@xtandard/webhooks 0.1.0

package/dist/memory-8Ef-PL5a.cjs

@@ -0,0 +1,137 @@
+const require_keys = require("./keys-FiKpaVHX.cjs");
+//#region src/storage/memory.ts
+/**
+* In-memory storage adapter. Zero deps. Useful for tests, dev, and the demo.
+* Values are deep-cloned on write and read so callers cannot mutate stored
+* state by reference. Implements every optional capability: `watch`,
+* `compareAndSwap`, and native `claimDue` (the delivery queue).
+*
+* @module
+*/
+var memory_exports = /* @__PURE__ */ require_keys.__exportAll({ createMemoryStorage: () => createMemoryStorage });
+const clone = (value) => value === void 0 ? value : structuredClone(value);
+function deepEqual(a, b) {
+	if (a === b) return true;
+	if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) return false;
+	if (Array.isArray(a) !== Array.isArray(b)) return false;
+	const aKeys = Object.keys(a);
+	const bKeys = Object.keys(b);
+	if (aKeys.length !== bKeys.length) return false;
+	return aKeys.every((k) => deepEqual(a[k], b[k]));
+}
+const DUE_KEY_RE = new RegExp(`^whk/[^/]+/due/`);
+/**
+* Create an in-memory {@link WebhooksStorage} with every optional capability.
+* `watch` fires callbacks on the next microtask after a write/remove;
+* `compareAndSwap` compares deep equality; `claimDue` scans the due index
+* across all applications and claims atomically (single-threaded JS makes the
+* scan-and-write race-free in-process).
+*
+* @example
+* ```ts
+* import { createMemoryStorage } from "@xtandard/webhooks/storage/memory";
+*
+* const storage = createMemoryStorage();
+* ```
+*/
+function createMemoryStorage(options = {}) {
+	const map = /* @__PURE__ */ new Map();
+	if (options.initial) for (const [k, val] of Object.entries(options.initial)) map.set(k, clone(val));
+	const watchers = /* @__PURE__ */ new Set();
+	const notify = (event) => {
+		for (const w of watchers) if (event.key.startsWith(w.prefix)) queueMicrotask(() => w.cb(event));
+	};
+	const set = (key, value) => {
+		map.set(key, clone(value));
+		notify({
+			type: "update",
+			key
+		});
+	};
+	const remove = (key) => {
+		if (map.delete(key)) notify({
+			type: "remove",
+			key
+		});
+	};
+	return {
+		async getItem(key) {
+			return map.has(key) ? clone(map.get(key)) : null;
+		},
+		async setItem(key, value) {
+			set(key, value);
+		},
+		async removeItem(key) {
+			remove(key);
+		},
+		async getKeys(prefix) {
+			const out = [];
+			for (const k of map.keys()) if (k.startsWith(prefix)) out.push(k);
+			return out;
+		},
+		async watch(prefix, cb) {
+			const entry = {
+				prefix,
+				cb
+			};
+			watchers.add(entry);
+			return () => {
+				watchers.delete(entry);
+			};
+		},
+		async compareAndSwap(input) {
+			if (!deepEqual(map.has(input.key) ? map.get(input.key) : null, input.expected)) return false;
+			set(input.key, input.next);
+			return true;
+		},
+		async claimDue(input) {
+			const nowMillis = Date.parse(input.now);
+			const due = [];
+			for (const k of map.keys()) if (DUE_KEY_RE.test(k)) due.push(k);
+			due.sort();
+			const claimed = [];
+			for (const key of due) {
+				if (claimed.length >= input.limit) break;
+				const parsed = require_keys.parseDueKey(key);
+				if (!parsed || parsed.dueAtMillis > nowMillis) continue;
+				const entry = map.get(key);
+				if (!entry) continue;
+				const dKey = require_keys.deliveryKey(entry.app, entry.deliveryId);
