@xtandard/webhooks 0.1.0

package/dist/dispatcher-B0xTEHt1.cjs

@@ -0,0 +1,212 @@
+const require_keys = require("./keys-FiKpaVHX.cjs");
+const require_core = require("./core-ZGhH6Vs2.cjs");
+//#region src/dispatcher.ts
+/**
+* The delivery engine. Polls the due index, claims deliveries (lease-based,
+* multi-instance safe when storage supports CAS or the `deliveryQueue`
+* capability), performs the signed HTTP attempts, and drives each delivery's
+* state machine through the retry schedule into success or dead-letter.
+*
+* Runs in-process: the panel starts one by default, a split worker runs one
+* via the CLI (`xtandard-webhooks dispatch`), and tests drive {@link Dispatcher.tick}
+* manually. All timers are `unref()`ed so a dispatcher never keeps a process
+* alive on its own. Semantics are **at-least-once**: a crashed process loses
+* nothing (leases expire, the next tick reclaims); receivers dedupe on
+* `webhook-id`.
+*
+* @module
+*/
+var dispatcher_exports = /* @__PURE__ */ require_keys.__exportAll({
+	DEFAULT_RETRY_SCHEDULE: () => DEFAULT_RETRY_SCHEDULE,
+	createDispatcher: () => createDispatcher
+});
+/** The default retry schedule (Svix-compatible). */
+const DEFAULT_RETRY_SCHEDULE = [
+	"0s",
+	"5s",
+	"5m",
+	"30m",
+	"2h",
+	"5h",
+	"10h"
+];
+/** Fractional jitter applied to every retry delay (±10%). */
+const JITTER = .1;
+/**
+* Create a dispatcher over a core. Not started — call
+* {@link Dispatcher.start}, or drive {@link Dispatcher.tick} manually.
+*
+* @example
+* ```ts
+* import { createWebhooksCore, createDispatcher } from "@xtandard/webhooks";
+* import { createMemoryStorage } from "@xtandard/webhooks/storage/memory";
+*
+* const core = createWebhooksCore({ storage: createMemoryStorage() });
+* const dispatcher = createDispatcher(core);
+* dispatcher.start();
+* ```
+*/
+function createDispatcher(core, options = {}) {
+	const merged = {
+		...core.options.dispatcher,
+		...options
+	};
+	const pollIntervalMs = merged.pollIntervalMs ?? 1e3;
+	const batchSize = merged.batchSize ?? 20;
+	const concurrency = merged.concurrency ?? 8;
+	const timeoutMs = merged.timeoutMs ?? 2e4;
+	const configuredLeaseMs = merged.leaseMs ?? 6e4;
+	const leaseMs = Math.max(configuredLeaseMs, timeoutMs + 1e4);
+	const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;
+	const autoDisable = merged.autoDisable ?? { failingForDays: 5 };
+	const responseBodyLimit = merged.responseBodyLimit ?? 4096;
+	const userAgent = merged.userAgent ?? `xtandard-webhooks/0.1.0`;
+	const doFetch = merged.fetch;
+	const now = core.options.now;
+	let timer = null;
+	let inFlight = null;
+	/** Delay before the next attempt, per schedule position, with ±10% jitter. */
+	function nextDelayMs(attemptsMade) {
+		if (attemptsMade >= schedule.length) return null;
+		const nominal = require_core.durationToMs(schedule[attemptsMade]);
+		const jitter = 1 + (Math.random() * 2 - 1) * JITTER;
+		return Math.round(nominal * jitter);
+	}
+	async function processClaim(delivery) {
+		const app = delivery.applicationKey;
+		const trigger = delivery.pendingTrigger ?? "schedule";
+		const failTerminal = async (error, eventType) => {
+			const outcome = {
+				ok: false,
+				error,
+				durationMs: 0,
+				at: new Date(now()).toISOString()
+			};
+			await core.recordAttempt({
+				delivery,
+				outcome,
+				trigger,
+				nextAttemptAt: null,
+				eventType
+			});
+			return true;
+		};
+		const message = await core.getMessage(app, delivery.messageId);
+		if (!message) return failTerminal("Message no longer exists", "unknown");
+		const endpoint = await core.getEndpoint(app, delivery.endpointId);
+		if (!endpoint) return failTerminal("Endpoint no longer exists", message.eventType);
+		if (endpoint.disabled) {
+			const queue = core.options.queueStorage;
+			const recheckAt = now() + leaseMs;
+			const released = {
+				...delivery,
+				status: "pending",
+				nextAttemptAt: new Date(recheckAt).toISOString(),
+				leaseUntil: null,
+				updatedAt: new Date(now()).toISOString()
+			};
+			if (delivery.leaseUntil) await queue.removeItem(require_keys.dueKey(app, Date.parse(delivery.leaseUntil), delivery.id));
+			await queue.setItem(require_keys.deliveryKey(app, delivery.id), released);
+			await queue.setItem(require_keys.dueKey(app, recheckAt, delivery.id), {
+				app,
+				deliveryId: delivery.id
+			});
+			return false;
+		}
+		const outcome = await require_core.attemptDelivery({
+			endpoint,
+			messageId: delivery.messageId,
+			body: message.envelope,
+			timeoutMs,
+			responseBodyLimit,
+			userAgent,
+			...doFetch ? { fetch: doFetch } : {},
+			nowMs: now()
+		});
+		const attemptsMade = delivery.attemptCount + 1;
+		const delay = outcome.ok ? null : nextDelayMs(attemptsMade);
+		await core.recordAttempt({
+			delivery,
+			outcome,
+			trigger,
+			nextAttemptAt: delay === null ? null : new Date(now() + delay).toISOString(),
+			eventType: message.eventType
+		});
+		await core.noteEndpointOutcome(app, endpoint.id, outcome.ok, autoDisable);
+		return true;
+	}
+	async function runTick() {
+		const claimed = await core.claimDueDeliveries({
+			limit: batchSize,
+			leaseMs
+		});
+		if (claimed.length === 0) return 0;
+		let attempts = 0;
+		let cursor = 0;
+		const workers = Array.from({ length: Math.min(concurrency, claimed.length) }, async () => {
+			while (cursor < claimed.length) {
+				const delivery = claimed[cursor++];
+				try {
+					if (await processClaim(delivery)) attempts++;
+				} catch (error) {
+					console.warn(`[@xtandard/webhooks] delivery ${delivery.id} processing failed:`, error);
+				}
+			}
+		});
+		await Promise.all(workers);
+		return attempts;
+	}
+	return {
+		start() {
+			if (timer) return;
+			timer = setInterval(() => {
+				if (inFlight) return;
+				inFlight = runTick().catch((error) => {
+					console.warn("[@xtandard/webhooks] dispatcher tick failed:", error);
+					return 0;
+				}).finally(() => {
+					inFlight = null;
+				});
+			}, pollIntervalMs);
+			timer.unref?.();
+		},
+		async stop() {
+			if (timer) {
+				clearInterval(timer);
+				timer = null;
+			}
+			if (inFlight) await inFlight;
+		},
+		async tick() {
+			while (inFlight) await inFlight;
+			inFlight = runTick().finally(() => {
+				inFlight = null;
+			});
+			return inFlight;
+		},
+		get running() {
+			return timer !== null;
+		}
+	};
+}
+//#endregion
+Object.defineProperty(exports, "DEFAULT_RETRY_SCHEDULE", {
+	enumerable: true,
+	get: function() {
+		return DEFAULT_RETRY_SCHEDULE;
+	}
+});
+Object.defineProperty(exports, "createDispatcher", {
+	enumerable: true,
+	get: function() {
+		return createDispatcher;
+	}
+});
+Object.defineProperty(exports, "dispatcher_exports", {
+	enumerable: true,
+	get: function() {
+		return dispatcher_exports;
+	}
+});
+
+//# sourceMappingURL=dispatcher-B0xTEHt1.cjs.map

