
+            if (sending.attempt >= maxAttempts) {
+                await store.settle(sending.deliveryId, { status: "failed", nextAttemptAt: null, leasedUntil: null });
+                return;
+            }
+            const nextAttemptAt = new Date(now.getTime() + backoff(sending.attempt)).toISOString();
+            await store.settle(sending.deliveryId, { status: "pending", nextAttemptAt, leasedUntil: null });
+        })());
+    }
+    await Promise.all(tasks);
+}
+export { classifyDeliveryResponse };
+//# sourceMappingURL=worker.js.map

package/dist/hooks/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/hooks/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,YAAY,GACb,MAAM,cAAc,CAAC;AAYtB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAgB,EAAE,OAAyB,EAAE;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,KAAK,GAAyB,EAAE,CAAC;IAEvC,KAAK,MAAM,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,OAAO;YAAE,SAAS;QACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;QACvC,IAAI,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,IAAI,GAAG;YAAE,SAAS;QAC1B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7I,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;gBACpC,MAAM,EAAE,SAAS;gBACjB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,CAAC,KAAK,IAAI,EAAE;YACV,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;gBACjC,QAAQ,EAAE,OAAO;gBACjB,QAAQ;gBACR,MAAM,EAAE,YAAY,CAAC,aAAa;gBAClC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,eAAe;gBAC5C,GAAG;aACJ,CAAC,CAAC;YACH,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxG,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC1E,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAClG,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC3B,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrG,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;gBAC1E,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,KAAK,CAAC,gBAAgB,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACvG,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;gBACnC,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrG,OAAO;YACT,CAAC;YACD,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACvF,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC,CAAC,EAAE,CACL,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/dist/openapi/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Memorix Service API",
-    "version": "3.11.1",
+    "version": "3.12.0",
     "description": "One versioned product API over accepted Memorix packages. Scope: orgId + agentIds[]. Headers x-memorix-org-id and x-memorix-agent-ids (comma-separated). MX-CALLER-01: every /api request requires x-memorix-caller (calling app id). Intelligence never auto-installs. Relationships /links is forbidden. IntegrationsRegistry (Stage −1) and RestrictedStore (FG-A3 dual-mode blob)."
   },
   "servers": [
@@ -46,6 +46,10 @@
       "name": "Jobs",
       "description": "Jobs Manager repeated-work API. P3 reads and P4 writes live."
     },
+    {
+      "name": "Hooks",
+      "description": "Content hooks. A subscription is notified after one address is created, updated, or removed. The callback does not run a skill."
+    },
     {
       "name": "Connectors",
       "description": "Unified connector catalog (registry + builtins + MGC remote hosts)"
@@ -2880,6 +2884,10 @@
                       "$ref": "#/components/schemas/PatchOp"
                     }
                   },
+                  "suppressHooks": {
+                    "type": "boolean",
+                    "description": "When true, this write does not notify content-hook subscriptions. Not stored on the record. For bulk load and migration."
+                  },
                   "address": {
                     "$ref": "#/components/schemas/ContentAddress"
                   },
@@ -14923,6 +14931,106 @@
           }
         }
       }
+    },
+    "/api/hooks/v1/subscriptions": {
+      "get": {
+        "operationId": "hooksListSubscriptions",
+        "tags": ["Hooks"],
+        "summary": "List content-hook subscriptions for this org and agent set",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" }
+        ],
+        "responses": {
+          "200": { "description": "Subscriptions. signingSecret is omitted." }
+        }
+      }
+    },
+    "/api/hooks/v1/subscriptions/{subscriptionId}": {
+      "put": {
+        "operationId": "hooksPutSubscription",
+        "tags": ["Hooks"],
+        "summary": "Create or replace a content-hook subscription",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HookSubscriptionWrite" } } }
+        },
+        "responses": {
+          "200": { "description": "Stored subscription. signingSecret is omitted." },
+          "400": { "description": "HOOK_SUBSCRIPTION_INVALID" },
+          "409": { "description": "subscriptionId belongs to a different agent scope" }
+        }
+      },
+      "get": {
+        "operationId": "hooksGetSubscription",
+        "tags": ["Hooks"],
+        "summary": "Read one content-hook subscription",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Subscription. signingSecret is omitted." },
+          "404": { "description": "HOOK_SUBSCRIPTION_NOT_FOUND" }
+        }
+      },
+      "patch": {
+        "operationId": "hooksPatchSubscription",
+        "tags": ["Hooks"],
+        "summary": "Update enabled, endpoint, or match",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Updated subscription. signingSecret is omitted." },
+          "400": { "description": "HOOK_SUBSCRIPTION_INVALID" },
+          "404": { "description": "HOOK_SUBSCRIPTION_NOT_FOUND" }
+        }
+      },
+      "delete": {
+        "operationId": "hooksDeleteSubscription",
+        "tags": ["Hooks"],
+        "summary": "Remove a subscription and stop pending delivery",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Removed" },
+          "404": { "description": "HOOK_SUBSCRIPTION_NOT_FOUND" }
+        }
+      }
+    },
+    "/api/hooks/v1/subscriptions/{subscriptionId}/deliveries": {
+      "get": {
+        "operationId": "hooksListDeliveries",
+        "tags": ["Hooks"],
+        "summary": "Recent delivery status, newest first",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } },
+          { "name": "status", "in": "query", "schema": { "type": "string", "enum": ["pending", "delivered", "rejected", "failed"] } }
+        ],
+        "responses": {
+          "200": { "description": "Delivery rows. Not stored on the subject record." }
+        }
+      }
     }
   },
   "components": {
@@ -14963,6 +15071,36 @@
       }
     },
     "schemas": {
+      "HookSubscriptionWrite": {
+        "type": "object",
+        "required": ["endpoint", "match"],
+        "additionalProperties": false,
+        "properties": {
+          "endpoint": { "type": "string", "format": "uri" },
+          "enabled": { "type": "boolean" },
+          "signingSecret": { "type": "string", "description": "Required on create. Write-only. A later PUT that omits it keeps the stored secret." },
+          "match": {
+            "type": "object",
+            "required": ["objectType", "contentType", "events"],
+            "additionalProperties": false,
+            "properties": {
+              "objectType": { "type": "string" },
+              "contentType": { "type": "string" },
+              "discriminator": {
+                "type": "object",
+                "required": ["path", "equals"],
+                "additionalProperties": false,
+                "properties": {
+                  "path": { "type": "string" },
+                  "equals": {}
+                }
+              },
+              "events": { "type": "array", "minItems": 1, "items": { "type": "string", "enum": ["created", "updated", "removed"] } },
+              "ignoreCallers": { "type": "array", "items": { "type": "string" } }
+            }
+          }
+        }
+      },
       "MemorixScope": {
         "type": "object",
         "required": [

