@xtandard/webhooks 0.1.0 → 0.1.1

package/dist/{create-fetch-handler-Dlkhustu.d.cts → create-fetch-handler-D9ZRfrY6.d.cts}

@@ -61,8 +61,12 @@ declare const DEFAULT_PORTAL_ACTIONS: readonly WebhooksAction[];
 //#region src/server/create-fetch-handler.d.ts
 /** Options for the panel handler (shared by every framework adapter). */
 interface WebhooksPanelOptions {
-  /** Control-plane store: applications, event types, endpoints, messages, audit. */
-  storage: WebhooksStorage;
+  /**
+   * Control-plane store: applications, event types, endpoints, messages, audit.
+   * Required unless a prebuilt `core` is supplied (which carries its own
+   * storage, and its `queueStorage`, as the source of truth).
+   */
+  storage?: WebhooksStorage;
   /** Store for deliveries, attempts, and the due index. Defaults to `storage`. */
   queueStorage?: WebhooksStorage;
   /** Mount prefix, e.g. `"/webhooks"`. Default `""` (root). */
@@ -159,4 +163,4 @@ interface CreateFetchHandlerResult {
 declare function createFetchHandler(options: WebhooksPanelOptions): CreateFetchHandlerResult;
 //#endregion
 export { WebhooksPortalOptions as a, DEFAULT_PORTAL_ACTIONS as i, WebhooksPanelOptions as n, WebhooksCorsOptions as o, createFetchHandler as r, CreateFetchHandlerResult as t };
-//# sourceMappingURL=create-fetch-handler-Dlkhustu.d.cts.map
+//# sourceMappingURL=create-fetch-handler-D9ZRfrY6.d.cts.map

package/dist/{dispatcher-B0xTEHt1.cjs → dispatcher-DOOCJJxM.cjs}

@@ -1,5 +1,5 @@
 const require_keys = require("./keys-FiKpaVHX.cjs");
-const require_core = require("./core-ZGhH6Vs2.cjs");
+const require_core = require("./core-CF8U0hgi.cjs");
 //#region src/dispatcher.ts
 /**
 * The delivery engine. Polls the due index, claims deliveries (lease-based,
@@ -60,7 +60,7 @@ function createDispatcher(core, options = {}) {
 	const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;
 	const autoDisable = merged.autoDisable ?? { failingForDays: 5 };
 	const responseBodyLimit = merged.responseBodyLimit ?? 4096;
-	const userAgent = merged.userAgent ?? `xtandard-webhooks/0.1.0`;
+	const userAgent = merged.userAgent ?? `xtandard-webhooks/0.1.1`;
 	const doFetch = merged.fetch;
 	const now = core.options.now;
 	let timer = null;
@@ -209,4 +209,4 @@ Object.defineProperty(exports, "dispatcher_exports", {
 	}
 });
 
-//# sourceMappingURL=dispatcher-B0xTEHt1.cjs.map
+//# sourceMappingURL=dispatcher-DOOCJJxM.cjs.map