package/dist/dispatcher-B0xTEHt1.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher-B0xTEHt1.cjs","names":["durationToMs","dueKey","deliveryKey","attemptDelivery"],"sources":["../src/dispatcher.ts"],"sourcesContent":["/**\n * The delivery engine. Polls the due index, claims deliveries (lease-based,\n * multi-instance safe when storage supports CAS or the `deliveryQueue`\n * capability), performs the signed HTTP attempts, and drives each delivery's\n * state machine through the retry schedule into success or dead-letter.\n *\n * Runs in-process: the panel starts one by default, a split worker runs one\n * via the CLI (`xtandard-webhooks dispatch`), and tests drive {@link Dispatcher.tick}\n * manually. All timers are `unref()`ed so a dispatcher never keeps a process\n * alive on its own. Semantics are **at-least-once**: a crashed process loses\n * nothing (leases expire, the next tick reclaims); receivers dedupe on\n * `webhook-id`.\n *\n * @module\n */\n\nimport { attemptDelivery, type AttemptOutcome } from \"./deliver.ts\";\nimport type { WebhooksCore } from \"./core.ts\";\nimport { durationToMs } from \"./duration.ts\";\nimport { deliveryKey, dueKey, type DueEntry } from \"./keys.ts\";\nimport type { Delivery, WebhookDuration } from \"./schema.ts\";\nimport { VERSION } from \"./version.ts\";\n\n/** Options for {@link createDispatcher} (also accepted on panels and the core). */\nexport interface DispatcherOptions {\n  /** How often to poll for due deliveries. Default `1000`. */\n  pollIntervalMs?: number;\n  /** Max deliveries claimed per tick. Default `20`. */\n  batchSize?: number;\n  /** Max in-flight HTTP attempts. Default `8`. */\n  concurrency?: number;\n  /** Per-attempt timeout (AbortController). Default `20_000`. */\n  timeoutMs?: number;\n  /** Claim lease duration; an expired lease makes a claim reclaimable. Default `60_000`. */\n  leaseMs?: number;\n  /**\n   * Delay before attempt N+1 after attempt N fails (index 0 = the initial\n   * attempt's delay). Exhausting the schedule dead-letters the delivery.\n   * Default `[\"0s\", \"5s\", \"5m\", \"30m\", \"2h\", \"5h\", \"10h\"]` (Svix-compatible).\n   */\n  retrySchedule?: WebhookDuration[];\n  /**\n   * Auto-disable endpoints whose every attempt has failed for this many\n   * consecutive days. `false` disables the policy. Default `{ failingForDays: 5 }`.\n   */\n  autoDisable?: { failingForDays?: number } | false;\n  /** Cap on stored response-body characters per attempt. Default `4096`. */\n  responseBodyLimit?: number;\n  /** Injectable fetch (tests, instrumentation). Default: global fetch. */\n  fetch?: typeof fetch;\n  /** `user-agent` header. Default `\"xtandard-webhooks/<version>\"`. */\n  userAgent?: string;\n}\n\n/** The delivery engine handle. */\nexport interface Dispatcher {\n  /** Begin polling. Idempotent. */\n  start(): void;\n  /** Stop polling and wait for in-flight attempts to finish. */\n  stop(): Promise<void>;\n  /**\n   * Run one manual pass: claim due deliveries, attempt them, record outcomes.\n   * Returns the number of attempts made — the unit-test surface (tests never\n   * assert on timers).\n   */\n  tick(): Promise<number>;\n  readonly running: boolean;\n}\n\n/** The default retry schedule (Svix-compatible). */\nexport const DEFAULT_RETRY_SCHEDULE: WebhookDuration[] = [\n  \"0s\",\n  \"5s\",\n  \"5m\",\n  \"30m\",\n  \"2h\",\n  \"5h\",\n  \"10h\",\n];\n\n/** Fractional jitter applied to every retry delay (±10%). */\nconst JITTER = 0.1;\n\n/**\n * Create a dispatcher over a core. Not started — call\n * {@link Dispatcher.start}, or drive {@link Dispatcher.tick} manually.\n *\n * @example\n * ```ts\n * import { createWebhooksCore, createDispatcher } from \"@xtandard/webhooks\";\n * import { createMemoryStorage } from \"@xtandard/webhooks/storage/memory\";\n *\n * const core = createWebhooksCore({ storage: createMemoryStorage() });\n * const dispatcher = createDispatcher(core);\n * dispatcher.start();\n * ```\n */\nexport function createDispatcher(core: WebhooksCore, options: DispatcherOptions = {}): Dispatcher {\n  const merged = { ...core.options.dispatcher, ...options };\n  const pollIntervalMs = merged.pollIntervalMs ?? 1000;\n  const batchSize = merged.batchSize ?? 20;\n  const concurrency = merged.concurrency ?? 8;\n  const timeoutMs = merged.timeoutMs ?? 20_000;\n  // The lease must outlast a single attempt, or a slow-but-alive attempt runs\n  // past its lease and a second dispatcher reclaims and re-sends it. Enforce\n  // lease > timeout with headroom for recording the outcome.\n  const configuredLeaseMs = merged.leaseMs ?? 60_000;\n  const leaseMs = Math.max(configuredLeaseMs, timeoutMs + 10_000);\n  const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;\n  const autoDisable = merged.autoDisable ?? { failingForDays: 5 };\n  const responseBodyLimit = merged.responseBodyLimit ?? 4096;\n  const userAgent = merged.userAgent ?? `xtandard-webhooks/${VERSION}`;\n  const doFetch = merged.fetch;\n  const now = core.options.now;\n\n  let timer: ReturnType<typeof setInterval> | null = null;\n  let inFlight: Promise<number> | null = null;\n\n  /** Delay before the next attempt, per schedule position, with ±10% jitter. */\n  function nextDelayMs(attemptsMade: number): number | null {\n    if (attemptsMade >= schedule.length) return null; // exhausted\n    const nominal = durationToMs(schedule[attemptsMade] as WebhookDuration);\n    const jitter = 1 + (Math.random() * 2 - 1) * JITTER;\n    return Math.round(nominal * jitter);\n  }\n\n  async function processClaim(delivery: Delivery): Promise<boolean> {\n    const app = delivery.applicationKey;\n    const trigger = delivery.pendingTrigger ?? \"schedule\";\n\n    const failTerminal = async (error: string, eventType: string): Promise<boolean> => {\n      const outcome: AttemptOutcome = {\n        ok: false,\n        error,\n        durationMs: 0,\n        at: new Date(now()).toISOString(),\n      };\n      await core.recordAttempt({ delivery, outcome, trigger, nextAttemptAt: null, eventType });\n      return true;\n    };\n\n    const message = await core.getMessage(app, delivery.messageId);\n    if (!message) return failTerminal(\"Message no longer exists\", \"unknown\");\n\n    const endpoint = await core.getEndpoint(app, delivery.endpointId);\n    if (!endpoint) return failTerminal(\"Endpoint no longer exists\", message.eventType);\n\n    if (endpoint.disabled) {\n      // Held, not failed: release the claim and re-check after the lease\n      // window. Re-enabling the endpoint resumes delivery automatically.