+				const delivery = map.get(dKey);
+				if (!delivery || delivery.status === "succeeded" || delivery.status === "failed") {
+					remove(key);
+					continue;
+				}
+				const leaseExpired = delivery.status === "delivering" && (!delivery.leaseUntil || Date.parse(delivery.leaseUntil) <= nowMillis);
+				if (delivery.status !== "pending" && !leaseExpired) continue;
+				const leaseUntil = new Date(nowMillis + input.leaseMs).toISOString();
+				const next = {
+					...delivery,
+					status: "delivering",
+					leaseUntil,
+					updatedAt: input.now
+				};
+				set(dKey, next);
+				remove(key);
+				set(require_keys.dueKey(entry.app, nowMillis + input.leaseMs, entry.deliveryId), entry);
+				claimed.push(clone(next));
+			}
+			return claimed;
+		}
+	};
+}
+//#endregion
+Object.defineProperty(exports, "createMemoryStorage", {
+	enumerable: true,
+	get: function() {
+		return createMemoryStorage;
+	}
+});
+Object.defineProperty(exports, "memory_exports", {
+	enumerable: true,
+	get: function() {
+		return memory_exports;
+	}
+});
+
+//# sourceMappingURL=memory-8Ef-PL5a.cjs.map

package/dist/memory-8Ef-PL5a.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-8Ef-PL5a.cjs","names":["parseDueKey","deliveryKey","dueKey"],"sources":["../src/storage/memory.ts"],"sourcesContent":["/**\n * In-memory storage adapter. Zero deps. Useful for tests, dev, and the demo.\n * Values are deep-cloned on write and read so callers cannot mutate stored\n * state by reference. Implements every optional capability: `watch`,\n * `compareAndSwap`, and native `claimDue` (the delivery queue).\n *\n * @module\n */\n\nimport { dueKey, deliveryKey, parseDueKey, ROOT, type DueEntry } from \"../keys.ts\";\nimport type { Delivery } from \"../schema.ts\";\nimport type {\n  CompareAndSwapWebhooksStorage,\n  DeliveryQueueStorage,\n  StorageChangeEvent,\n  WatchableWebhooksStorage,\n  WebhooksStorage,\n} from \"./contract.ts\";\n\n/** Options for {@link createMemoryStorage}. */\nexport interface MemoryStorageOptions {\n  /** Optional seed data (key → value). */\n  initial?: Record<string, unknown>;\n}\n\n/** The full capability set the memory adapter implements. */\nexport type MemoryWebhooksStorage = WatchableWebhooksStorage &\n  CompareAndSwapWebhooksStorage &\n  DeliveryQueueStorage;\n\nconst clone = <T>(value: T): T => (value === undefined ? value : (structuredClone(value) as T));\n\nfunction deepEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n  if (typeof a !== \"object\" || typeof b !== \"object\" || a === null || b === null) return false;\n  if (Array.isArray(a) !== Array.isArray(b)) return false;\n  const aKeys = Object.keys(a as object);\n  const bKeys = Object.keys(b as object);\n  if (aKeys.length !== bKeys.length) return false;\n  return aKeys.every((k) =>\n    deepEqual((a as Record<string, unknown>)[k], (b as Record<string, unknown>)[k]),\n  );\n}\n\nconst DUE_KEY_RE = new RegExp(`^${ROOT}/[^/]+/due/`);\n\n/**\n * Create an in-memory {@link WebhooksStorage} with every optional capability.\n * `watch` fires callbacks on the next microtask after a write/remove;\n * `compareAndSwap` compares deep equality; `claimDue` scans the due index\n * across all applications and claims atomically (single-threaded JS makes the\n * scan-and-write race-free in-process).