package/dist/{dispatcher-B0xTEHt1.cjs.map → dispatcher-DOOCJJxM.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"dispatcher-B0xTEHt1.cjs","names":["durationToMs","dueKey","deliveryKey","attemptDelivery"],"sources":["../src/dispatcher.ts"],"sourcesContent":["/**\n * The delivery engine. Polls the due index, claims deliveries (lease-based,\n * multi-instance safe when storage supports CAS or the `deliveryQueue`\n * capability), performs the signed HTTP attempts, and drives each delivery's\n * state machine through the retry schedule into success or dead-letter.\n *\n * Runs in-process: the panel starts one by default, a split worker runs one\n * via the CLI (`xtandard-webhooks dispatch`), and tests drive {@link Dispatcher.tick}\n * manually. All timers are `unref()`ed so a dispatcher never keeps a process\n * alive on its own. Semantics are **at-least-once**: a crashed process loses\n * nothing (leases expire, the next tick reclaims); receivers dedupe on\n * `webhook-id`.\n *\n * @module\n */\n\nimport { attemptDelivery, type AttemptOutcome } from \"./deliver.ts\";\nimport type { WebhooksCore } from \"./core.ts\";\nimport { durationToMs } from \"./duration.ts\";\nimport { deliveryKey, dueKey, type DueEntry } from \"./keys.ts\";\nimport type { Delivery, WebhookDuration } from \"./schema.ts\";\nimport { VERSION } from \"./version.ts\";\n\n/** Options for {@link createDispatcher} (also accepted on panels and the core). */\nexport interface DispatcherOptions {\n  /** How often to poll for due deliveries. Default `1000`. */\n  pollIntervalMs?: number;\n  /** Max deliveries claimed per tick. Default `20`. */\n  batchSize?: number;\n  /** Max in-flight HTTP attempts. Default `8`. */\n  concurrency?: number;\n  /** Per-attempt timeout (AbortController). Default `20_000`. */\n  timeoutMs?: number;\n  /** Claim lease duration; an expired lease makes a claim reclaimable. Default `60_000`. */\n  leaseMs?: number;\n  /**\n   * Delay before attempt N+1 after attempt N fails (index 0 = the initial\n   * attempt's delay). Exhausting the schedule dead-letters the delivery.\n   * Default `[\"0s\", \"5s\", \"5m\", \"30m\", \"2h\", \"5h\", \"10h\"]` (Svix-compatible).\n   */\n  retrySchedule?: WebhookDuration[];\n  /**\n   * Auto-disable endpoints whose every attempt has failed for this many\n   * consecutive days. `false` disables the policy. Default `{ failingForDays: 5 }`.\n   */\n  autoDisable?: { failingForDays?: number } | false;\n  /** Cap on stored response-body characters per attempt. Default `4096`. */\n  responseBodyLimit?: number;\n  /** Injectable fetch (tests, instrumentation). Default: global fetch. */\n  fetch?: typeof fetch;\n  /** `user-agent` header. Default `\"xtandard-webhooks/<version>\"`. */\n  userAgent?: string;\n}\n\n/** The delivery engine handle. */\nexport interface Dispatcher {\n  /** Begin polling. Idempotent. */\n  start(): void;\n  /** Stop polling and wait for in-flight attempts to finish. */\n  stop(): Promise<void>;\n  /**\n   * Run one manual pass: claim due deliveries, attempt them, record outcomes.\n   * Returns the number of attempts made — the unit-test surface (tests never\n   * assert on timers).\n   */\n  tick(): Promise<number>;\n  readonly running: boolean;\n}\n\n/** The default retry schedule (Svix-compatible). */\nexport const DEFAULT_RETRY_SCHEDULE: WebhookDuration[] = [\n  \"0s\",\n  \"5s\",\n  \"5m\",\n  \"30m\",\n  \"2h\",\n  \"5h\",\n  \"10h\",\n];\n\n/** Fractional jitter applied to every retry delay (±10%). */\nconst JITTER = 0.1;\n\n/**\n * Create a dispatcher over a core. Not started — call\n * {@link Dispatcher.start}, or drive {@link Dispatcher.tick} manually.\n *\n * @example\n * ```ts\n * import { createWebhooksCore, createDispatcher } from \"@xtandard/webhooks\";\n * import { createMemoryStorage } from \"@xtandard/webhooks/storage/memory\";\n *\n * const core = createWebhooksCore({ storage: createMemoryStorage() });\n * const dispatcher = createDispatcher(core);\n * dispatcher.start();\n * ```\n */\nexport function createDispatcher(core: WebhooksCore, options: DispatcherOptions = {}): Dispatcher {\n  const merged = { ...core.options.dispatcher, ...options };\n  const pollIntervalMs = merged.pollIntervalMs ?? 1000;\n  const batchSize = merged.batchSize ?? 20;\n  const concurrency = merged.concurrency ?? 8;\n  const timeoutMs = merged.timeoutMs ?? 20_000;\n  // The lease must outlast a single attempt, or a slow-but-alive attempt runs\n  // past its lease and a second dispatcher reclaims and re-sends it. Enforce\n  // lease > timeout with headroom for recording the outcome.\n  const configuredLeaseMs = merged.leaseMs ?? 60_000;\n  const leaseMs = Math.max(configuredLeaseMs, timeoutMs + 10_000);\n  const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;\n  const autoDisable = merged.autoDisable ?? { failingForDays: 5 };\n  const responseBodyLimit = merged.responseBodyLimit ?? 4096;\n  const userAgent = merged.userAgent ?? `xtandard-webhooks/${VERSION}`;\n  const doFetch = merged.fetch;\n  const now = core.options.now;\n\n  let timer: ReturnType<typeof setInterval> | null = null;\n  let inFlight: Promise<number> | null = null;\n\n  /** Delay before the next attempt, per schedule position, with ±10% jitter. */\n  function nextDelayMs(attemptsMade: number): number | null {\n    if (attemptsMade >= schedule.length) return null; // exhausted\n    const nominal = durationToMs(schedule[attemptsMade] as WebhookDuration);\n    const jitter = 1 + (Math.random() * 2 - 1) * JITTER;\n    return Math.round(nominal * jitter);\n  }\n\n  async function processClaim(delivery: Delivery): Promise<boolean> {\n    const app = delivery.applicationKey;\n    const trigger = delivery.pendingTrigger ?? \"schedule\";\n\n    const failTerminal = async (error: string, eventType: string): Promise<boolean> => {\n      const outcome: AttemptOutcome = {\n        ok: false,\n        error,\n        durationMs: 0,\n        at: new Date(now()).toISOString(),\n      };\n      await core.recordAttempt({ delivery, outcome, trigger, nextAttemptAt: null, eventType });\n      return true;\n    };\n\n    const message = await core.getMessage(app, delivery.messageId);\n    if (!message) return failTerminal(\"Message no longer exists\", \"unknown\");\n\n    const endpoint = await core.getEndpoint(app, delivery.endpointId);\n    if (!endpoint) return failTerminal(\"Endpoint no longer exists\", message.eventType);\n\n    if (endpoint.disabled) {\n      // Held, not failed: release the claim and re-check after the lease\n      // window. Re-enabling the endpoint resumes delivery automatically.\n      const queue = core.options.queueStorage;\n      const recheckAt = now() + leaseMs;\n      const released: Delivery = {\n        ...delivery,\n        status: \"pending\",\n        nextAttemptAt: new Date(recheckAt).toISOString(),\n        leaseUntil: null,\n        updatedAt: new Date(now()).toISOString(),\n      };\n      // Remove the lease-position due entry the claim created, then park the\n      // delivery at the recheck time.\n      if (delivery.leaseUntil) {\n        await queue.removeItem(dueKey(app, Date.parse(delivery.leaseUntil), delivery.id));\n      }\n      await queue.setItem(deliveryKey(app, delivery.id), released);\n      await queue.setItem<DueEntry>(dueKey(app, recheckAt, delivery.id), {\n        app,\n        deliveryId: delivery.id,\n      });\n      return false; // no attempt made\n    }\n\n    const outcome = await attemptDelivery({\n      endpoint,\n      messageId: delivery.messageId,\n      body: message.envelope,\n      timeoutMs,\n      responseBodyLimit,\n      userAgent,\n      ...(doFetch ? { fetch: doFetch } : {}),\n      nowMs: now(),\n    });\n\n    const attemptsMade = delivery.attemptCount + 1;\n    const delay = outcome.ok ? null : nextDelayMs(attemptsMade);\n    await core.recordAttempt({\n      delivery,\n      outcome,\n      trigger,\n      nextAttemptAt: delay === null ? null : new Date(now() + delay).toISOString(),\n      eventType: message.eventType,\n    });\n    await core.noteEndpointOutcome(app, endpoint.id, outcome.ok, autoDisable);\n    return true;\n  }\n\n  async function runTick(): Promise<number> {\n    const claimed = await core.claimDueDeliveries({ limit: batchSize, leaseMs });\n    if (claimed.length === 0) return 0;\n\n    let attempts = 0;\n    let cursor = 0;\n    const workers = Array.from({ length: Math.min(concurrency, claimed.length) }, async () => {\n      while (cursor < claimed.length) {\n        const delivery = claimed[cursor++] as Delivery;\n        try {\n          if (await processClaim(delivery)) attempts++;\n        } catch (error) {\n          // A storage failure mid-claim: leave the delivery leased; the lease\n          // expiry re-exposes it. Never let one claim kill the tick.\n          // eslint-disable-next-line no-console\n          console.warn(`[@xtandard/webhooks] delivery ${delivery.id} processing failed:`, error);\n        }\n      }\n    });\n    await Promise.all(workers);\n    return attempts;\n  }\n\n  const dispatcher: Dispatcher = {\n    start() {\n      if (timer) return;\n      timer = setInterval(() => {\n        if (inFlight) return; // never overlap ticks\n        inFlight = runTick()\n          .catch((error) => {\n            // eslint-disable-next-line no-console\n            console.warn(\"[@xtandard/webhooks] dispatcher tick failed:\", error);\n            return 0;\n          })\n          .finally(() => {\n            inFlight = null;\n          });\n      }, pollIntervalMs);\n      // Never keep the host process alive just to poll.\n      (timer as unknown as { unref?: () => void }).unref?.();\n    },\n\n    async stop() {\n      if (timer) {\n        clearInterval(timer);\n        timer = null;\n      }\n      if (inFlight) await inFlight;\n    },\n\n    async tick() {\n      // Manual ticks also serialize against the poller.\n      while (inFlight) await inFlight;\n      inFlight = runTick().finally(() => {\n        inFlight = null;\n      });\n      return inFlight;\n    },\n\n    get running() {\n      return timer !== null;\n    },\n  };\n\n  return dispatcher;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAsEA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,SAAS;;;;;;;;;;;;;;;AAgBf,SAAgB,iBAAiB,MAAoB,UAA6B,CAAC,GAAe;CAChG,MAAM,SAAS;EAAE,GAAG,KAAK,QAAQ;EAAY,GAAG;CAAQ;CACxD,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,cAAc,OAAO,eAAe;CAC1C,MAAM,YAAY,OAAO,aAAa;CAItC,MAAM,oBAAoB,OAAO,WAAW;CAC5C,MAAM,UAAU,KAAK,IAAI,mBAAmB,YAAY,GAAM;CAC9D,MAAM,WAAW,OAAO,iBAAiB;CACzC,MAAM,cAAc,OAAO,eAAe,EAAE,gBAAgB,EAAE;CAC9D,MAAM,oBAAoB,OAAO,qBAAqB;CACtD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,UAAU,OAAO;CACvB,MAAM,MAAM,KAAK,QAAQ;CAEzB,IAAI,QAA+C;CACnD,IAAI,WAAmC;;CAGvC,SAAS,YAAY,cAAqC;EACxD,IAAI,gBAAgB,SAAS,QAAQ,OAAO;EAC5C,MAAM,UAAUA,aAAAA,aAAa,SAAS,aAAgC;EACtE,MAAM,SAAS,KAAK,KAAK,OAAO,IAAI,IAAI,KAAK;EAC7C,OAAO,KAAK,MAAM,UAAU,MAAM;CACpC;CAEA,eAAe,aAAa,UAAsC;EAChE,MAAM,MAAM,SAAS;EACrB,MAAM,UAAU,SAAS,kBAAkB;EAE3C,MAAM,eAAe,OAAO,OAAe,cAAwC;GACjF,MAAM,UAA0B;IAC9B,IAAI;IACJ;IACA,YAAY;IACZ,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GAClC;GACA,MAAM,KAAK,cAAc;IAAE;IAAU;IAAS;IAAS,eAAe;IAAM;GAAU,CAAC;GACvF,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,KAAK,WAAW,KAAK,SAAS,SAAS;EAC7D,IAAI,CAAC,SAAS,OAAO,aAAa,4BAA4B,SAAS;EAEvE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,SAAS,UAAU;EAChE,IAAI,CAAC,UAAU,OAAO,aAAa,6BAA6B,QAAQ,SAAS;EAEjF,IAAI,SAAS,UAAU;GAGrB,MAAM,QAAQ,KAAK,QAAQ;GAC3B,MAAM,YAAY,IAAI,IAAI;GAC1B,MAAM,WAAqB;IACzB,GAAG;IACH,QAAQ;IACR,eAAe,IAAI,KAAK,SAAS,EAAE,YAAY;IAC/C,YAAY;IACZ,WAAW,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GACzC;GAGA,IAAI,SAAS,YACX,MAAM,MAAM,WAAWC,aAAAA,OAAO,KAAK,KAAK,MAAM,SAAS,UAAU,GAAG,SAAS,EAAE,CAAC;GAElF,MAAM,MAAM,QAAQC,aAAAA,YAAY,KAAK,SAAS,EAAE,GAAG,QAAQ;GAC3D,MAAM,MAAM,QAAkBD,aAAAA,OAAO,KAAK,WAAW,SAAS,EAAE,GAAG;IACjE;IACA,YAAY,SAAS;GACvB,CAAC;GACD,OAAO;EACT;EAEA,MAAM,UAAU,MAAME,aAAAA,gBAAgB;GACpC;GACA,WAAW,SAAS;GACpB,MAAM,QAAQ;GACd;GACA;GACA;GACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;GACpC,OAAO,IAAI;EACb,CAAC;EAED,MAAM,eAAe,SAAS,eAAe;EAC7C,MAAM,QAAQ,QAAQ,KAAK,OAAO,YAAY,YAAY;EAC1D,MAAM,KAAK,cAAc;GACvB;GACA;GACA;GACA,eAAe,UAAU,OAAO,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE,YAAY;GAC3E,WAAW,QAAQ;EACrB,CAAC;EACD,MAAM,KAAK,oBAAoB,KAAK,SAAS,IAAI,QAAQ,IAAI,WAAW;EACxE,OAAO;CACT;CAEA,eAAe,UAA2B;EACxC,MAAM,UAAU,MAAM,KAAK,mBAAmB;GAAE,OAAO;GAAW;EAAQ,CAAC;EAC3E,IAAI,QAAQ,WAAW,GAAG,OAAO;EAEjC,IAAI,WAAW;EACf,IAAI,SAAS;EACb,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,QAAQ,MAAM,EAAE,GAAG,YAAY;GACxF,OAAO,SAAS,QAAQ,QAAQ;IAC9B,MAAM,WAAW,QAAQ;IACzB,IAAI;KACF,IAAI,MAAM,aAAa,QAAQ,GAAG;IACpC,SAAS,OAAO;KAId,QAAQ,KAAK,iCAAiC,SAAS,GAAG,sBAAsB,KAAK;IACvF;GACF;EACF,CAAC;EACD,MAAM,QAAQ,IAAI,OAAO;EACzB,OAAO;CACT;CA2CA,OAAO;EAxCL,QAAQ;GACN,IAAI,OAAO;GACX,QAAQ,kBAAkB;IACxB,IAAI,UAAU;IACd,WAAW,QAAQ,EAChB,OAAO,UAAU;KAEhB,QAAQ,KAAK,gDAAgD,KAAK;KAClE,OAAO;IACT,CAAC,EACA,cAAc;KACb,WAAW;IACb,CAAC;GACL,GAAG,cAAc;GAEjB,MAA6C,QAAQ;EACvD;EAEA,MAAM,OAAO;GACX,IAAI,OAAO;IACT,cAAc,KAAK;IACnB,QAAQ;GACV;GACA,IAAI,UAAU,MAAM;EACtB;EAEA,MAAM,OAAO;GAEX,OAAO,UAAU,MAAM;GACvB,WAAW,QAAQ,EAAE,cAAc;IACjC,WAAW;GACb,CAAC;GACD,OAAO;EACT;EAEA,IAAI,UAAU;GACZ,OAAO,UAAU;EACnB;CAGc;AAClB"}