package/dist/platform.d.ts

@@ -15,6 +15,7 @@ import { ServiceError } from "./errors.js";
 import { type DeliveryArtifactStore, type RawRecordStore, type TargetItemReceiptStore } from "./mgc-landing-stores.js";
 import { type ServiceCatalog } from "./catalog-bridge.js";
 import { type MemorixScope } from "./scope.js";
+import type { HookStore } from "./hooks/types.js";
 import { type IsolationSession } from "./isolation.js";
 import { type MagitPackService } from "./magit/magit-pack-service.js";
 import { type GenericConnectorsConfig } from "./generic-connectors.js";
@@ -182,6 +183,16 @@ export type MemorixPlatform = {
         ownerId?: string;
         invokePipeline?: Parameters<typeof tickContinuousAcquisition>[0]["invokePipeline"];
     }): () => void;
+    /** Content-hook subscriptions and deliveries for one org. */
+    hooksFor(orgId: string): HookStore;
+    /** Deliver pending content hooks. Works with memory stores when Mongo is absent. */
+    startContentHookTicker(opts?: {
+        intervalMs?: number;
+    }): () => void;
+    /** One pass over known orgs. */
+    tickContentHooks(): Promise<void>;
+    /** Resolves when a kick started by a write has finished its HTTP attempts. */
+    whenContentHooksIdle(): Promise<void>;
     /** One-shot tick for tests / Jobs evaluate-now style hosts. */
     tickContinuousAcquisitionForOrg(orgId: string, opts?: {
         ownerId?: string;