\n *\n * @example\n * ```ts\n * import { createMemoryStorage } from \"@xtandard/webhooks/storage/memory\";\n *\n * const storage = createMemoryStorage();\n * ```\n */\nexport function createMemoryStorage(options: MemoryStorageOptions = {}): MemoryWebhooksStorage {\n  const map = new Map<string, unknown>();\n  if (options.initial) {\n    for (const [k, val] of Object.entries(options.initial)) map.set(k, clone(val));\n  }\n\n  const watchers = new Set<{ prefix: string; cb: (event: StorageChangeEvent) => void }>();\n  const notify = (event: StorageChangeEvent) => {\n    for (const w of watchers) {\n      if (event.key.startsWith(w.prefix)) queueMicrotask(() => w.cb(event));\n    }\n  };\n\n  const set = (key: string, value: unknown) => {\n    map.set(key, clone(value));\n    notify({ type: \"update\", key });\n  };\n  const remove = (key: string) => {\n    if (map.delete(key)) notify({ type: \"remove\", key });\n  };\n\n  return {\n    async getItem<T>(key: string): Promise<T | null> {\n      return map.has(key) ? clone(map.get(key) as T) : null;\n    },\n    async setItem<T>(key: string, value: T): Promise<void> {\n      set(key, value);\n    },\n    async removeItem(key: string): Promise<void> {\n      remove(key);\n    },\n    async getKeys(prefix: string): Promise<string[]> {\n      const out: string[] = [];\n      for (const k of map.keys()) if (k.startsWith(prefix)) out.push(k);\n      return out;\n    },\n    async watch(prefix, cb): Promise<() => void> {\n      const entry = { prefix, cb };\n      watchers.add(entry);\n      return () => {\n        watchers.delete(entry);\n      };\n    },\n    async compareAndSwap<T>(input: { key: string; expected: T | null; next: T }): Promise<boolean> {\n      const current = map.has(input.key) ? map.get(input.key) : null;\n      if (!deepEqual(current, input.expected)) return false;\n      set(input.key, input.next);\n      return true;\n    },\n    async claimDue(input): Promise<Delivery[]> {\n      const nowMillis = Date.parse(input.now);\n      const due: string[] = [];\n      for (const k of map.keys()) if (DUE_KEY_RE.test(k)) due.push(k);\n      due.sort(); // lexicographic = chronological (13-digit zero-padded millis)\n\n      const claimed: Delivery[] = [];\n      for (const key of due) {\n        if (claimed.length >= input.limit) break;\n        const parsed = parseDueKey(key);\n        if (!parsed || parsed.dueAtMillis > nowMillis) continue;\n        const entry = map.get(key) as DueEntry | undefined;\n        if (!entry) continue;\n        const dKey = deliveryKey(entry.app, entry.deliveryId);\n        const delivery = map.get(dKey) as Delivery | undefined;\n        // Orphaned or already-terminal entries are garbage — sweep them.\n        if (!delivery || delivery.status === \"succeeded\" || delivery.status === \"failed\") {\n          remove(key);\n          continue;\n        }\n        // Claimable = pending, or delivering with an expired lease.\n        const leaseExpired =\n          delivery.status === \"delivering\" &&\n          (!delivery.leaseUntil || Date.parse(delivery.leaseUntil) <= nowMillis);\n        if (delivery.status !== \"pending\" && !leaseExpired) continue;\n\n        const leaseUntil = new Date(nowMillis + input.leaseMs).toISOString();\n        const next: Delivery = {\n          ...delivery,\n          status: \"delivering\",\n          leaseUntil,\n          updatedAt: input.now,\n        };\n        set(dKey, next);\n        // Reposition the due entry at the lease expiry so a crashed claimer's\n        // work re-surfaces automatically.