+{"version":3,"file":"dispatcher-DOOCJJxM.cjs","names":["durationToMs","dueKey","deliveryKey","attemptDelivery"],"sources":["../src/dispatcher.ts"],"sourcesContent":["/**\n * The delivery engine. Polls the due index, claims deliveries (lease-based,\n * multi-instance safe when storage supports CAS or the `deliveryQueue`\n * capability), performs the signed HTTP attempts, and drives each delivery's\n * state machine through the retry schedule into success or dead-letter.\n *\n * Runs in-process: the panel starts one by default, a split worker runs one\n * via the CLI (`xtandard-webhooks dispatch`), and tests drive {@link Dispatcher.tick}\n * manually. All timers are `unref()`ed so a dispatcher never keeps a process\n * alive on its own. Semantics are **at-least-once**: a crashed process loses\n * nothing (leases expire, the next tick reclaims); receivers dedupe on\n * `webhook-id`.\n *\n * @module\n */\n\nimport { attemptDelivery, type AttemptOutcome } from \"./deliver.ts\";\nimport type { WebhooksCore } from \"./core.ts\";\nimport { durationToMs } from \"./duration.ts\";\nimport { deliveryKey, dueKey, type DueEntry } from \"./keys.ts\";\nimport type { Delivery, WebhookDuration } from \"./schema.ts\";\nimport { VERSION } from \"./version.ts\";\n\n/** Options for {@link createDispatcher} (also accepted on panels and the core). */\nexport interface DispatcherOptions {\n  /** How often to poll for due deliveries. Default `1000`. */\n  pollIntervalMs?: number;\n  /** Max deliveries claimed per tick. Default `20`. */\n  batchSize?: number;\n  /** Max in-flight HTTP attempts. Default `8`. */\n  concurrency?: number;\n  /** Per-attempt timeout (AbortController). Default `20_000`. */\n  timeoutMs?: number;\n  /** Claim lease duration; an expired lease makes a claim reclaimable. Default `60_000`. */\n  leaseMs?: number;\n  /**\n   * Delay before attempt N+1 after attempt N fails (index 0 = the initial\n   * attempt's delay). Exhausting the schedule dead-letters the delivery.\n   * Default `[\"0s\", \"5s\", \"5m\", \"30m\", \"2h\", \"5h\", \"10h\"]` (Svix-compatible).\n   */\n  retrySchedule?: WebhookDuration[];\n  /**\n   * Auto-disable endpoints whose every attempt has failed for this many\n   * consecutive days. `false` disables the policy. Default `{ failingForDays: 5 }`.\n   */\n  autoDisable?: { failingForDays?: number } | false;\n  /** Cap on stored response-body characters per attempt. Default `4096`. */\n  responseBodyLimit?: number;\n  /** Injectable fetch (tests, instrumentation). Default: global fetch. */\n  fetch?: typeof fetch;\n  /** `user-agent` header. Default `\"xtandard-webhooks/<version>\"`. */\n  userAgent?: string;\n}\n\n/** The delivery engine handle. */\nexport interface Dispatcher {\n  /** Begin polling. Idempotent. */\n  start(): void;\n  /** Stop polling and wait for in-flight attempts to finish. */\n  stop(): Promise<void>;\n  /**\n   * Run one manual pass: claim due deliveries, attempt them, record outcomes.\n   * Returns the number of attempts made — the unit-test surface (tests never\n   * assert on timers).\n   */\n  tick(): Promise<number>;\n  readonly running: boolean;\n}\n\n/** The default retry schedule (Svix-compatible). */\nexport const DEFAULT_RETRY_SCHEDULE: WebhookDuration[] = [\n  \"0s\",\n  \"5s\",\n  \"5m\",\n  \"30m\",\n  \"2h\",\n  \"5h\",\n  \"10h\",\n];\n\n/** Fractional jitter applied to every retry delay (±10%). */\nconst JITTER = 0.1;\n\n/**\n * Create a dispatcher over a core. Not started — call\n * {@link Dispatcher.start}, or drive {@link Dispatcher.tick} manually.\n *\n * @example\n * ```ts\n * import { createWebhooksCore, createDispatcher } from \"@xtandard/webhooks\";\n * import { createMemoryStorage } from \"@xtandard/webhooks/storage/memory\";\n *\n * const core = createWebhooksCore({ storage: createMemoryStorage() });\n * const dispatcher = createDispatcher(core);\n * dispatcher.start();\n * ```\n */\nexport function createDispatcher(core: WebhooksCore, options: DispatcherOptions = {}): Dispatcher {\n  const merged = { ...core.options.dispatcher, ...options };\n  const pollIntervalMs = merged.pollIntervalMs ?? 1000;\n  const batchSize = merged.batchSize ?? 20;\n  const concurrency = merged.concurrency ?? 8;\n  const timeoutMs = merged.timeoutMs ?? 20_000;\n  // The lease must outlast a single attempt, or a slow-but-alive attempt runs\n  // past its lease and a second dispatcher reclaims and re-sends it. Enforce\n  // lease > timeout with headroom for recording the outcome.\n  const configuredLeaseMs = merged.leaseMs ?? 60_000;\n  const leaseMs = Math.max(configuredLeaseMs, timeoutMs + 10_000);\n  const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;\n  const autoDisable = merged.autoDisable ?? { failingForDays: 5 };\n  const responseBodyLimit = merged.responseBodyLimit ?? 4096;\n  const userAgent = merged.userAgent ?? `xtandard-webhooks/${VERSION}`;\n  const doFetch = merged.fetch;\n  const now = core.options.now;\n\n  let timer: ReturnType<typeof setInterval> | null = null;\n  let inFlight: Promise<number> | null = null;\n\n  /** Delay before the next attempt, per schedule position, with ±10% jitter. */\n  function nextDelayMs(attemptsMade: number): number | null {\n    if (attemptsMade >= schedule.length) return null; // exhausted\n    const nominal = durationToMs(schedule[attemptsMade] as WebhookDuration);\n    const jitter = 1 + (Math.random() * 2 - 1) * JITTER;\n    return Math.round(nominal * jitter);\n  }\n\n  async function processClaim(delivery: Delivery): Promise<boolean> {\n    const app = delivery.applicationKey;\n    const trigger = delivery.pendingTrigger ?? \"schedule\";\n\n    const failTerminal = async (error: string, eventType: string): Promise<boolean> => {\n      const outcome: AttemptOutcome = {\n        ok: false,\n        error,\n        durationMs: 0,\n        at: new Date(now()).toISOString(),\n      };\n      await core.recordAttempt({ delivery, outcome, trigger, nextAttemptAt: null, eventType });\n      return true;\n    };\n\n    const message = await core.getMessage(app, delivery.messageId);\n    if (!message) return failTerminal(\"Message no longer exists\", \"unknown\");\n\n    const endpoint = await core.getEndpoint(app, delivery.endpointId);\n    if (!endpoint) return failTerminal(\"Endpoint no longer exists\", message.eventType);\n\n    if (endpoint.disabled) {\n      // Held, not failed: release the claim and re-check after the lease\n      // window. Re-enabling the endpoint resumes delivery automatically.\n      const queue = core.options.queueStorage;\n      const recheckAt = now() + leaseMs;\n      const released: Delivery = {\n        ...delivery,\n        status: \"pending\",\n        nextAttemptAt: new Date(recheckAt).toISOString(),\n        leaseUntil: null,\n        updatedAt: new Date(now()).toISOString(),\n      };\n      // Remove the lease-position due entry the claim created, then park the\n      // delivery at the recheck time.\n      if (delivery.leaseUntil) {\n        await queue.removeItem(dueKey(app, Date.parse(delivery.leaseUntil), delivery.id));\n      }\n      await queue.setItem(deliveryKey(app, delivery.id), released);\n      await queue.setItem<DueEntry>(dueKey(app, recheckAt, delivery.id), {\n        app,\n        deliveryId: delivery.id,\n      });\n      return false; // no attempt made\n    }\n\n    const outcome = await attemptDelivery({\n      endpoint,\n      messageId: delivery.messageId,\n      body: message.envelope,\n      timeoutMs,\n      responseBodyLimit,\n      userAgent,\n      ...(doFetch ? { fetch: doFetch } : {}),\n      nowMs: now(),\n    });\n\n    const attemptsMade = delivery.attemptCount + 1;\n    const delay = outcome.ok ? null : nextDelayMs(attemptsMade);\n    await core.recordAttempt({\n      delivery,\n      outcome,\n      trigger,\n      nextAttemptAt: delay === null ? null : new Date(now() + delay).toISOString(),\n      eventType: message.eventType,\n    });\n    await core.noteEndpointOutcome(app, endpoint.id, outcome.ok, autoDisable);\n    return true;\n  }\n\n  async function runTick(): Promise<number> {\n    const claimed = await core.claimDueDeliveries({ limit: batchSize, leaseMs });\n    if (claimed.length === 0) return 0;\n\n    let attempts = 0;\n    let cursor = 0;\n    const workers = Array.from({ length: Math.min(concurrency, claimed.length) }, async () => {\n      while (cursor < claimed.length) {\n        const delivery = claimed[cursor++] as Delivery;\n        try {\n          if (await processClaim(delivery)) attempts++;\n        } catch (error) {\n          // A storage failure mid-claim: leave the delivery leased; the lease\n          // expiry re-exposes it. Never let one claim kill the tick.\n          // eslint-disable-next-line no-console\n          console.warn(`[@xtandard/webhooks] delivery ${delivery.id} processing failed:`, error);\n        }\n      }\n    });\n    await Promise.all(workers);\n    return attempts;\n  }\n\n  const dispatcher: Dispatcher = {\n    start() {\n      if (timer) return;\n      timer = setInterval(() => {\n        if (inFlight) return; // never overlap ticks\n        inFlight = runTick()\n          .catch((error) => {\n            // eslint-disable-next-line no-console\n            console.warn(\"[@xtandard/webhooks] dispatcher tick failed:\", error);\n            return 0;\n          })\n          .finally(() => {\n            inFlight = null;\n          });\n      }, pollIntervalMs);\n      // Never keep the host process alive just to poll.\n      (timer as unknown as { unref?: () => void }).unref?.();\n    },\n\n    async stop() {\n      if (timer) {\n        clearInterval(timer);\n        timer = null;\n      }\n      if (inFlight) await inFlight;\n    },\n\n    async tick() {\n      // Manual ticks also serialize against the poller.\n      while (inFlight) await inFlight;\n      inFlight = runTick().finally(() => {\n        inFlight = null;\n      });\n      return inFlight;\n    },\n\n    get running() {\n      return timer !== null;\n    },\n  };\n\n  return dispatcher;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAsEA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,SAAS;;;;;;;;;;;;;;;AAgBf,SAAgB,iBAAiB,MAAoB,UAA6B,CAAC,GAAe;CAChG,MAAM,SAAS;EAAE,GAAG,KAAK,QAAQ;EAAY,GAAG;CAAQ;CACxD,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,cAAc,OAAO,eAAe;CAC1C,MAAM,YAAY,OAAO,aAAa;CAItC,MAAM,oBAAoB,OAAO,WAAW;CAC5C,MAAM,UAAU,KAAK,IAAI,mBAAmB,YAAY,GAAM;CAC9D,MAAM,WAAW,OAAO,iBAAiB;CACzC,MAAM,cAAc,OAAO,eAAe,EAAE,gBAAgB,EAAE;CAC9D,MAAM,oBAAoB,OAAO,qBAAqB;CACtD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,UAAU,OAAO;CACvB,MAAM,MAAM,KAAK,QAAQ;CAEzB,IAAI,QAA+C;CACnD,IAAI,WAAmC;;CAGvC,SAAS,YAAY,cAAqC;EACxD,IAAI,gBAAgB,SAAS,QAAQ,OAAO;EAC5C,MAAM,UAAUA,aAAAA,aAAa,SAAS,aAAgC;EACtE,MAAM,SAAS,KAAK,KAAK,OAAO,IAAI,IAAI,KAAK;EAC7C,OAAO,KAAK,MAAM,UAAU,MAAM;CACpC;CAEA,eAAe,aAAa,UAAsC;EAChE,MAAM,MAAM,SAAS;EACrB,MAAM,UAAU,SAAS,kBAAkB;EAE3C,MAAM,eAAe,OAAO,OAAe,cAAwC;GACjF,MAAM,UAA0B;IAC9B,IAAI;IACJ;IACA,YAAY;IACZ,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GAClC;GACA,MAAM,KAAK,cAAc;IAAE;IAAU;IAAS;IAAS,eAAe;IAAM;GAAU,CAAC;GACvF,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,KAAK,WAAW,KAAK,SAAS,SAAS;EAC7D,IAAI,CAAC,SAAS,OAAO,aAAa,4BAA4B,SAAS;EAEvE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,SAAS,UAAU;EAChE,IAAI,CAAC,UAAU,OAAO,aAAa,6BAA6B,QAAQ,SAAS;EAEjF,IAAI,SAAS,UAAU;GAGrB,MAAM,QAAQ,KAAK,QAAQ;GAC3B,MAAM,YAAY,IAAI,IAAI;GAC1B,MAAM,WAAqB;IACzB,GAAG;IACH,QAAQ;IACR,eAAe,IAAI,KAAK,SAAS,EAAE,YAAY;IAC/C,YAAY;IACZ,WAAW,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GACzC;GAGA,IAAI,SAAS,YACX,MAAM,MAAM,WAAWC,aAAAA,OAAO,KAAK,KAAK,MAAM,SAAS,UAAU,GAAG,SAAS,EAAE,CAAC;GAElF,MAAM,MAAM,QAAQC,aAAAA,YAAY,KAAK,SAAS,EAAE,GAAG,QAAQ;GAC3D,MAAM,MAAM,QAAkBD,aAAAA,OAAO,KAAK,WAAW,SAAS,EAAE,GAAG;IACjE;IACA,YAAY,SAAS;GACvB,CAAC;GACD,OAAO;EACT;EAEA,MAAM,UAAU,MAAME,aAAAA,gBAAgB;GACpC;GACA,WAAW,SAAS;GACpB,MAAM,QAAQ;GACd;GACA;GACA;GACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;GACpC,OAAO,IAAI;EACb,CAAC;EAED,MAAM,eAAe,SAAS,eAAe;EAC7C,MAAM,QAAQ,QAAQ,KAAK,OAAO,YAAY,YAAY;EAC1D,MAAM,KAAK,cAAc;GACvB;GACA;GACA;GACA,eAAe,UAAU,OAAO,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE,YAAY;GAC3E,WAAW,QAAQ;EACrB,CAAC;EACD,MAAM,KAAK,oBAAoB,KAAK,SAAS,IAAI,QAAQ,IAAI,WAAW;EACxE,OAAO;CACT;CAEA,eAAe,UAA2B;EACxC,MAAM,UAAU,MAAM,KAAK,mBAAmB;GAAE,OAAO;GAAW;EAAQ,CAAC;EAC3E,IAAI,QAAQ,WAAW,GAAG,OAAO;EAEjC,IAAI,WAAW;EACf,IAAI,SAAS;EACb,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,QAAQ,MAAM,EAAE,GAAG,YAAY;GACxF,OAAO,SAAS,QAAQ,QAAQ;IAC9B,MAAM,WAAW,QAAQ;IACzB,IAAI;KACF,IAAI,MAAM,aAAa,QAAQ,GAAG;IACpC,SAAS,OAAO;KAId,QAAQ,KAAK,iCAAiC,SAAS,GAAG,sBAAsB,KAAK;IACvF;GACF;EACF,CAAC;EACD,MAAM,QAAQ,IAAI,OAAO;EACzB,OAAO;CACT;CA2CA,OAAO;EAxCL,QAAQ;GACN,IAAI,OAAO;GACX,QAAQ,kBAAkB;IACxB,IAAI,UAAU;IACd,WAAW,QAAQ,EAChB,OAAO,UAAU;KAEhB,QAAQ,KAAK,gDAAgD,KAAK;KAClE,OAAO;IACT,CAAC,EACA,cAAc;KACb,WAAW;IACb,CAAC;GACL,GAAG,cAAc;GAEjB,MAA6C,QAAQ;EACvD;EAEA,MAAM,OAAO;GACX,IAAI,OAAO;IACT,cAAc,KAAK;IACnB,QAAQ;GACV;GACA,IAAI,UAAU,MAAM;EACtB;EAEA,MAAM,OAAO;GAEX,OAAO,UAAU,MAAM;GACvB,WAAW,QAAQ,EAAE,cAAc;IACjC,WAAW;GACb,CAAC;GACD,OAAO;EACT;EAEA,IAAI,UAAU;GACZ,OAAO,UAAU;EACnB;CAGc;AAClB"}