\n      const queue = core.options.queueStorage;\n      const recheckAt = now() + leaseMs;\n      const released: Delivery = {\n        ...delivery,\n        status: \"pending\",\n        nextAttemptAt: new Date(recheckAt).toISOString(),\n        leaseUntil: null,\n        updatedAt: new Date(now()).toISOString(),\n      };\n      // Remove the lease-position due entry the claim created, then park the\n      // delivery at the recheck time.\n      if (delivery.leaseUntil) {\n        await queue.removeItem(dueKey(app, Date.parse(delivery.leaseUntil), delivery.id));\n      }\n      await queue.setItem(deliveryKey(app, delivery.id), released);\n      await queue.setItem<DueEntry>(dueKey(app, recheckAt, delivery.id), {\n        app,\n        deliveryId: delivery.id,\n      });\n      return false; // no attempt made\n    }\n\n    const outcome = await attemptDelivery({\n      endpoint,\n      messageId: delivery.messageId,\n      body: message.envelope,\n      timeoutMs,\n      responseBodyLimit,\n      userAgent,\n      ...(doFetch ? { fetch: doFetch } : {}),\n      nowMs: now(),\n    });\n\n    const attemptsMade = delivery.attemptCount + 1;\n    const delay = outcome.ok ? null : nextDelayMs(attemptsMade);\n    await core.recordAttempt({\n      delivery,\n      outcome,\n      trigger,\n      nextAttemptAt: delay === null ? null : new Date(now() + delay).toISOString(),\n      eventType: message.eventType,\n    });\n    await core.noteEndpointOutcome(app, endpoint.id, outcome.ok, autoDisable);\n    return true;\n  }\n\n  async function runTick(): Promise<number> {\n    const claimed = await core.claimDueDeliveries({ limit: batchSize, leaseMs });\n    if (claimed.length === 0) return 0;\n\n    let attempts = 0;\n    let cursor = 0;\n    const workers = Array.from({ length: Math.min(concurrency, claimed.length) }, async () => {\n      while (cursor < claimed.length) {\n        const delivery = claimed[cursor++] as Delivery;\n        try {\n          if (await processClaim(delivery)) attempts++;\n        } catch (error) {\n          // A storage failure mid-claim: leave the delivery leased; the lease\n          // expiry re-exposes it. Never let one claim kill the tick.\n          // eslint-disable-next-line no-console\n          console.warn(`[@xtandard/webhooks] delivery ${delivery.id} processing failed:`, error);\n        }\n      }\n    });\n    await Promise.all(workers);\n    return attempts;\n  }\n\n  const dispatcher: Dispatcher = {\n    start() {\n      if (timer) return;\n      timer = setInterval(() => {\n        if (inFlight) return; // never overlap ticks\n        inFlight = runTick()\n          .catch((error) => {\n            // eslint-disable-next-line no-console\n            console.warn(\"[@xtandard/webhooks] dispatcher tick failed:\", error);\n            return 0;\n          })\n          .finally(() => {\n            inFlight = null;\n          });\n      }, pollIntervalMs);\n      // Never keep the host process alive just to poll.\n      (timer as unknown as { unref?: () => void }).unref?.();\n    },\n\n    async stop() {\n      if (timer) {\n        clearInterval(timer);\n        timer = null;\n      }\n      if (inFlight) await inFlight;\n    },\n\n    async tick() {\n      // Manual ticks also serialize against the poller.\n      while (inFlight) await inFlight;\n      inFlight = runTick().finally(() => {\n        inFlight = null;\n      });\n      return inFlight;\n    },\n\n    get running() {\n      return timer !== null;\n    },\n  };\n\n  return dispatcher;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAsEA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,SAAS;;;;;;;;;;;;;;;AAgBf,SAAgB,iBAAiB,MAAoB,UAA6B,CAAC,GAAe;CAChG,MAAM,SAAS;EAAE,GAAG,KAAK,QAAQ;EAAY,GAAG;CAAQ;CACxD,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,cAAc,OAAO,eAAe;CAC1C,MAAM,YAAY,OAAO,aAAa;CAItC,MAAM,oBAAoB,OAAO,WAAW;CAC5C,MAAM,UAAU,KAAK,IAAI,mBAAmB,YAAY,GAAM;CAC9D,MAAM,WAAW,OAAO,iBAAiB;CACzC,MAAM,cAAc,OAAO,eAAe,EAAE,gBAAgB,EAAE;CAC9D,MAAM,oBAAoB,OAAO,qBAAqB;CACtD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,UAAU,OAAO;CACvB,MAAM,MAAM,KAAK,QAAQ;CAEzB,IAAI,QAA+C;CACnD,IAAI,WAAmC;;CAGvC,SAAS,YAAY,cAAqC;EACxD,IAAI,gBAAgB,SAAS,QAAQ,OAAO;EAC5C,MAAM,UAAUA,aAAAA,aAAa,SAAS,aAAgC;EACtE,MAAM,SAAS,KAAK,KAAK,OAAO,IAAI,IAAI,KAAK;EAC7C,OAAO,KAAK,MAAM,UAAU,MAAM;CACpC;CAEA,eAAe,aAAa,UAAsC;EAChE,MAAM,MAAM,SAAS;EACrB,MAAM,UAAU,SAAS,kBAAkB;EAE3C,MAAM,eAAe,OAAO,OAAe,cAAwC;GACjF,MAAM,UAA0B;IAC9B,IAAI;IACJ;IACA,YAAY;IACZ,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GAClC;GACA,MAAM,KAAK,cAAc;IAAE;IAAU;IAAS;IAAS,eAAe;IAAM;GAAU,CAAC;GACvF,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,KAAK,WAAW,KAAK,SAAS,SAAS;EAC7D,IAAI,CAAC,SAAS,OAAO,aAAa,4BAA4B,SAAS;EAEvE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,SAAS,UAAU;EAChE,IAAI,CAAC,UAAU,OAAO,aAAa,6BAA6B,QAAQ,SAAS;EAEjF,IAAI,SAAS,UAAU;GAGrB,MAAM,QAAQ,KAAK,QAAQ;GAC3B,MAAM,YAAY,IAAI,IAAI;GAC1B,MAAM,WAAqB;IACzB,GAAG;IACH,QAAQ;IACR,eAAe,IAAI,KAAK,SAAS,EAAE,YAAY;IAC/C,YAAY;IACZ,WAAW,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GACzC;GAGA,IAAI,SAAS,YACX,MAAM,MAAM,WAAWC,aAAAA,OAAO,KAAK,KAAK,MAAM,SAAS,UAAU,GAAG,SAAS,EAAE,CAAC;GAElF,MAAM,MAAM,QAAQC,aAAAA,YAAY,KAAK,SAAS,EAAE,GAAG,QAAQ;GAC3D,MAAM,MAAM,QAAkBD,aAAAA,OAAO,KAAK,WAAW,SAAS,EAAE,GAAG;IACjE;IACA,YAAY,SAAS;GACvB,CAAC;GACD,OAAO;EACT;EAEA,MAAM,UAAU,MAAME,aAAAA,gBAAgB;GACpC;GACA,WAAW,SAAS;GACpB,MAAM,QAAQ;GACd;GACA;GACA;GACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;GACpC,OAAO,IAAI;EACb,CAAC;EAED,MAAM,eAAe,SAAS,eAAe;EAC7C,MAAM,QAAQ,QAAQ,KAAK,OAAO,YAAY,YAAY;EAC1D,MAAM,KAAK,cAAc;GACvB;GACA;GACA;GACA,eAAe,UAAU,OAAO,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE,YAAY;GAC3E,WAAW,QAAQ;EACrB,CAAC;EACD,MAAM,KAAK,oBAAoB,KAAK,SAAS,IAAI,QAAQ,IAAI,WAAW;EACxE,OAAO;CACT;CAEA,eAAe,UAA2B;EACxC,MAAM,UAAU,MAAM,KAAK,mBAAmB;GAAE,OAAO;GAAW;EAAQ,CAAC;EAC3E,IAAI,QAAQ,WAAW,GAAG,OAAO;EAEjC,IAAI,WAAW;EACf,IAAI,SAAS;EACb,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,QAAQ,MAAM,EAAE,GAAG,YAAY;GACxF,OAAO,SAAS,QAAQ,QAAQ;IAC9B,MAAM,WAAW,QAAQ;IACzB,IAAI;KACF,IAAI,MAAM,aAAa,QAAQ,GAAG;IACpC,SAAS,OAAO;KAId,QAAQ,KAAK,iCAAiC,SAAS,GAAG,sBAAsB,KAAK;IACvF;GACF;EACF,CAAC;EACD,MAAM,QAAQ,IAAI,OAAO;EACzB,OAAO;CACT;CA2CA,OAAO;EAxCL,QAAQ;GACN,IAAI,OAAO;GACX,QAAQ,kBAAkB;IACxB,IAAI,UAAU;IACd,WAAW,QAAQ,EAChB,OAAO,UAAU;KAEhB,QAAQ,KAAK,gDAAgD,KAAK;KAClE,OAAO;IACT,CAAC,EACA,cAAc;KACb,WAAW;IACb,CAAC;GACL,GAAG,cAAc;GAEjB,MAA6C,QAAQ;EACvD;EAEA,MAAM,OAAO;GACX,IAAI,OAAO;IACT,cAAc,KAAK;IACnB,QAAQ;GACV;GACA,IAAI,UAAU,MAAM;EACtB;EAEA,MAAM,OAAO;GAEX,OAAO,UAAU,MAAM;GACvB,WAAW,QAAQ,EAAE,cAAc;IACjC,WAAW;GACb,CAAC;GACD,OAAO;EACT;EAEA,IAAI,UAAU;GACZ,OAAO,UAAU;EACnB;CAGc;AAClB"}