\n        remove(key);\n        set(dueKey(entry.app, nowMillis + input.leaseMs, entry.deliveryId), entry);\n        claimed.push(clone(next));\n      }\n      return claimed;\n    },\n  } satisfies WebhooksStorage & MemoryWebhooksStorage;\n}\n"],"mappings":";;;;;;;;;;;AA8BA,MAAM,SAAY,UAAiB,UAAU,KAAA,IAAY,QAAS,gBAAgB,KAAK;AAEvF,SAAS,UAAU,GAAY,GAAqB;CAClD,IAAI,MAAM,GAAG,OAAO;CACpB,IAAI,OAAO,MAAM,YAAY,OAAO,MAAM,YAAY,MAAM,QAAQ,MAAM,MAAM,OAAO;CACvF,IAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,GAAG,OAAO;CAClD,MAAM,QAAQ,OAAO,KAAK,CAAW;CACrC,MAAM,QAAQ,OAAO,KAAK,CAAW;CACrC,IAAI,MAAM,WAAW,MAAM,QAAQ,OAAO;CAC1C,OAAO,MAAM,OAAO,MAClB,UAAW,EAA8B,IAAK,EAA8B,EAAE,CAChF;AACF;AAEA,MAAM,aAAa,IAAI,OAAO,iBAAqB;;;;;;;;;;;;;;;AAgBnD,SAAgB,oBAAoB,UAAgC,CAAC,GAA0B;CAC7F,MAAM,sBAAM,IAAI,IAAqB;CACrC,IAAI,QAAQ,SACV,KAAK,MAAM,CAAC,GAAG,QAAQ,OAAO,QAAQ,QAAQ,OAAO,GAAG,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC;CAG/E,MAAM,2BAAW,IAAI,IAAiE;CACtF,MAAM,UAAU,UAA8B;EAC5C,KAAK,MAAM,KAAK,UACd,IAAI,MAAM,IAAI,WAAW,EAAE,MAAM,GAAG,qBAAqB,EAAE,GAAG,KAAK,CAAC;CAExE;CAEA,MAAM,OAAO,KAAa,UAAmB;EAC3C,IAAI,IAAI,KAAK,MAAM,KAAK,CAAC;EACzB,OAAO;GAAE,MAAM;GAAU;EAAI,CAAC;CAChC;CACA,MAAM,UAAU,QAAgB;EAC9B,IAAI,IAAI,OAAO,GAAG,GAAG,OAAO;GAAE,MAAM;GAAU;EAAI,CAAC;CACrD;CAEA,OAAO;EACL,MAAM,QAAW,KAAgC;GAC/C,OAAO,IAAI,IAAI,GAAG,IAAI,MAAM,IAAI,IAAI,GAAG,CAAM,IAAI;EACnD;EACA,MAAM,QAAW,KAAa,OAAyB;GACrD,IAAI,KAAK,KAAK;EAChB;EACA,MAAM,WAAW,KAA4B;GAC3C,OAAO,GAAG;EACZ;EACA,MAAM,QAAQ,QAAmC;GAC/C,MAAM,MAAgB,CAAC;GACvB,KAAK,MAAM,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,WAAW,MAAM,GAAG,IAAI,KAAK,CAAC;GAChE,OAAO;EACT;EACA,MAAM,MAAM,QAAQ,IAAyB;GAC3C,MAAM,QAAQ;IAAE;IAAQ;GAAG;GAC3B,SAAS,IAAI,KAAK;GAClB,aAAa;IACX,SAAS,OAAO,KAAK;GACvB;EACF;EACA,MAAM,eAAkB,OAAuE;GAE7F,IAAI,CAAC,UADW,IAAI,IAAI,MAAM,GAAG,IAAI,IAAI,IAAI,MAAM,GAAG,IAAI,MAClC,MAAM,QAAQ,GAAG,OAAO;GAChD,IAAI,MAAM,KAAK,MAAM,IAAI;GACzB,OAAO;EACT;EACA,MAAM,SAAS,OAA4B;GACzC,MAAM,YAAY,KAAK,MAAM,MAAM,GAAG;GACtC,MAAM,MAAgB,CAAC;GACvB,KAAK,MAAM,KAAK,IAAI,KAAK,GAAG,IAAI,WAAW,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC;GAC9D,IAAI,KAAK;GAET,MAAM,UAAsB,CAAC;GAC7B,KAAK,MAAM,OAAO,KAAK;IACrB,IAAI,QAAQ,UAAU,MAAM,OAAO;IACnC,MAAM,SAASA,aAAAA,YAAY,GAAG;IAC9B,IAAI,CAAC,UAAU,OAAO,cAAc,WAAW;IAC/C,MAAM,QAAQ,IAAI,IAAI,GAAG;IACzB,IAAI,CAAC,OAAO;IACZ,MAAM,OAAOC,aAAAA,YAAY,MAAM,KAAK,MAAM,UAAU;IACpD,MAAM,WAAW,IAAI,IAAI,IAAI;IAE7B,IAAI,CAAC,YAAY,SAAS,WAAW,eAAe,SAAS,WAAW,UAAU;KAChF,OAAO,GAAG;KACV;IACF;IAEA,MAAM,eACJ,SAAS,WAAW,iBACnB,CAAC,SAAS,cAAc,KAAK,MAAM,SAAS,UAAU,KAAK;IAC9D,IAAI,SAAS,WAAW,aAAa,CAAC,cAAc;IAEpD,MAAM,aAAa,IAAI,KAAK,YAAY,MAAM,OAAO,EAAE,YAAY;IACnE,MAAM,OAAiB;KACrB,GAAG;KACH,QAAQ;KACR;KACA,WAAW,MAAM;IACnB;IACA,IAAI,MAAM,IAAI;IAGd,OAAO,GAAG;IACV,IAAIC,aAAAA,OAAO,MAAM,KAAK,YAAY,MAAM,SAAS,MAAM,UAAU,GAAG,KAAK;IACzE,QAAQ,KAAK,MAAM,IAAI,CAAC;GAC1B;GACA,OAAO;EACT;CACF;AACF"}

package/dist/memory-BMsSSwqn.mjs

@@ -0,0 +1,127 @@
+import { t as __exportAll } from "./chunk-D7D4PA-g.mjs";
+import { T as parseDueKey, m as dueKey, p as deliveryKey } from "./keys-Byyj4quQ.mjs";
+//#region src/storage/memory.ts
+/**
+* In-memory storage adapter. Zero deps. Useful for tests, dev, and the demo.