package/dist/{dispatcher-Coubwrka.mjs → dispatcher-DuBrQL46.mjs}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./chunk-D7D4PA-g.mjs";
-import { A as attemptDelivery, w as durationToMs } from "./core-CMpnmI5Q.mjs";
+import { A as attemptDelivery, w as durationToMs } from "./core-C9mPi4iw.mjs";
 import { m as dueKey, p as deliveryKey } from "./keys-Byyj4quQ.mjs";
 //#region src/dispatcher.ts
 /**
@@ -61,7 +61,7 @@ function createDispatcher(core, options = {}) {
 	const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;
 	const autoDisable = merged.autoDisable ?? { failingForDays: 5 };
 	const responseBodyLimit = merged.responseBodyLimit ?? 4096;
-	const userAgent = merged.userAgent ?? `xtandard-webhooks/0.1.0`;
+	const userAgent = merged.userAgent ?? `xtandard-webhooks/0.1.1`;
 	const doFetch = merged.fetch;
 	const now = core.options.now;
 	let timer = null;
@@ -193,4 +193,4 @@ function createDispatcher(core, options = {}) {
 //#endregion
 export { createDispatcher as n, dispatcher_exports as r, DEFAULT_RETRY_SCHEDULE as t };
 
-//# sourceMappingURL=dispatcher-Coubwrka.mjs.map
+//# sourceMappingURL=dispatcher-DuBrQL46.mjs.map