package/dist/dispatcher-Coubwrka.mjs

@@ -0,0 +1,196 @@
+import { t as __exportAll } from "./chunk-D7D4PA-g.mjs";
+import { A as attemptDelivery, w as durationToMs } from "./core-CMpnmI5Q.mjs";
+import { m as dueKey, p as deliveryKey } from "./keys-Byyj4quQ.mjs";
+//#region src/dispatcher.ts
+/**
+* The delivery engine. Polls the due index, claims deliveries (lease-based,
+* multi-instance safe when storage supports CAS or the `deliveryQueue`
+* capability), performs the signed HTTP attempts, and drives each delivery's
+* state machine through the retry schedule into success or dead-letter.
+*
+* Runs in-process: the panel starts one by default, a split worker runs one
+* via the CLI (`xtandard-webhooks dispatch`), and tests drive {@link Dispatcher.tick}
+* manually. All timers are `unref()`ed so a dispatcher never keeps a process
+* alive on its own. Semantics are **at-least-once**: a crashed process loses
+* nothing (leases expire, the next tick reclaims); receivers dedupe on
+* `webhook-id`.
+*
+* @module
+*/
+var dispatcher_exports = /* @__PURE__ */ __exportAll({
+	DEFAULT_RETRY_SCHEDULE: () => DEFAULT_RETRY_SCHEDULE,
+	createDispatcher: () => createDispatcher
+});
+/** The default retry schedule (Svix-compatible). */
+const DEFAULT_RETRY_SCHEDULE = [
+	"0s",
+	"5s",
+	"5m",
+	"30m",
+	"2h",
+	"5h",
+	"10h"
+];
+/** Fractional jitter applied to every retry delay (±10%). */
+const JITTER = .1;
+/**
+* Create a dispatcher over a core. Not started — call
+* {@link Dispatcher.start}, or drive {@link Dispatcher.tick} manually.
+*
+* @example
+* ```ts
+* import { createWebhooksCore, createDispatcher } from "@xtandard/webhooks";
+* import { createMemoryStorage } from "@xtandard/webhooks/storage/memory";
+*
+* const core = createWebhooksCore({ storage: createMemoryStorage() });
+* const dispatcher = createDispatcher(core);
+* dispatcher.start();
+* ```
+*/
+function createDispatcher(core, options = {}) {
+	const merged = {
+		...core.options.dispatcher,
+		...options
+	};
+	const pollIntervalMs = merged.pollIntervalMs ?? 1e3;
+	const batchSize = merged.batchSize ?? 20;
+	const concurrency = merged.concurrency ?? 8;
+	const timeoutMs = merged.timeoutMs ?? 2e4;
+	const configuredLeaseMs = merged.leaseMs ?? 6e4;
+	const leaseMs = Math.max(configuredLeaseMs, timeoutMs + 1e4);
+	const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;
+	const autoDisable = merged.autoDisable ?? { failingForDays: 5 };
+	const responseBodyLimit = merged.responseBodyLimit ?? 4096;
+	const userAgent = merged.userAgent ?? `xtandard-webhooks/0.1.0`;
+	const doFetch = merged.fetch;
+	const now = core.options.now;
+	let timer = null;
+	let inFlight = null;
+	/** Delay before the next attempt, per schedule position, with ±10% jitter. */
+	function nextDelayMs(attemptsMade) {
+		if (attemptsMade >= schedule.length) return null;
+		const nominal = durationToMs(schedule[attemptsMade]);
+		const jitter = 1 + (Math.random() * 2 - 1) * JITTER;
+		return Math.round(nominal * jitter);
+	}
+	async function processClaim(delivery) {
+		const app = delivery.applicationKey;
+		const trigger = delivery.pendingTrigger ?? "schedule";
+		const failTerminal = async (error, eventType) => {
+			const outcome = {
+				ok: false,
+				error,
+				durationMs: 0,
+				at: new Date(now()).toISOString()
+			};
+			await core.recordAttempt({
+				delivery,
+				outcome,
+				trigger,
+				nextAttemptAt: null,
+				eventType
+			});
+			return true;
+		};
+		const message = await core.getMessage(app, delivery.messageId);
+		if (!message) return failTerminal("Message no longer exists", "unknown");
+		const endpoint = await core.getEndpoint(app, delivery.endpointId);
+		if (!endpoint) return failTerminal("Endpoint no longer exists", message.eventType);
+		if (endpoint.disabled) {
+			const queue = core.options.queueStorage;
+			const recheckAt = now() + leaseMs;
+			const released = {
+				...delivery,
+				status: "pending",
+				nextAttemptAt: new Date(recheckAt).toISOString(),
+				leaseUntil: null,
+				updatedAt: new Date(now()).toISOString()
+			};
+			if (delivery.leaseUntil) await queue.removeItem(dueKey(app, Date.parse(delivery.leaseUntil), delivery.id));
+			await queue.setItem(deliveryKey(app, delivery.id), released);
+			await queue.setItem(dueKey(app, recheckAt, delivery.id), {
+				app,
+				deliveryId: delivery.id
+			});
+			return false;
+		}
+		const outcome = await attemptDelivery({
+			endpoint,
+			messageId: delivery.messageId,
+			body: message.envelope,
+			timeoutMs,
+			responseBodyLimit,
+			userAgent,
+			...doFetch ? { fetch: doFetch } : {},
+			nowMs: now()
+		});
+		const attemptsMade = delivery.attemptCount + 1;
+		const delay = outcome.ok ? null : nextDelayMs(attemptsMade);
+		await core.recordAttempt({
+			delivery,
+			outcome,
+			trigger,
+			nextAttemptAt: delay === null ? null : new Date(now() + delay).toISOString(),
+			eventType: message.eventType
+		});
+		await core.noteEndpointOutcome(app, endpoint.id, outcome.ok, autoDisable);
+		return true;
+	}
+	async function runTick() {
+		const claimed = await core.claimDueDeliveries({
+			limit: batchSize,
+			leaseMs
+		});
+		if (claimed.length === 0) return 0;
+		let attempts = 0;
+		let cursor = 0;
+		const workers = Array.from({ length: Math.min(concurrency, claimed.length) }, async () => {
+			while (cursor < claimed.length) {
+				const delivery = claimed[cursor++];
+				try {
+					if (await processClaim(delivery)) attempts++;
+				} catch (error) {
+					console.warn(`[@xtandard/webhooks] delivery ${delivery.id} processing failed:`, error);
+				}
+			}
+		});
+		await Promise.all(workers);
+		return attempts;
+	}
+	return {
+		start() {
+			if (timer) return;
+			timer = setInterval(() => {
+				if (inFlight) return;
+				inFlight = runTick().catch((error) => {
+					console.warn("[@xtandard/webhooks] dispatcher tick failed:", error);
+					return 0;
+				}).finally(() => {
+					inFlight = null;
+				});
+			}, pollIntervalMs);
+			timer.unref?.();
+		},
+		async stop() {
+			if (timer) {
+				clearInterval(timer);
+				timer = null;
+			}
+			if (inFlight) await inFlight;
+		},
+		async tick() {
+			while (inFlight) await inFlight;
+			inFlight = runTick().finally(() => {
+				inFlight = null;
+			});
+			return inFlight;
+		},
+		get running() {
+			return timer !== null;
+		}
+	};
+}
+//#endregion
+export { createDispatcher as n, dispatcher_exports as r, DEFAULT_RETRY_SCHEDULE as t };
+
+//# sourceMappingURL=dispatcher-Coubwrka.mjs.map