+* Values are deep-cloned on write and read so callers cannot mutate stored
+* state by reference. Implements every optional capability: `watch`,
+* `compareAndSwap`, and native `claimDue` (the delivery queue).
+*
+* @module
+*/
+var memory_exports = /* @__PURE__ */ __exportAll({ createMemoryStorage: () => createMemoryStorage });
+const clone = (value) => value === void 0 ? value : structuredClone(value);
+function deepEqual(a, b) {
+	if (a === b) return true;
+	if (typeof a !== "object" || typeof b !== "object" || a === null || b === null) return false;
+	if (Array.isArray(a) !== Array.isArray(b)) return false;
+	const aKeys = Object.keys(a);
+	const bKeys = Object.keys(b);
+	if (aKeys.length !== bKeys.length) return false;
+	return aKeys.every((k) => deepEqual(a[k], b[k]));
+}
+const DUE_KEY_RE = new RegExp(`^whk/[^/]+/due/`);
+/**
+* Create an in-memory {@link WebhooksStorage} with every optional capability.
+* `watch` fires callbacks on the next microtask after a write/remove;
+* `compareAndSwap` compares deep equality; `claimDue` scans the due index
+* across all applications and claims atomically (single-threaded JS makes the
+* scan-and-write race-free in-process).
+*
+* @example
+* ```ts
+* import { createMemoryStorage } from "@xtandard/webhooks/storage/memory";
+*
+* const storage = createMemoryStorage();
+* ```
+*/
+function createMemoryStorage(options = {}) {
+	const map = /* @__PURE__ */ new Map();
+	if (options.initial) for (const [k, val] of Object.entries(options.initial)) map.set(k, clone(val));
+	const watchers = /* @__PURE__ */ new Set();
+	const notify = (event) => {
+		for (const w of watchers) if (event.key.startsWith(w.prefix)) queueMicrotask(() => w.cb(event));
+	};
+	const set = (key, value) => {
+		map.set(key, clone(value));
+		notify({
+			type: "update",
+			key
+		});
+	};
+	const remove = (key) => {
+		if (map.delete(key)) notify({
+			type: "remove",
+			key
+		});
+	};
+	return {
+		async getItem(key) {
+			return map.has(key) ? clone(map.get(key)) : null;
+		},
+		async setItem(key, value) {
+			set(key, value);
+		},
+		async removeItem(key) {
+			remove(key);
+		},
+		async getKeys(prefix) {
+			const out = [];
+			for (const k of map.keys()) if (k.startsWith(prefix)) out.push(k);
+			return out;
+		},
+		async watch(prefix, cb) {
+			const entry = {
+				prefix,
+				cb
+			};
+			watchers.add(entry);
+			return () => {
+				watchers.delete(entry);
+			};
+		},
+		async compareAndSwap(input) {
+			if (!deepEqual(map.has(input.key) ? map.get(input.key) : null, input.expected)) return false;
+			set(input.key, input.next);
+			return true;
+		},
+		async claimDue(input) {
+			const nowMillis = Date.parse(input.now);
+			const due = [];
+			for (const k of map.keys()) if (DUE_KEY_RE.test(k)) due.push(k);
+			due.sort();
+			const claimed = [];
+			for (const key of due) {
+				if (claimed.length >= input.limit) break;
+				const parsed = parseDueKey(key);
+				if (!parsed || parsed.dueAtMillis > nowMillis) continue;
+				const entry = map.get(key);
+				if (!entry) continue;
+				const dKey = deliveryKey(entry.app, entry.deliveryId);
+				const delivery = map.get(dKey);