package/dist/{dispatcher-Coubwrka.mjs.map → dispatcher-DuBrQL46.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"dispatcher-Coubwrka.mjs","names":[],"sources":["../src/dispatcher.ts"],"sourcesContent":["/**\n * The delivery engine. Polls the due index, claims deliveries (lease-based,\n * multi-instance safe when storage supports CAS or the `deliveryQueue`\n * capability), performs the signed HTTP attempts, and drives each delivery's\n * state machine through the retry schedule into success or dead-letter.\n *\n * Runs in-process: the panel starts one by default, a split worker runs one\n * via the CLI (`xtandard-webhooks dispatch`), and tests drive {@link Dispatcher.tick}\n * manually. All timers are `unref()`ed so a dispatcher never keeps a process\n * alive on its own. Semantics are **at-least-once**: a crashed process loses\n * nothing (leases expire, the next tick reclaims); receivers dedupe on\n * `webhook-id`.\n *\n * @module\n */\n\nimport { attemptDelivery, type AttemptOutcome } from \"./deliver.ts\";\nimport type { WebhooksCore } from \"./core.ts\";\nimport { durationToMs } from \"./duration.ts\";\nimport { deliveryKey, dueKey, type DueEntry } from \"./keys.ts\";\nimport type { Delivery, WebhookDuration } from \"./schema.ts\";\nimport { VERSION } from \"./version.ts\";\n\n/** Options for {@link createDispatcher} (also accepted on panels and the core). */\nexport interface DispatcherOptions {\n  /** How often to poll for due deliveries. Default `1000`. */\n  pollIntervalMs?: number;\n  /** Max deliveries claimed per tick. Default `20`. */\n  batchSize?: number;\n  /** Max in-flight HTTP attempts. Default `8`. */\n  concurrency?: number;\n  /** Per-attempt timeout (AbortController). Default `20_000`. */\n  timeoutMs?: number;\n  /** Claim lease duration; an expired lease makes a claim reclaimable. Default `60_000`. */\n  leaseMs?: number;\n  /**\n   * Delay before attempt N+1 after attempt N fails (index 0 = the initial\n   * attempt's delay). Exhausting the schedule dead-letters the delivery.\n   * Default `[\"0s\", \"5s\", \"5m\", \"30m\", \"2h\", \"5h\", \"10h\"]` (Svix-compatible).\n   */\n  retrySchedule?: WebhookDuration[];\n  /**\n   * Auto-disable endpoints whose every attempt has failed for this many\n   * consecutive days. `false` disables the policy. Default `{ failingForDays: 5 }`.\n   */\n  autoDisable?: { failingForDays?: number } | false;\n  /** Cap on stored response-body characters per attempt. Default `4096`. */\n  responseBodyLimit?: number;\n  /** Injectable fetch (tests, instrumentation). Default: global fetch. */\n  fetch?: typeof fetch;\n  /** `user-agent` header. Default `\"xtandard-webhooks/<version>\"`. */\n  userAgent?: string;\n}\n\n/** The delivery engine handle. */\nexport interface Dispatcher {\n  /** Begin polling. Idempotent. */\n  start(): void;\n  /** Stop polling and wait for in-flight attempts to finish. */\n  stop(): Promise<void>;\n  /**\n   * Run one manual pass: claim due deliveries, attempt them, record outcomes.\n   * Returns the number of attempts made — the unit-test surface (tests never\n   * assert on timers).\n   */\n  tick(): Promise<number>;\n  readonly running: boolean;\n}\n\n/** The default retry schedule (Svix-compatible). */\nexport const DEFAULT_RETRY_SCHEDULE: WebhookDuration[] = [\n  \"0s\",\n  \"5s\",\n  \"5m\",\n  \"30m\",\n  \"2h\",\n  \"5h\",\n  \"10h\",\n];\n\n/** Fractional jitter applied to every retry delay (±10%). */\nconst JITTER = 0.1;\n\n/**\n * Create a dispatcher over a core. Not started — call\n * {@link Dispatcher.start}, or drive {@link Dispatcher.tick} manually.\n *\n * @example\n * ```ts\n * import { createWebhooksCore, createDispatcher } from \"@xtandard/webhooks\";\n * import { createMemoryStorage } from \"@xtandard/webhooks/storage/memory\";\n *\n * const core = createWebhooksCore({ storage: createMemoryStorage() });\n * const dispatcher = createDispatcher(core);\n * dispatcher.start();\n * ```\n */\nexport function createDispatcher(core: WebhooksCore, options: DispatcherOptions = {}): Dispatcher {\n  const merged = { ...core.options.dispatcher, ...options };\n  const pollIntervalMs = merged.pollIntervalMs ?? 1000;\n  const batchSize = merged.batchSize ?? 20;\n  const concurrency = merged.concurrency ?? 8;\n  const timeoutMs = merged.timeoutMs ?? 20_000;\n  // The lease must outlast a single attempt, or a slow-but-alive attempt runs\n  // past its lease and a second dispatcher reclaims and re-sends it. Enforce\n  // lease > timeout with headroom for recording the outcome.\n  const configuredLeaseMs = merged.leaseMs ?? 60_000;\n  const leaseMs = Math.max(configuredLeaseMs, timeoutMs + 10_000);\n  const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;\n  const autoDisable = merged.autoDisable ?? { failingForDays: 5 };\n  const responseBodyLimit = merged.responseBodyLimit ?? 4096;\n  const userAgent = merged.userAgent ?? `xtandard-webhooks/${VERSION}`;\n  const doFetch = merged.fetch;\n  const now = core.options.now;\n\n  let timer: ReturnType<typeof setInterval> | null = null;\n  let inFlight: Promise<number> | null = null;\n\n  /** Delay before the next attempt, per schedule position, with ±10% jitter. */\n  function nextDelayMs(attemptsMade: number): number | null {\n    if (attemptsMade >= schedule.length) return null; // exhausted\n    const nominal = durationToMs(schedule[attemptsMade] as WebhookDuration);\n    const jitter = 1 + (Math.random() * 2 - 1) * JITTER;\n    return Math.round(nominal * jitter);\n  }\n\n  async function processClaim(delivery: Delivery): Promise<boolean> {\n    const app = delivery.applicationKey;\n    const trigger = delivery.pendingTrigger ?? \"schedule\";\n\n    const failTerminal = async (error: string, eventType: string): Promise<boolean> => {\n      const outcome: AttemptOutcome = {\n        ok: false,\n        error,\n        durationMs: 0,\n        at: new Date(now()).toISOString(),\n      };\n      await core.recordAttempt({ delivery, outcome, trigger, nextAttemptAt: null, eventType });\n      return true;\n    };\n\n    const message = await core.getMessage(app, delivery.messageId);\n    if (!message) return failTerminal(\"Message no longer exists\", \"unknown\");\n\n    const endpoint = await core.getEndpoint(app, delivery.endpointId);\n    if (!endpoint) return failTerminal(\"Endpoint no longer exists\", message.eventType);\n\n    if (endpoint.disabled) {\n      // Held, not failed: release the claim and re-check after the lease\n      // window. Re-enabling the endpoint resumes delivery automatically.\n      const queue = core.options.queueStorage;\n      const recheckAt = now() + leaseMs;\n      const released: Delivery = {\n        ...delivery,\n        status: \"pending\",\n        nextAttemptAt: new Date(recheckAt).toISOString(),\n        leaseUntil: null,\n        updatedAt: new Date(now()).toISOString(),\n      };\n      // Remove the lease-position due entry the claim created, then park the\n      // delivery at the recheck time.\n      if (delivery.leaseUntil) {\n        await queue.removeItem(dueKey(app, Date.parse(delivery.leaseUntil), delivery.id));\n      }\n      await queue.setItem(deliveryKey(app, delivery.id), released);\n      await queue.setItem<DueEntry>(dueKey(app, recheckAt, delivery.id), {\n        app,\n        deliveryId: delivery.id,\n      });\n      return false; // no attempt made\n    }\n\n    const outcome = await attemptDelivery({\n      endpoint,\n      messageId: delivery.messageId,\n      body: message.envelope,\n      timeoutMs,\n      responseBodyLimit,\n      userAgent,\n      ...(doFetch ? { fetch: doFetch } : {}),\n      nowMs: now(),\n    });\n\n    const attemptsMade = delivery.attemptCount + 1;\n    const delay = outcome.ok ? null : nextDelayMs(attemptsMade);\n    await core.recordAttempt({\n      delivery,\n      outcome,\n      trigger,\n      nextAttemptAt: delay === null ? null : new Date(now() + delay).toISOString(),\n      eventType: message.eventType,\n    });\n    await core.noteEndpointOutcome(app, endpoint.id, outcome.ok, autoDisable);\n    return true;\n  }\n\n  async function runTick(): Promise<number> {\n    const claimed = await core.claimDueDeliveries({ limit: batchSize, leaseMs });\n    if (claimed.length === 0) return 0;\n\n    let attempts = 0;\n    let cursor = 0;\n    const workers = Array.from({ length: Math.min(concurrency, claimed.length) }, async () => {\n      while (cursor < claimed.length) {\n        const delivery = claimed[cursor++] as Delivery;\n        try {\n          if (await processClaim(delivery)) attempts++;\n        } catch (error) {\n          // A storage failure mid-claim: leave the delivery leased; the lease\n          // expiry re-exposes it. Never let one claim kill the tick.\n          // eslint-disable-next-line no-console\n          console.warn(`[@xtandard/webhooks] delivery ${delivery.id} processing failed:`, error);\n        }\n      }\n    });\n    await Promise.all(workers);\n    return attempts;\n  }\n\n  const dispatcher: Dispatcher = {\n    start() {\n      if (timer) return;\n      timer = setInterval(() => {\n        if (inFlight) return; // never overlap ticks\n        inFlight = runTick()\n          .catch((error) => {\n            // eslint-disable-next-line no-console\n            console.warn(\"[@xtandard/webhooks] dispatcher tick failed:\", error);\n            return 0;\n          })\n          .finally(() => {\n            inFlight = null;\n          });\n      }, pollIntervalMs);\n      // Never keep the host process alive just to poll.\n      (timer as unknown as { unref?: () => void }).unref?.();\n    },\n\n    async stop() {\n      if (timer) {\n        clearInterval(timer);\n        timer = null;\n      }\n      if (inFlight) await inFlight;\n    },\n\n    async tick() {\n      // Manual ticks also serialize against the poller.\n      while (inFlight) await inFlight;\n      inFlight = runTick().finally(() => {\n        inFlight = null;\n      });\n      return inFlight;\n    },\n\n    get running() {\n      return timer !== null;\n    },\n  };\n\n  return dispatcher;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAsEA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,SAAS;;;;;;;;;;;;;;;AAgBf,SAAgB,iBAAiB,MAAoB,UAA6B,CAAC,GAAe;CAChG,MAAM,SAAS;EAAE,GAAG,KAAK,QAAQ;EAAY,GAAG;CAAQ;CACxD,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,cAAc,OAAO,eAAe;CAC1C,MAAM,YAAY,OAAO,aAAa;CAItC,MAAM,oBAAoB,OAAO,WAAW;CAC5C,MAAM,UAAU,KAAK,IAAI,mBAAmB,YAAY,GAAM;CAC9D,MAAM,WAAW,OAAO,iBAAiB;CACzC,MAAM,cAAc,OAAO,eAAe,EAAE,gBAAgB,EAAE;CAC9D,MAAM,oBAAoB,OAAO,qBAAqB;CACtD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,UAAU,OAAO;CACvB,MAAM,MAAM,KAAK,QAAQ;CAEzB,IAAI,QAA+C;CACnD,IAAI,WAAmC;;CAGvC,SAAS,YAAY,cAAqC;EACxD,IAAI,gBAAgB,SAAS,QAAQ,OAAO;EAC5C,MAAM,UAAU,aAAa,SAAS,aAAgC;EACtE,MAAM,SAAS,KAAK,KAAK,OAAO,IAAI,IAAI,KAAK;EAC7C,OAAO,KAAK,MAAM,UAAU,MAAM;CACpC;CAEA,eAAe,aAAa,UAAsC;EAChE,MAAM,MAAM,SAAS;EACrB,MAAM,UAAU,SAAS,kBAAkB;EAE3C,MAAM,eAAe,OAAO,OAAe,cAAwC;GACjF,MAAM,UAA0B;IAC9B,IAAI;IACJ;IACA,YAAY;IACZ,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GAClC;GACA,MAAM,KAAK,cAAc;IAAE;IAAU;IAAS;IAAS,eAAe;IAAM;GAAU,CAAC;GACvF,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,KAAK,WAAW,KAAK,SAAS,SAAS;EAC7D,IAAI,CAAC,SAAS,OAAO,aAAa,4BAA4B,SAAS;EAEvE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,SAAS,UAAU;EAChE,IAAI,CAAC,UAAU,OAAO,aAAa,6BAA6B,QAAQ,SAAS;EAEjF,IAAI,SAAS,UAAU;GAGrB,MAAM,QAAQ,KAAK,QAAQ;GAC3B,MAAM,YAAY,IAAI,IAAI;GAC1B,MAAM,WAAqB;IACzB,GAAG;IACH,QAAQ;IACR,eAAe,IAAI,KAAK,SAAS,EAAE,YAAY;IAC/C,YAAY;IACZ,WAAW,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GACzC;GAGA,IAAI,SAAS,YACX,MAAM,MAAM,WAAW,OAAO,KAAK,KAAK,MAAM,SAAS,UAAU,GAAG,SAAS,EAAE,CAAC;GAElF,MAAM,MAAM,QAAQ,YAAY,KAAK,SAAS,EAAE,GAAG,QAAQ;GAC3D,MAAM,MAAM,QAAkB,OAAO,KAAK,WAAW,SAAS,EAAE,GAAG;IACjE;IACA,YAAY,SAAS;GACvB,CAAC;GACD,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,gBAAgB;GACpC;GACA,WAAW,SAAS;GACpB,MAAM,QAAQ;GACd;GACA;GACA;GACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;GACpC,OAAO,IAAI;EACb,CAAC;EAED,MAAM,eAAe,SAAS,eAAe;EAC7C,MAAM,QAAQ,QAAQ,KAAK,OAAO,YAAY,YAAY;EAC1D,MAAM,KAAK,cAAc;GACvB;GACA;GACA;GACA,eAAe,UAAU,OAAO,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE,YAAY;GAC3E,WAAW,QAAQ;EACrB,CAAC;EACD,MAAM,KAAK,oBAAoB,KAAK,SAAS,IAAI,QAAQ,IAAI,WAAW;EACxE,OAAO;CACT;CAEA,eAAe,UAA2B;EACxC,MAAM,UAAU,MAAM,KAAK,mBAAmB;GAAE,OAAO;GAAW;EAAQ,CAAC;EAC3E,IAAI,QAAQ,WAAW,GAAG,OAAO;EAEjC,IAAI,WAAW;EACf,IAAI,SAAS;EACb,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,QAAQ,MAAM,EAAE,GAAG,YAAY;GACxF,OAAO,SAAS,QAAQ,QAAQ;IAC9B,MAAM,WAAW,QAAQ;IACzB,IAAI;KACF,IAAI,MAAM,aAAa,QAAQ,GAAG;IACpC,SAAS,OAAO;KAId,QAAQ,KAAK,iCAAiC,SAAS,GAAG,sBAAsB,KAAK;IACvF;GACF;EACF,CAAC;EACD,MAAM,QAAQ,IAAI,OAAO;EACzB,OAAO;CACT;CA2CA,OAAO;EAxCL,QAAQ;GACN,IAAI,OAAO;GACX,QAAQ,kBAAkB;IACxB,IAAI,UAAU;IACd,WAAW,QAAQ,EAChB,OAAO,UAAU;KAEhB,QAAQ,KAAK,gDAAgD,KAAK;KAClE,OAAO;IACT,CAAC,EACA,cAAc;KACb,WAAW;IACb,CAAC;GACL,GAAG,cAAc;GAEjB,MAA6C,QAAQ;EACvD;EAEA,MAAM,OAAO;GACX,IAAI,OAAO;IACT,cAAc,KAAK;IACnB,QAAQ;GACV;GACA,IAAI,UAAU,MAAM;EACtB;EAEA,MAAM,OAAO;GAEX,OAAO,UAAU,MAAM;GACvB,WAAW,QAAQ,EAAE,cAAc;IACjC,WAAW;GACb,CAAC;GACD,OAAO;EACT;EAEA,IAAI,UAAU;GACZ,OAAO,UAAU;EACnB;CAGc;AAClB"}