package/dist/dispatcher-Coubwrka.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatcher-Coubwrka.mjs","names":[],"sources":["../src/dispatcher.ts"],"sourcesContent":["/**\n * The delivery engine. Polls the due index, claims deliveries (lease-based,\n * multi-instance safe when storage supports CAS or the `deliveryQueue`\n * capability), performs the signed HTTP attempts, and drives each delivery's\n * state machine through the retry schedule into success or dead-letter.\n *\n * Runs in-process: the panel starts one by default, a split worker runs one\n * via the CLI (`xtandard-webhooks dispatch`), and tests drive {@link Dispatcher.tick}\n * manually. All timers are `unref()`ed so a dispatcher never keeps a process\n * alive on its own. Semantics are **at-least-once**: a crashed process loses\n * nothing (leases expire, the next tick reclaims); receivers dedupe on\n * `webhook-id`.\n *\n * @module\n */\n\nimport { attemptDelivery, type AttemptOutcome } from \"./deliver.ts\";\nimport type { WebhooksCore } from \"./core.ts\";\nimport { durationToMs } from \"./duration.ts\";\nimport { deliveryKey, dueKey, type DueEntry } from \"./keys.ts\";\nimport type { Delivery, WebhookDuration } from \"./schema.ts\";\nimport { VERSION } from \"./version.ts\";\n\n/** Options for {@link createDispatcher} (also accepted on panels and the core). */\nexport interface DispatcherOptions {\n  /** How often to poll for due deliveries. Default `1000`. */\n  pollIntervalMs?: number;\n  /** Max deliveries claimed per tick. Default `20`. */\n  batchSize?: number;\n  /** Max in-flight HTTP attempts. Default `8`. */\n  concurrency?: number;\n  /** Per-attempt timeout (AbortController). Default `20_000`. */\n  timeoutMs?: number;\n  /** Claim lease duration; an expired lease makes a claim reclaimable. Default `60_000`. */\n  leaseMs?: number;\n  /**\n   * Delay before attempt N+1 after attempt N fails (index 0 = the initial\n   * attempt's delay). Exhausting the schedule dead-letters the delivery.\n   * Default `[\"0s\", \"5s\", \"5m\", \"30m\", \"2h\", \"5h\", \"10h\"]` (Svix-compatible).\n   */\n  retrySchedule?: WebhookDuration[];\n  /**\n   * Auto-disable endpoints whose every attempt has failed for this many\n   * consecutive days. `false` disables the policy. Default `{ failingForDays: 5 }`.\n   */\n  autoDisable?: { failingForDays?: number } | false;\n  /** Cap on stored response-body characters per attempt. Default `4096`. */\n  responseBodyLimit?: number;\n  /** Injectable fetch (tests, instrumentation). Default: global fetch. */\n  fetch?: typeof fetch;\n  /** `user-agent` header. Default `\"xtandard-webhooks/<version>\"`. */\n  userAgent?: string;\n}\n\n/** The delivery engine handle. */\nexport interface Dispatcher {\n  /** Begin polling. Idempotent. */\n  start(): void;\n  /** Stop polling and wait for in-flight attempts to finish. */\n  stop(): Promise<void>;\n  /**\n   * Run one manual pass: claim due deliveries, attempt them, record outcomes.\n   * Returns the number of attempts made — the unit-test surface (tests never\n   * assert on timers).\n   */\n  tick(): Promise<number>;\n  readonly running: boolean;\n}\n\n/** The default retry schedule (Svix-compatible). */\nexport const DEFAULT_RETRY_SCHEDULE: WebhookDuration[] = [\n  \"0s\",\n  \"5s\",\n  \"5m\",\n  \"30m\",\n  \"2h\",\n  \"5h\",\n  \"10h\",\n];\n\n/** Fractional jitter applied to every retry delay (±10%). */\nconst JITTER = 0.1;\n\n/**\n * Create a dispatcher over a core. Not started — call\n * {@link Dispatcher.start}, or drive {@link Dispatcher.tick} manually.\n *\n * @example\n * ```ts\n * import { createWebhooksCore, createDispatcher } from \"@xtandard/webhooks\";\n * import { createMemoryStorage } from \"@xtandard/webhooks/storage/memory\";\n *\n * const core = createWebhooksCore({ storage: createMemoryStorage() });\n * const dispatcher = createDispatcher(core);\n * dispatcher.start();\n * ```\n */\nexport function createDispatcher(core: WebhooksCore, options: DispatcherOptions = {}): Dispatcher {\n  const merged = { ...core.options.dispatcher, ...options };\n  const pollIntervalMs = merged.pollIntervalMs ?? 1000;\n  const batchSize = merged.batchSize ?? 20;\n  const concurrency = merged.concurrency ?? 8;\n  const timeoutMs = merged.timeoutMs ?? 20_000;\n  // The lease must outlast a single attempt, or a slow-but-alive attempt runs\n  // past its lease and a second dispatcher reclaims and re-sends it. Enforce\n  // lease > timeout with headroom for recording the outcome.\n  const configuredLeaseMs = merged.leaseMs ?? 60_000;\n  const leaseMs = Math.max(configuredLeaseMs, timeoutMs + 10_000);\n  const schedule = merged.retrySchedule ?? DEFAULT_RETRY_SCHEDULE;\n  const autoDisable = merged.autoDisable ?? { failingForDays: 5 };\n  const responseBodyLimit = merged.responseBodyLimit ?? 4096;\n  const userAgent = merged.userAgent ?? `xtandard-webhooks/${VERSION}`;\n  const doFetch = merged.fetch;\n  const now = core.options.now;\n\n  let timer: ReturnType<typeof setInterval> | null = null;\n  let inFlight: Promise<number> | null = null;\n\n  /** Delay before the next attempt, per schedule position, with ±10% jitter. */\n  function nextDelayMs(attemptsMade: number): number | null {\n    if (attemptsMade >= schedule.length) return null; // exhausted\n    const nominal = durationToMs(schedule[attemptsMade] as WebhookDuration);\n    const jitter = 1 + (Math.random() * 2 - 1) * JITTER;\n    return Math.round(nominal * jitter);\n  }\n\n  async function processClaim(delivery: Delivery): Promise<boolean> {\n    const app = delivery.applicationKey;\n    const trigger = delivery.pendingTrigger ?? \"schedule\";\n\n    const failTerminal = async (error: string, eventType: string): Promise<boolean> => {\n      const outcome: AttemptOutcome = {\n        ok: false,\n        error,\n        durationMs: 0,\n        at: new Date(now()).toISOString(),\n      };\n      await core.recordAttempt({ delivery, outcome, trigger, nextAttemptAt: null, eventType });\n      return true;\n    };\n\n    const message = await core.getMessage(app, delivery.messageId);\n    if (!message) return failTerminal(\"Message no longer exists\", \"unknown\");\n\n    const endpoint = await core.getEndpoint(app, delivery.endpointId);\n    if (!endpoint) return failTerminal(\"Endpoint no longer exists\", message.eventType);\n\n    if (endpoint.disabled) {\n      // Held, not failed: release the claim and re-check after the lease\n      // window. Re-enabling the endpoint resumes delivery automatically.\n      const queue = core.options.queueStorage;\n      const recheckAt = now() + leaseMs;\n      const released: Delivery = {\n        ...delivery,\n        status: \"pending\",\n        nextAttemptAt: new Date(recheckAt).toISOString(),\n        leaseUntil: null,\n        updatedAt: new Date(now()).toISOString(),\n      };\n      // Remove the lease-position due entry the claim created, then park the\n      // delivery at the recheck time.\n      if (delivery.leaseUntil) {\n        await queue.removeItem(dueKey(app, Date.parse(delivery.leaseUntil), delivery.id));\n      }\n      await queue.setItem(deliveryKey(app, delivery.id), released);\n      await queue.setItem<DueEntry>(dueKey(app, recheckAt, delivery.id), {\n        app,\n        deliveryId: delivery.id,\n      });\n      return false; // no attempt made\n    }\n\n    const outcome = await attemptDelivery({\n      endpoint,\n      messageId: delivery.messageId,\n      body: message.envelope,\n      timeoutMs,\n      responseBodyLimit,\n      userAgent,\n      ...(doFetch ? { fetch: doFetch } : {}),\n      nowMs: now(),\n    });\n\n    const attemptsMade = delivery.attemptCount + 1;\n    const delay = outcome.ok ? null : nextDelayMs(attemptsMade);\n    await core.recordAttempt({\n      delivery,\n      outcome,\n      trigger,\n      nextAttemptAt: delay === null ? null : new Date(now() + delay).toISOString(),\n      eventType: message.eventType,\n    });\n    await core.noteEndpointOutcome(app, endpoint.id, outcome.ok, autoDisable);\n    return true;\n  }\n\n  async function runTick(): Promise<number> {\n    const claimed = await core.claimDueDeliveries({ limit: batchSize, leaseMs });\n    if (claimed.length === 0) return 0;\n\n    let attempts = 0;\n    let cursor = 0;\n    const workers = Array.from({ length: Math.min(concurrency, claimed.length) }, async () => {\n      while (cursor < claimed.length) {\n        const delivery = claimed[cursor++] as Delivery;\n        try {\n          if (await processClaim(delivery)) attempts++;\n        } catch (error) {\n          // A storage failure mid-claim: leave the delivery leased; the lease\n          // expiry re-exposes it. Never let one claim kill the tick.