+{"version":3,"file":"dispatcher-DuBrQL46.mjs","names":[],"sources":["../src/dispatcher.ts"],"sourcesContent":["/**\n * The delivery engine. Polls the due index, claims deliveries (lease-based,\n * multi-instance safe when storage supports CAS or the `deliveryQueue`\n * capability), performs the signed HTTP attempts, and drives each delivery's\n * state machine through the retry schedule into success or dead-letter.\n *\n * Runs in-process: the panel starts one by default, a split worker runs one\n * via the CLI (`xtandard-webhooks dispatch`), and tests drive {@link Dispatcher.tick}\n * manually. All timers are `unref()`ed so a dispatcher never keeps a process\n * alive on its own. Semantics are **at-least-once**: a crashed process loses\n * nothing (leases expire, the next tick reclaims); receivers dedupe on\n * `webhook-id`.\n *\n * @module\n */\n\nimport { attemptDelivery, type AttemptOutcome } from \"./deliver.ts\";\nimport type { WebhooksCore } from \"./core.ts\";\nimport { durationToMs } from \"./duration.ts\";\nimport { deliveryKey, dueKey, type DueEntry } from \"./keys.ts\";\nimport type { Delivery, WebhookDuration } from \"./schema.ts\";\nimport { VERSION } from \"./version.ts\";\n\n/** Options for {@link createDispatcher} (also accepted on panels and the core). */\nexport interface DispatcherOptions {\n  /** How often to poll for due deliveries. Default `1000`. */\n  pollIntervalMs?: number;\n  /** Max deliveries claimed per tick. Default `20`. */\n  batchSize?: number;\n  /** Max in-flight HTTP attempts. Default `8`. */\n  concurrency?: number;\n  /** Per-attempt timeout (AbortController). Default `20_000`. */\n  timeoutMs?: number;\n  /** Claim lease duration; an expired lease makes a claim reclaimable. Default `60_000`. */\n  leaseMs?: number;\n  /**\n   * Delay before attempt N+1 after attempt N fails (index 0 = the initial\n   * attempt's delay). Exhausting the schedule dead-letters the delivery.\n   * Default `[\"0s\", \"5s\", \"5m\", \"30m\", \"2h\", \"5h\", \"10h\"]` (Svix-compatible).\n   */\n  retrySchedule?: WebhookDuration[];\n  /**\n   * Auto-disable endpoints whose every attempt has failed for this many\n   * consecutive days. `false` disables the policy. Default `{ failingForDays: 5 }`.\n   */\n  autoDisable?: { failingForDays?: number } | false;\n  /** Cap on stored response-body characters per attempt. Default `4096`. */\n  responseBodyLimit?: number;\n  /** Injectable fetch (tests, instrumentation). Default: global fetch. */\n  fetch?: typeof fetch;\n  /** `user-agent` header. Default `\"xtandard-webhooks/<version>\"`. */\n  userAgent?: string;\n}\n\n/** The delivery engine handle. */\nexport interface Dispatcher {\n  /** Begin polling. Idempotent. */\n  start(): void;\n  /** Stop polling and wait for in-flight attempts to finish. */\n  stop(): Promise<void>;\n  /**\n   * Run one manual pass: claim due deliveries, attempt them, record outcomes.\n   * Returns the number of attempts made — the unit-test surface (tests never\n   * assert on timers).\n   */\n  tick(): Promise<number>;\n  readonly running: boolean;\n}\n\n/** The default retry schedule (Svix-compatible). */\nexport const DEFAULT_RETRY_SCHEDULE: WebhookDuration[] = [\n  \"0s\",\n  \"5s\",\n  \"5m\",\n  \"30m\",\n  \"2h\",\n  \"5h\",\n  \"10h\",\n];\n\n/** Fractional jitter applied to every retry delay (±10%). */\nconst JITTER = 0.1;\n\n/**\n * Create a dispatcher over a core. Not started — call\n * {@link Dispatcher.start}, or drive {@link Dispatcher.tick} manually.\n *\n * @example\n * ```ts\n * import { createWebhooksCore, createDispatcher } from \"@xtandard/webhooks\";\n * import { createMemoryStorage } from \"@xtandard/webhooks/storage/memory\";\n *\n * const core = createWebhooksCore({ storage: createMemoryStorage() });\n * const dispatcher = createDispatcher(core);\n * dispatcher.start();\n * ```\n */\nexport function createDispatcher(core: WebhooksCore, options: DispatcherOptions = {}): Dispatcher {\n  const merged = { ...core.options.dispatcher, ...options };\n  const pollIntervalMs = merged.pollIntervalMs ?? 1000;\n  const batchSize = merged.batchSize ?? 20;\n  const concurrency = merged.concurrency ?? 8;\n  const timeoutMs = merged.timeoutMs ?? 20_000;\n  // The lease must outlast a single attempt, or a slow-but-alive attempt runs\n  // past its lease and a second dispatcher reclaims and re-sends it. Enforce\n  // lease > timeout with headroom for recording the outcome.\n  const configuredLeaseMs = merged.leaseMs ?? 60_000;\n  const leaseMs = Math.max(configuredLeaseMs, timeoutMs + 10_000);\n  const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;\n  const autoDisable = merged.autoDisable ?? { failingForDays: 5 };\n  const responseBodyLimit = merged.responseBodyLimit ?? 4096;\n  const userAgent = merged.userAgent ?? `xtandard-webhooks/${VERSION}`;\n  const doFetch = merged.fetch;\n  const now = core.options.now;\n\n  let timer: ReturnType<typeof setInterval> | null = null;\n  let inFlight: Promise<number> | null = null;\n\n  /** Delay before the next attempt, per schedule position, with ±10% jitter. */\n  function nextDelayMs(attemptsMade: number): number | null {\n    if (attemptsMade >= schedule.length) return null; // exhausted\n    const nominal = durationToMs(schedule[attemptsMade] as WebhookDuration);\n    const jitter = 1 + (Math.random() * 2 - 1) * JITTER;\n    return Math.round(nominal * jitter);\n  }\n\n  async function processClaim(delivery: Delivery): Promise<boolean> {\n    const app = delivery.applicationKey;\n    const trigger = delivery.pendingTrigger ?? \"schedule\";\n\n    const failTerminal = async (error: string, eventType: string): Promise<boolean> => {\n      const outcome: AttemptOutcome = {\n        ok: false,\n        error,\n        durationMs: 0,\n        at: new Date(now()).toISOString(),\n      };\n      await core.recordAttempt({ delivery, outcome, trigger, nextAttemptAt: null, eventType });\n      return true;\n    };\n\n    const message = await core.getMessage(app, delivery.messageId);\n    if (!message) return failTerminal(\"Message no longer exists\", \"unknown\");\n\n    const endpoint = await core.getEndpoint(app, delivery.endpointId);\n    if (!endpoint) return failTerminal(\"Endpoint no longer exists\", message.eventType);\n\n    if (endpoint.disabled) {\n      // Held, not failed: release the claim and re-check after the lease\n      // window. Re-enabling the endpoint resumes delivery automatically.\n      const queue = core.options.queueStorage;\n      const recheckAt = now() + leaseMs;\n      const released: Delivery = {\n        ...delivery,\n        status: \"pending\",\n        nextAttemptAt: new Date(recheckAt).toISOString(),\n        leaseUntil: null,\n        updatedAt: new Date(now()).toISOString(),\n      };\n      // Remove the lease-position due entry the claim created, then park the\n      // delivery at the recheck time.\n      if (delivery.leaseUntil) {\n        await queue.removeItem(dueKey(app, Date.parse(delivery.leaseUntil), delivery.id));\n      }\n      await queue.setItem(deliveryKey(app, delivery.id), released);\n      await queue.setItem<DueEntry>(dueKey(app, recheckAt, delivery.id), {\n        app,\n        deliveryId: delivery.id,\n      });\n      return false; // no attempt made\n    }\n\n    const outcome = await attemptDelivery({\n      endpoint,\n      messageId: delivery.messageId,\n      body: message.envelope,\n      timeoutMs,\n      responseBodyLimit,\n      userAgent,\n      ...(doFetch ? { fetch: doFetch } : {}),\n      nowMs: now(),\n    });\n\n    const attemptsMade = delivery.attemptCount + 1;\n    const delay = outcome.ok ? null : nextDelayMs(attemptsMade);\n    await core.recordAttempt({\n      delivery,\n      outcome,\n      trigger,\n      nextAttemptAt: delay === null ? null : new Date(now() + delay).toISOString(),\n      eventType: message.eventType,\n    });\n    await core.noteEndpointOutcome(app, endpoint.id, outcome.ok, autoDisable);\n    return true;\n  }\n\n  async function runTick(): Promise<number> {\n    const claimed = await core.claimDueDeliveries({ limit: batchSize, leaseMs });\n    if (claimed.length === 0) return 0;\n\n    let attempts = 0;\n    let cursor = 0;\n    const workers = Array.from({ length: Math.min(concurrency, claimed.length) }, async () => {\n      while (cursor < claimed.length) {\n        const delivery = claimed[cursor++] as Delivery;\n        try {\n          if (await processClaim(delivery)) attempts++;\n        } catch (error) {\n          // A storage failure mid-claim: leave the delivery leased; the lease\n          // expiry re-exposes it. Never let one claim kill the tick.\n          // eslint-disable-next-line no-console\n          console.warn(`[@xtandard/webhooks] delivery ${delivery.id} processing failed:`, error);\n        }\n      }\n    });\n    await Promise.all(workers);\n    return attempts;\n  }\n\n  const dispatcher: Dispatcher = {\n    start() {\n      if (timer) return;\n      timer = setInterval(() => {\n        if (inFlight) return; // never overlap ticks\n        inFlight = runTick()\n          .catch((error) => {\n            // eslint-disable-next-line no-console\n            console.warn(\"[@xtandard/webhooks] dispatcher tick failed:\", error);\n            return 0;\n          })\n          .finally(() => {\n            inFlight = null;\n          });\n      }, pollIntervalMs);\n      // Never keep the host process alive just to poll.\n      (timer as unknown as { unref?: () => void }).unref?.();\n    },\n\n    async stop() {\n      if (timer) {\n        clearInterval(timer);\n        timer = null;\n      }\n      if (inFlight) await inFlight;\n    },\n\n    async tick() {\n      // Manual ticks also serialize against the poller.\n      while (inFlight) await inFlight;\n      inFlight = runTick().finally(() => {\n        inFlight = null;\n      });\n      return inFlight;\n    },\n\n    get running() {\n      return timer !== null;\n    },\n  };\n\n  return dispatcher;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAsEA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,SAAS;;;;;;;;;;;;;;;AAgBf,SAAgB,iBAAiB,MAAoB,UAA6B,CAAC,GAAe;CAChG,MAAM,SAAS;EAAE,GAAG,KAAK,QAAQ;EAAY,GAAG;CAAQ;CACxD,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,cAAc,OAAO,eAAe;CAC1C,MAAM,YAAY,OAAO,aAAa;CAItC,MAAM,oBAAoB,OAAO,WAAW;CAC5C,MAAM,UAAU,KAAK,IAAI,mBAAmB,YAAY,GAAM;CAC9D,MAAM,WAAW,OAAO,iBAAiB;CACzC,MAAM,cAAc,OAAO,eAAe,EAAE,gBAAgB,EAAE;CAC9D,MAAM,oBAAoB,OAAO,qBAAqB;CACtD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,UAAU,OAAO;CACvB,MAAM,MAAM,KAAK,QAAQ;CAEzB,IAAI,QAA+C;CACnD,IAAI,WAAmC;;CAGvC,SAAS,YAAY,cAAqC;EACxD,IAAI,gBAAgB,SAAS,QAAQ,OAAO;EAC5C,MAAM,UAAU,aAAa,SAAS,aAAgC;EACtE,MAAM,SAAS,KAAK,KAAK,OAAO,IAAI,IAAI,KAAK;EAC7C,OAAO,KAAK,MAAM,UAAU,MAAM;CACpC;CAEA,eAAe,aAAa,UAAsC;EAChE,MAAM,MAAM,SAAS;EACrB,MAAM,UAAU,SAAS,kBAAkB;EAE3C,MAAM,eAAe,OAAO,OAAe,cAAwC;GACjF,MAAM,UAA0B;IAC9B,IAAI;IACJ;IACA,YAAY;IACZ,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GAClC;GACA,MAAM,KAAK,cAAc;IAAE;IAAU;IAAS;IAAS,eAAe;IAAM;GAAU,CAAC;GACvF,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,KAAK,WAAW,KAAK,SAAS,SAAS;EAC7D,IAAI,CAAC,SAAS,OAAO,aAAa,4BAA4B,SAAS;EAEvE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,SAAS,UAAU;EAChE,IAAI,CAAC,UAAU,OAAO,aAAa,6BAA6B,QAAQ,SAAS;EAEjF,IAAI,SAAS,UAAU;GAGrB,MAAM,QAAQ,KAAK,QAAQ;GAC3B,MAAM,YAAY,IAAI,IAAI;GAC1B,MAAM,WAAqB;IACzB,GAAG;IACH,QAAQ;IACR,eAAe,IAAI,KAAK,SAAS,EAAE,YAAY;IAC/C,YAAY;IACZ,WAAW,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GACzC;GAGA,IAAI,SAAS,YACX,MAAM,MAAM,WAAW,OAAO,KAAK,KAAK,MAAM,SAAS,UAAU,GAAG,SAAS,EAAE,CAAC;GAElF,MAAM,MAAM,QAAQ,YAAY,KAAK,SAAS,EAAE,GAAG,QAAQ;GAC3D,MAAM,MAAM,QAAkB,OAAO,KAAK,WAAW,SAAS,EAAE,GAAG;IACjE;IACA,YAAY,SAAS;GACvB,CAAC;GACD,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,gBAAgB;GACpC;GACA,WAAW,SAAS;GACpB,MAAM,QAAQ;GACd;GACA;GACA;GACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;GACpC,OAAO,IAAI;EACb,CAAC;EAED,MAAM,eAAe,SAAS,eAAe;EAC7C,MAAM,QAAQ,QAAQ,KAAK,OAAO,YAAY,YAAY;EAC1D,MAAM,KAAK,cAAc;GACvB;GACA;GACA;GACA,eAAe,UAAU,OAAO,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE,YAAY;GAC3E,WAAW,QAAQ;EACrB,CAAC;EACD,MAAM,KAAK,oBAAoB,KAAK,SAAS,IAAI,QAAQ,IAAI,WAAW;EACxE,OAAO;CACT;CAEA,eAAe,UAA2B;EACxC,MAAM,UAAU,MAAM,KAAK,mBAAmB;GAAE,OAAO;GAAW;EAAQ,CAAC;EAC3E,IAAI,QAAQ,WAAW,GAAG,OAAO;EAEjC,IAAI,WAAW;EACf,IAAI,SAAS;EACb,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,QAAQ,MAAM,EAAE,GAAG,YAAY;GACxF,OAAO,SAAS,QAAQ,QAAQ;IAC9B,MAAM,WAAW,QAAQ;IACzB,IAAI;KACF,IAAI,MAAM,aAAa,QAAQ,GAAG;IACpC,SAAS,OAAO;KAId,QAAQ,KAAK,iCAAiC,SAAS,GAAG,sBAAsB,KAAK;IACvF;GACF;EACF,CAAC;EACD,MAAM,QAAQ,IAAI,OAAO;EACzB,OAAO;CACT;CA2CA,OAAO;EAxCL,QAAQ;GACN,IAAI,OAAO;GACX,QAAQ,kBAAkB;IACxB,IAAI,UAAU;IACd,WAAW,QAAQ,EAChB,OAAO,UAAU;KAEhB,QAAQ,KAAK,gDAAgD,KAAK;KAClE,OAAO;IACT,CAAC,EACA,cAAc;KACb,WAAW;IACb,CAAC;GACL,GAAG,cAAc;GAEjB,MAA6C,QAAQ;EACvD;EAEA,MAAM,OAAO;GACX,IAAI,OAAO;IACT,cAAc,KAAK;IACnB,QAAQ;GACV;GACA,IAAI,UAAU,MAAM;EACtB;EAEA,MAAM,OAAO;GAEX,OAAO,UAAU,MAAM;GACvB,WAAW,QAAQ,EAAE,cAAc;IACjC,WAAW;GACb,CAAC;GACD,OAAO;EACT;EAEA,IAAI,UAAU;GACZ,OAAO,UAAU;EACnB;CAGc;AAClB"}