\n          // eslint-disable-next-line no-console\n          console.warn(`[@xtandard/webhooks] delivery ${delivery.id} processing failed:`, error);\n        }\n      }\n    });\n    await Promise.all(workers);\n    return attempts;\n  }\n\n  const dispatcher: Dispatcher = {\n    start() {\n      if (timer) return;\n      timer = setInterval(() => {\n        if (inFlight) return; // never overlap ticks\n        inFlight = runTick()\n          .catch((error) => {\n            // eslint-disable-next-line no-console\n            console.warn(\"[@xtandard/webhooks] dispatcher tick failed:\", error);\n            return 0;\n          })\n          .finally(() => {\n            inFlight = null;\n          });\n      }, pollIntervalMs);\n      // Never keep the host process alive just to poll.\n      (timer as unknown as { unref?: () => void }).unref?.();\n    },\n\n    async stop() {\n      if (timer) {\n        clearInterval(timer);\n        timer = null;\n      }\n      if (inFlight) await inFlight;\n    },\n\n    async tick() {\n      // Manual ticks also serialize against the poller.\n      while (inFlight) await inFlight;\n      inFlight = runTick().finally(() => {\n        inFlight = null;\n      });\n      return inFlight;\n    },\n\n    get running() {\n      return timer !== null;\n    },\n  };\n\n  return dispatcher;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAsEA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAM,SAAS;;;;;;;;;;;;;;;AAgBf,SAAgB,iBAAiB,MAAoB,UAA6B,CAAC,GAAe;CAChG,MAAM,SAAS;EAAE,GAAG,KAAK,QAAQ;EAAY,GAAG;CAAQ;CACxD,MAAM,iBAAiB,OAAO,kBAAkB;CAChD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,cAAc,OAAO,eAAe;CAC1C,MAAM,YAAY,OAAO,aAAa;CAItC,MAAM,oBAAoB,OAAO,WAAW;CAC5C,MAAM,UAAU,KAAK,IAAI,mBAAmB,YAAY,GAAM;CAC9D,MAAM,WAAW,OAAO,iBAAiB;CACzC,MAAM,cAAc,OAAO,eAAe,EAAE,gBAAgB,EAAE;CAC9D,MAAM,oBAAoB,OAAO,qBAAqB;CACtD,MAAM,YAAY,OAAO,aAAa;CACtC,MAAM,UAAU,OAAO;CACvB,MAAM,MAAM,KAAK,QAAQ;CAEzB,IAAI,QAA+C;CACnD,IAAI,WAAmC;;CAGvC,SAAS,YAAY,cAAqC;EACxD,IAAI,gBAAgB,SAAS,QAAQ,OAAO;EAC5C,MAAM,UAAU,aAAa,SAAS,aAAgC;EACtE,MAAM,SAAS,KAAK,KAAK,OAAO,IAAI,IAAI,KAAK;EAC7C,OAAO,KAAK,MAAM,UAAU,MAAM;CACpC;CAEA,eAAe,aAAa,UAAsC;EAChE,MAAM,MAAM,SAAS;EACrB,MAAM,UAAU,SAAS,kBAAkB;EAE3C,MAAM,eAAe,OAAO,OAAe,cAAwC;GACjF,MAAM,UAA0B;IAC9B,IAAI;IACJ;IACA,YAAY;IACZ,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GAClC;GACA,MAAM,KAAK,cAAc;IAAE;IAAU;IAAS;IAAS,eAAe;IAAM;GAAU,CAAC;GACvF,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,KAAK,WAAW,KAAK,SAAS,SAAS;EAC7D,IAAI,CAAC,SAAS,OAAO,aAAa,4BAA4B,SAAS;EAEvE,MAAM,WAAW,MAAM,KAAK,YAAY,KAAK,SAAS,UAAU;EAChE,IAAI,CAAC,UAAU,OAAO,aAAa,6BAA6B,QAAQ,SAAS;EAEjF,IAAI,SAAS,UAAU;GAGrB,MAAM,QAAQ,KAAK,QAAQ;GAC3B,MAAM,YAAY,IAAI,IAAI;GAC1B,MAAM,WAAqB;IACzB,GAAG;IACH,QAAQ;IACR,eAAe,IAAI,KAAK,SAAS,EAAE,YAAY;IAC/C,YAAY;IACZ,WAAW,IAAI,KAAK,IAAI,CAAC,EAAE,YAAY;GACzC;GAGA,IAAI,SAAS,YACX,MAAM,MAAM,WAAW,OAAO,KAAK,KAAK,MAAM,SAAS,UAAU,GAAG,SAAS,EAAE,CAAC;GAElF,MAAM,MAAM,QAAQ,YAAY,KAAK,SAAS,EAAE,GAAG,QAAQ;GAC3D,MAAM,MAAM,QAAkB,OAAO,KAAK,WAAW,SAAS,EAAE,GAAG;IACjE;IACA,YAAY,SAAS;GACvB,CAAC;GACD,OAAO;EACT;EAEA,MAAM,UAAU,MAAM,gBAAgB;GACpC;GACA,WAAW,SAAS;GACpB,MAAM,QAAQ;GACd;GACA;GACA;GACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;GACpC,OAAO,IAAI;EACb,CAAC;EAED,MAAM,eAAe,SAAS,eAAe;EAC7C,MAAM,QAAQ,QAAQ,KAAK,OAAO,YAAY,YAAY;EAC1D,MAAM,KAAK,cAAc;GACvB;GACA;GACA;GACA,eAAe,UAAU,OAAO,OAAO,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE,YAAY;GAC3E,WAAW,QAAQ;EACrB,CAAC;EACD,MAAM,KAAK,oBAAoB,KAAK,SAAS,IAAI,QAAQ,IAAI,WAAW;EACxE,OAAO;CACT;CAEA,eAAe,UAA2B;EACxC,MAAM,UAAU,MAAM,KAAK,mBAAmB;GAAE,OAAO;GAAW;EAAQ,CAAC;EAC3E,IAAI,QAAQ,WAAW,GAAG,OAAO;EAEjC,IAAI,WAAW;EACf,IAAI,SAAS;EACb,MAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,KAAK,IAAI,aAAa,QAAQ,MAAM,EAAE,GAAG,YAAY;GACxF,OAAO,SAAS,QAAQ,QAAQ;IAC9B,MAAM,WAAW,QAAQ;IACzB,IAAI;KACF,IAAI,MAAM,aAAa,QAAQ,GAAG;IACpC,SAAS,OAAO;KAId,QAAQ,KAAK,iCAAiC,SAAS,GAAG,sBAAsB,KAAK;IACvF;GACF;EACF,CAAC;EACD,MAAM,QAAQ,IAAI,OAAO;EACzB,OAAO;CACT;CA2CA,OAAO;EAxCL,QAAQ;GACN,IAAI,OAAO;GACX,QAAQ,kBAAkB;IACxB,IAAI,UAAU;IACd,WAAW,QAAQ,EAChB,OAAO,UAAU;KAEhB,QAAQ,KAAK,gDAAgD,KAAK;KAClE,OAAO;IACT,CAAC,EACA,cAAc;KACb,WAAW;IACb,CAAC;GACL,GAAG,cAAc;GAEjB,MAA6C,QAAQ;EACvD;EAEA,MAAM,OAAO;GACX,IAAI,OAAO;IACT,cAAc,KAAK;IACnB,QAAQ;GACV;GACA,IAAI,UAAU,MAAM;EACtB;EAEA,MAAM,OAAO;GAEX,OAAO,UAAU,MAAM;GACvB,WAAW,QAAQ,EAAE,cAAc;IACjC,WAAW;GACb,CAAC;GACD,OAAO;EACT;EAEA,IAAI,UAAU;GACZ,OAAO,UAAU;EACnB;CAGc;AAClB"}

package/dist/entry-auth-basic.cjs

@@ -0,0 +1,5 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_basic = require("./basic-BIW3Rvuz.cjs");
+exports.basicAuth = require_basic.basicAuth;
+exports.hashPassword = require_basic.hashPassword;
+exports.verifyPassword = require_basic.verifyPassword;

package/dist/entry-auth-basic.d.cts

@@ -0,0 +1,83 @@
+import { t as AuthProvider } from "./contract-lETlIuXo.cjs";
+
+//#region src/auth/basic.d.ts
+/**
+ * Hash a password with scrypt and a fresh random salt.
+ *
+ * The returned string is self-describing and safe to store in config or a
+ * database: `scrypt$<saltHex>$<hashHex>`. Pass it back to
+ * {@link verifyPassword} (or supply it as a user's `passwordHash`) to check a
+ * candidate password.
+ *
+ * @example
+ * ```ts
+ * const stored = await hashPassword("correct horse battery staple");
+ * // → "scrypt$<32 hex chars>$<128 hex chars>"
+ * ```
+ */
+declare function hashPassword(password: string): Promise<string>;
+/**
+ * Verify a candidate `password` against a digest produced by
+ * {@link hashPassword}.
+ *
+ * Re-derives the scrypt hash using the stored salt and compares it to the stored
+ * hash with `crypto.timingSafeEqual` (constant time). Returns `false` — rather
+ * than throwing — for malformed or unrecognized digests.
+ */
+declare function verifyPassword(password: string, stored: string): Promise<boolean>;
+/** A configured user for {@link basicAuth}. */
+interface BasicAuthUser {
+  /** The login name, matched against the Basic credentials. */
+  username: string;
+  /**
+   * A digest produced by {@link hashPassword} (`scrypt$<salt>$<hash>`).
+   * Preferred for production.
+   */
+  passwordHash?: string;
+  /**
+   * A plaintext password. **Development only** — prefer `passwordHash`. Compared
+   * in constant time but stored as cleartext in your config.
+   */
+  password?: string;
+  /** Roles attached to the resulting {@link Principal}. */
+  roles?: string[];
+  /** Email attached to the resulting {@link Principal}. */
+  email?: string;
+  /** Principal id. Defaults to {@link BasicAuthUser.username} when omitted. */
+  id?: string;
+}
+/** Options for {@link basicAuth}. */
+interface BasicAuthOptions {
+  /** The known users. */
+  users: BasicAuthUser[];
+  /**
+   * Realm advertised in the `WWW-Authenticate` header on challenge.
+   * @default "xtandard-webhooks"
+   */
+  realm?: string;
+  /**
+   * Custom verifier. When supplied it takes precedence over `passwordHash` and
+   * `password` for matched users — delegate to your own credential store and
+   * return `true` to accept.
+   */
+  passwordVerifier?: (username: string, password: string) => Promise<boolean> | boolean;
+}
+/**
+ * Create an HTTP Basic {@link AuthProvider}.
+ *
+ * @example
+ * ```ts
+ * import { basicAuth, hashPassword } from "@xtandard/webhooks/auth/basic";
+ *
+ * const auth = basicAuth({
+ *   realm: "Webhooks Admin",
+ *   users: [
+ *     { username: "admin", passwordHash: await hashPassword("s3cret"), roles: ["admin"] },
+ *   ],
+ * });
+ * ```
+ */
+declare function basicAuth(options: BasicAuthOptions): AuthProvider;
+//#endregion
+export { BasicAuthOptions, BasicAuthUser, basicAuth, hashPassword, verifyPassword };
+//# sourceMappingURL=entry-auth-basic.d.cts.map

package/dist/entry-auth-basic.d.mts

@@ -0,0 +1,83 @@
+import { t as AuthProvider } from "./contract-lETlIuXo.mjs";
+
+//#region src/auth/basic.d.ts
+/**
+ * Hash a password with scrypt and a fresh random salt.
+ *
+ * The returned string is self-describing and safe to store in config or a
+ * database: `scrypt$<saltHex>$<hashHex>`. Pass it back to
+ * {@link verifyPassword} (or supply it as a user's `passwordHash`) to check a
+ * candidate password.
+ *
+ * @example
+ * ```ts
+ * const stored = await hashPassword("correct horse battery staple");
+ * // → "scrypt$<32 hex chars>$<128 hex chars>"
+ * ```
+ */
+declare function hashPassword(password: string): Promise<string>;
+/**
+ * Verify a candidate `password` against a digest produced by
+ * {@link hashPassword}.
+ *
+ * Re-derives the scrypt hash using the stored salt and compares it to the stored
+ * hash with `crypto.timingSafeEqual` (constant time). Returns `false` — rather
+ * than throwing — for malformed or unrecognized digests.
+ */
+declare function verifyPassword(password: string, stored: string): Promise<boolean>;
+/** A configured user for {@link basicAuth}. */
+interface BasicAuthUser {
+  /** The login name, matched against the Basic credentials. */
+  username: string;
+  /**
+   * A digest produced by {@link hashPassword} (`scrypt$<salt>$<hash>`).
+   * Preferred for production.
+   */
+  passwordHash?: string;
+  /**
+   * A plaintext password. **Development only** — prefer `passwordHash`. Compared
+   * in constant time but stored as cleartext in your config.
+   */
+  password?: string;
+  /** Roles attached to the resulting {@link Principal}. */
+  roles?: string[];
+  /** Email attached to the resulting {@link Principal}. */
+  email?: string;
+  /** Principal id. Defaults to {@link BasicAuthUser.username} when omitted. */
+  id?: string;
+}
+/** Options for {@link basicAuth}. */
+interface BasicAuthOptions {
+  /** The known users. */
+  users: BasicAuthUser[];
+  /**
+   * Realm advertised in the `WWW-Authenticate` header on challenge.
+   * @default "xtandard-webhooks"
+   */
+  realm?: string;
+  /**
+   * Custom verifier. When supplied it takes precedence over `passwordHash` and
+   * `password` for matched users — delegate to your own credential store and
+   * return `true` to accept.
+   */
+  passwordVerifier?: (username: string, password: string) => Promise<boolean> | boolean;
+}
+/**
+ * Create an HTTP Basic {@link AuthProvider}.
+ *
+ * @example
+ * ```ts
+ * import { basicAuth, hashPassword } from "@xtandard/webhooks/auth/basic";
+ *
+ * const auth = basicAuth({
+ *   realm: "Webhooks Admin",
+ *   users: [
+ *     { username: "admin", passwordHash: await hashPassword("s3cret"), roles: ["admin"] },
+ *   ],
+ * });
+ * ```
+ */
+declare function basicAuth(options: BasicAuthOptions): AuthProvider;
+//#endregion
+export { BasicAuthOptions, BasicAuthUser, basicAuth, hashPassword, verifyPassword };
+//# sourceMappingURL=entry-auth-basic.d.mts.map

package/dist/entry-auth-basic.mjs

@@ -0,0 +1,2 @@
+import { i as verifyPassword, r as hashPassword, t as basicAuth } from "./basic-DKk0Xfuu.mjs";
+export { basicAuth, hashPassword, verifyPassword };

package/dist/entry-auth-delegated.cjs

@@ -0,0 +1,28 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/auth/delegated.ts
+/**
+* Create an {@link AuthProvider} from plain functions.
+*
+* @example
+* ```ts
+* import { delegatedAuth } from "@xtandard/webhooks/auth/delegated";
+*
+* const auth = delegatedAuth({
+*   authenticate: async (request) => {
+*     const token = request.headers.get("authorization")?.replace("Bearer ", "");
+*     return token ? await verifyToken(token) : null;
+*   },
+* });
+* ```
+*/
+function delegatedAuth(options) {
+	const provider = { async authenticate(request) {
+		return await options.authenticate(request);
+	} };
+	if (options.challenge) provider.challenge = options.challenge;
+	return provider;
+}
+//#endregion
+exports.delegatedAuth = delegatedAuth;
+
+//# sourceMappingURL=entry-auth-delegated.cjs.map