package/dist/entry-bun.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_create_fetch_handler = require("./create-fetch-handler-CmooujQo.cjs");
+const require_create_fetch_handler = require("./create-fetch-handler-BILaZ2Z7.cjs");
 //#region src/adapters/bun.ts
 /**
 * Bun adapter. The handler is already web-standard, so this is a passthrough you

package/dist/entry-bun.d.cts

@@ -1,4 +1,4 @@
-import { n as WebhooksPanelOptions, t as CreateFetchHandlerResult } from "./create-fetch-handler-Dlkhustu.cjs";
+import { n as WebhooksPanelOptions, t as CreateFetchHandlerResult } from "./create-fetch-handler-D9ZRfrY6.cjs";
 
 //#region src/adapters/bun.d.ts
 /** Create a Bun-ready panel handler (`fetch` + `core` + `dispatcher` + `openapi`). */

package/dist/entry-bun.d.mts

@@ -1,4 +1,4 @@
-import { n as WebhooksPanelOptions, t as CreateFetchHandlerResult } from "./create-fetch-handler-jy3hy5nZ.mjs";
+import { n as WebhooksPanelOptions, t as CreateFetchHandlerResult } from "./create-fetch-handler-BN9vXbgW.mjs";
 
 //#region src/adapters/bun.d.ts
 /** Create a Bun-ready panel handler (`fetch` + `core` + `dispatcher` + `openapi`). */

package/dist/entry-bun.mjs

@@ -1,4 +1,4 @@
-import { t as createFetchHandler } from "./create-fetch-handler-BIdk9P30.mjs";
+import { t as createFetchHandler } from "./create-fetch-handler-D0F3cjoq.mjs";
 //#region src/adapters/bun.ts
 /**
 * Bun adapter. The handler is already web-standard, so this is a passthrough you

package/dist/entry-elysia.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_create_fetch_handler = require("./create-fetch-handler-CmooujQo.cjs");
+const require_create_fetch_handler = require("./create-fetch-handler-BILaZ2Z7.cjs");
 let elysia = require("elysia");
 //#region src/adapters/elysia.ts
 /**

package/dist/entry-elysia.d.cts

@@ -1,4 +1,4 @@
-import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-Dlkhustu.cjs";
+import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-D9ZRfrY6.cjs";
 import { Elysia } from "elysia";
 
 //#region src/adapters/elysia.d.ts

package/dist/entry-elysia.d.mts

@@ -1,4 +1,4 @@
-import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-jy3hy5nZ.mjs";
+import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-BN9vXbgW.mjs";
 import { Elysia } from "elysia";
 
 //#region src/adapters/elysia.d.ts

package/dist/entry-elysia.mjs

@@ -1,4 +1,4 @@
-import { t as createFetchHandler } from "./create-fetch-handler-BIdk9P30.mjs";
+import { t as createFetchHandler } from "./create-fetch-handler-D0F3cjoq.mjs";
 import { Elysia, t } from "elysia";
 //#region src/adapters/elysia.ts
 /**

package/dist/entry-express.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_create_fetch_handler = require("./create-fetch-handler-CmooujQo.cjs");
+const require_create_fetch_handler = require("./create-fetch-handler-BILaZ2Z7.cjs");
 //#region src/adapters/express.ts
 function headersFrom(req) {
 	const headers = new Headers();

package/dist/entry-express.d.cts

@@ -1,4 +1,4 @@
-import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-Dlkhustu.cjs";
+import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-D9ZRfrY6.cjs";
 import { NextFunction, Request, Response } from "express";
 
 //#region src/adapters/express.d.ts

package/dist/entry-express.d.mts

@@ -1,4 +1,4 @@
-import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-jy3hy5nZ.mjs";
+import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-BN9vXbgW.mjs";
 import { NextFunction, Request, Response } from "express";
 
 //#region src/adapters/express.d.ts

package/dist/entry-express.mjs

@@ -1,4 +1,4 @@
-import { t as createFetchHandler } from "./create-fetch-handler-BIdk9P30.mjs";
+import { t as createFetchHandler } from "./create-fetch-handler-D0F3cjoq.mjs";
 //#region src/adapters/express.ts
 function headersFrom(req) {
 	const headers = new Headers();

package/dist/entry-hono.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_create_fetch_handler = require("./create-fetch-handler-CmooujQo.cjs");
+const require_create_fetch_handler = require("./create-fetch-handler-BILaZ2Z7.cjs");
 let hono = require("hono");
 //#region src/adapters/hono.ts
 /**

package/dist/entry-hono.d.cts

@@ -1,4 +1,4 @@
-import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-Dlkhustu.cjs";
+import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-D9ZRfrY6.cjs";
 import { Hono } from "hono";
 
 //#region src/adapters/hono.d.ts

package/dist/entry-hono.d.mts

@@ -1,4 +1,4 @@
-import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-jy3hy5nZ.mjs";
+import { n as WebhooksPanelOptions, r as createFetchHandler } from "./create-fetch-handler-BN9vXbgW.mjs";
 import { Hono } from "hono";
 
 //#region src/adapters/hono.d.ts

package/dist/entry-hono.mjs

@@ -1,4 +1,4 @@
-import { t as createFetchHandler } from "./create-fetch-handler-BIdk9P30.mjs";
+import { t as createFetchHandler } from "./create-fetch-handler-D0F3cjoq.mjs";
 import { Hono } from "hono";
 //#region src/adapters/hono.ts
 /**

package/dist/index.cjs

@@ -1,12 +1,12 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_keys = require("./keys-FiKpaVHX.cjs");
 const require_schema = require("./schema.cjs");
+const require_core = require("./core-CF8U0hgi.cjs");
 const require_signing = require("./signing.cjs");
-const require_core = require("./core-ZGhH6Vs2.cjs");
 const require_contract = require("./contract-Bf1qguwt.cjs");
-const require_dispatcher = require("./dispatcher-B0xTEHt1.cjs");
+const require_dispatcher = require("./dispatcher-DOOCJJxM.cjs");
 const require_contract$1 = require("./contract-B2d5dNU3.cjs");
-const require_create_fetch_handler = require("./create-fetch-handler-CmooujQo.cjs");
+const require_create_fetch_handler = require("./create-fetch-handler-BILaZ2Z7.cjs");
 //#region src/storage/watch.ts
 /**
 * Wrap a storage so it implements {@link WatchableWebhooksStorage} using

package/dist/index.d.cts

@@ -4,7 +4,7 @@ import { a as WatchableWebhooksStorage, c as isCompareAndSwap, d as requirePeer,
 import { a as HookDeniedError, c as WebhooksHooksInput, d as runAfter, f as runBefore, i as BeforeEventType, l as defaultHookErrorReporter, n as AfterEventType, o as HookErrorReporter, r as BeforeEvent, s as WebhooksHooks, t as AfterEvent, u as normalizeHooks } from "./contract-Bnb3fgRJ.cjs";
 import { n as Principal, t as AuthProvider } from "./contract-lETlIuXo.cjs";
 import { a as WebhooksResource, i as WebhooksAction, n as AuthorizeInput, o as isMutatingAction, r as MUTATING_ACTIONS, t as AuthorizationProvider } from "./contract-CiPskNvS.cjs";
-import { a as WebhooksPortalOptions, i as DEFAULT_PORTAL_ACTIONS, n as WebhooksPanelOptions, o as WebhooksCorsOptions, r as createFetchHandler, t as CreateFetchHandlerResult } from "./create-fetch-handler-Dlkhustu.cjs";
+import { a as WebhooksPortalOptions, i as DEFAULT_PORTAL_ACTIONS, n as WebhooksPanelOptions, o as WebhooksCorsOptions, r as createFetchHandler, t as CreateFetchHandlerResult } from "./create-fetch-handler-D9ZRfrY6.cjs";
 import { SECRET_PREFIX, VerifyInput, WebhookVerificationError, generateSecret, sign, signatureHeader, verify } from "./signing.cjs";
 
 //#region \0rolldown/runtime.js
@@ -17,7 +17,7 @@ import { SECRET_PREFIX, VerifyInput, WebhookVerificationError, generateSecret, s
  * @module
  */
 /** The published package version. */
-declare const VERSION = "0.1.0";
+declare const VERSION = "0.1.1";
 declare namespace keys_d_exports {
   export { DueEntry, RESERVED_APPLICATION_KEYS, ROOT, applicationMetaKey, applicationPrefix, applicationsKey, attemptKey, attemptsPrefix, auditLogKey, byEndpointKey, byEndpointPrefix, byMessageKey, byMessagePrefix, deliveriesPrefix, deliveryKey, dueKey, duePrefix, endpointKey, endpointsKey, eventTypeKey, eventTypesKey, globalAuditLogKey, idempotencyKey, lastSegment, messageKey, messagesPrefix, parseDueKey };
 }

package/dist/index.d.mts

@@ -4,7 +4,7 @@ import { a as WatchableWebhooksStorage, c as isCompareAndSwap, d as requirePeer,
 import { a as HookDeniedError, c as WebhooksHooksInput, d as runAfter, f as runBefore, i as BeforeEventType, l as defaultHookErrorReporter, n as AfterEventType, o as HookErrorReporter, r as BeforeEvent, s as WebhooksHooks, t as AfterEvent, u as normalizeHooks } from "./contract-T1kcZNdG.mjs";
 import { n as Principal, t as AuthProvider } from "./contract-lETlIuXo.mjs";
 import { a as WebhooksResource, i as WebhooksAction, n as AuthorizeInput, o as isMutatingAction, r as MUTATING_ACTIONS, t as AuthorizationProvider } from "./contract-C2r2Xzwp.mjs";
-import { a as WebhooksPortalOptions, i as DEFAULT_PORTAL_ACTIONS, n as WebhooksPanelOptions, o as WebhooksCorsOptions, r as createFetchHandler, t as CreateFetchHandlerResult } from "./create-fetch-handler-jy3hy5nZ.mjs";
+import { a as WebhooksPortalOptions, i as DEFAULT_PORTAL_ACTIONS, n as WebhooksPanelOptions, o as WebhooksCorsOptions, r as createFetchHandler, t as CreateFetchHandlerResult } from "./create-fetch-handler-BN9vXbgW.mjs";
 import { SECRET_PREFIX, VerifyInput, WebhookVerificationError, generateSecret, sign, signatureHeader, verify } from "./signing.mjs";
 
 //#region src/version.d.ts
@@ -15,7 +15,7 @@ import { SECRET_PREFIX, VerifyInput, WebhookVerificationError, generateSecret, s
  * @module
  */
 /** The published package version. */
-declare const VERSION = "0.1.0";
+declare const VERSION = "0.1.1";
 declare namespace keys_d_exports {
   export { DueEntry, RESERVED_APPLICATION_KEYS, ROOT, applicationMetaKey, applicationPrefix, applicationsKey, attemptKey, attemptsPrefix, auditLogKey, byEndpointKey, byEndpointPrefix, byMessageKey, byMessagePrefix, deliveriesPrefix, deliveryKey, dueKey, duePrefix, endpointKey, endpointsKey, eventTypeKey, eventTypesKey, globalAuditLogKey, idempotencyKey, lastSegment, messageKey, messagesPrefix, parseDueKey };
 }

package/dist/index.mjs

@@ -1,11 +1,11 @@
 import { SCHEMA_VERSION, isTerminalDeliveryStatus } from "./schema.mjs";
+import { A as attemptDelivery, C as newId, D as DEFAULT_ATTEMPT_TIMEOUT_MS, E as emitDelivery, O as DEFAULT_RESPONSE_BODY_LIMIT, T as parseDurationList, _ as normalizeHooks, a as ReadonlyError, b as VERSION, c as RESERVED_HEADERS, d as validateApplication, f as validateEndpoint, g as defaultHookErrorReporter, h as HookDeniedError, i as PayloadTooLargeError, j as buildSignedRequest, k as activeSecrets, l as ValidationError, m as validateEventType, n as IdempotencyConflictError, o as createWebhooksCore, p as validateEndpointUrl, r as NotFoundError, s as KEY_REGEX, t as ConflictError, u as assertValid, v as runAfter, w as durationToMs, x as idPattern, y as runBefore } from "./core-C9mPi4iw.mjs";
 import { SECRET_PREFIX, WebhookVerificationError, generateSecret, sign, signatureHeader, verify } from "./signing.mjs";
-import { A as attemptDelivery, C as newId, D as DEFAULT_ATTEMPT_TIMEOUT_MS, E as emitDelivery, O as DEFAULT_RESPONSE_BODY_LIMIT, T as parseDurationList, _ as normalizeHooks, a as ReadonlyError, b as VERSION, c as RESERVED_HEADERS, d as validateApplication, f as validateEndpoint, g as defaultHookErrorReporter, h as HookDeniedError, i as PayloadTooLargeError, j as buildSignedRequest, k as activeSecrets, l as ValidationError, m as validateEventType, n as IdempotencyConflictError, o as createWebhooksCore, p as validateEndpointUrl, r as NotFoundError, s as KEY_REGEX, t as ConflictError, u as assertValid, v as runAfter, w as durationToMs, x as idPattern, y as runBefore } from "./core-CMpnmI5Q.mjs";
 import { x as keys_exports } from "./keys-Byyj4quQ.mjs";
 import { a as requirePeer, i as isWatchable, n as isCompareAndSwap, r as isTransactional, t as hasDeliveryQueue } from "./contract-BEhDcd_5.mjs";
-import { n as createDispatcher, t as DEFAULT_RETRY_SCHEDULE } from "./dispatcher-Coubwrka.mjs";
+import { n as createDispatcher, t as DEFAULT_RETRY_SCHEDULE } from "./dispatcher-DuBrQL46.mjs";
 import { n as isMutatingAction, t as MUTATING_ACTIONS } from "./contract-9XpcwcCn.mjs";
-import { a as PORTAL_TOKEN_PREFIX, c as verifyPortalToken, i as buildOpenApiDocument, o as PortalTokenError, r as DEFAULT_PORTAL_ACTIONS, s as createPortalToken, t as createFetchHandler } from "./create-fetch-handler-BIdk9P30.mjs";
+import { a as PORTAL_TOKEN_PREFIX, c as verifyPortalToken, i as buildOpenApiDocument, o as PortalTokenError, r as DEFAULT_PORTAL_ACTIONS, s as createPortalToken, t as createFetchHandler } from "./create-fetch-handler-D0F3cjoq.mjs";
 //#region src/storage/watch.ts
 /**
 * Wrap a storage so it implements {@link WatchableWebhooksStorage} using

package/dist/testing.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_core = require("./core-CF8U0hgi.cjs");
 const require_signing = require("./signing.cjs");
-const require_core = require("./core-ZGhH6Vs2.cjs");
-const require_dispatcher = require("./dispatcher-B0xTEHt1.cjs");
+const require_dispatcher = require("./dispatcher-DOOCJJxM.cjs");
 const require_memory = require("./memory-8Ef-PL5a.cjs");
 let node_http = require("node:http");
 //#region src/testing.ts

package/dist/testing.mjs

@@ -1,6 +1,6 @@
+import { o as createWebhooksCore } from "./core-C9mPi4iw.mjs";
 import { verify } from "./signing.mjs";
-import { o as createWebhooksCore } from "./core-CMpnmI5Q.mjs";
-import { n as createDispatcher } from "./dispatcher-Coubwrka.mjs";
+import { n as createDispatcher } from "./dispatcher-DuBrQL46.mjs";
 import { t as createMemoryStorage } from "./memory-BMsSSwqn.mjs";
 import { createServer } from "node:http";
 //#region src/testing.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xtandard/webhooks",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Self-hosted, embeddable, Standard Webhooks-compliant outbound webhook control plane with pluggable storage, an in-process delivery engine, and an embeddable consumer portal.",
   "keywords": [
     "bun",