+				if (!delivery || delivery.status === "succeeded" || delivery.status === "failed") {
+					remove(key);
+					continue;
+				}
+				const leaseExpired = delivery.status === "delivering" && (!delivery.leaseUntil || Date.parse(delivery.leaseUntil) <= nowMillis);
+				if (delivery.status !== "pending" && !leaseExpired) continue;
+				const leaseUntil = new Date(nowMillis + input.leaseMs).toISOString();
+				const next = {
+					...delivery,
+					status: "delivering",
+					leaseUntil,
+					updatedAt: input.now
+				};
+				set(dKey, next);
+				remove(key);
+				set(dueKey(entry.app, nowMillis + input.leaseMs, entry.deliveryId), entry);
+				claimed.push(clone(next));
+			}
+			return claimed;
+		}
+	};
+}
+//#endregion
+export { memory_exports as n, createMemoryStorage as t };
+
+//# sourceMappingURL=memory-BMsSSwqn.mjs.map

package/dist/memory-BMsSSwqn.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-BMsSSwqn.mjs","names":[],"sources":["../src/storage/memory.ts"],"sourcesContent":["/**\n * In-memory storage adapter. Zero deps. Useful for tests, dev, and the demo.\n * Values are deep-cloned on write and read so callers cannot mutate stored\n * state by reference. Implements every optional capability: `watch`,\n * `compareAndSwap`, and native `claimDue` (the delivery queue).\n *\n * @module\n */\n\nimport { dueKey, deliveryKey, parseDueKey, ROOT, type DueEntry } from \"../keys.ts\";\nimport type { Delivery } from \"../schema.ts\";\nimport type {\n  CompareAndSwapWebhooksStorage,\n  DeliveryQueueStorage,\n  StorageChangeEvent,\n  WatchableWebhooksStorage,\n  WebhooksStorage,\n} from \"./contract.ts\";\n\n/** Options for {@link createMemoryStorage}. */\nexport interface MemoryStorageOptions {\n  /** Optional seed data (key → value). */\n  initial?: Record<string, unknown>;\n}\n\n/** The full capability set the memory adapter implements. */\nexport type MemoryWebhooksStorage = WatchableWebhooksStorage &\n  CompareAndSwapWebhooksStorage &\n  DeliveryQueueStorage;\n\nconst clone = <T>(value: T): T => (value === undefined ? value : (structuredClone(value) as T));\n\nfunction deepEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n  if (typeof a !== \"object\" || typeof b !== \"object\" || a === null || b === null) return false;\n  if (Array.isArray(a) !== Array.isArray(b)) return false;\n  const aKeys = Object.keys(a as object);\n  const bKeys = Object.keys(b as object);\n  if (aKeys.length !== bKeys.length) return false;\n  return aKeys.every((k) =>\n    deepEqual((a as Record<string, unknown>)[k], (b as Record<string, unknown>)[k]),\n  );\n}\n\nconst DUE_KEY_RE = new RegExp(`^${ROOT}/[^/]+/due/`);\n\n/**\n * Create an in-memory {@link WebhooksStorage} with every optional capability.\n * `watch` fires callbacks on the next microtask after a write/remove;\n * `compareAndSwap` compares deep equality; `claimDue` scans the due index\n * across all applications and claims atomically (single-threaded JS makes the\n * scan-and-write race-free in-process).\n *\n * @example\n * ```ts\n * import { createMemoryStorage } from \"@xtandard/webhooks/storage/memory\";\n *\n * const storage = createMemoryStorage();\n * ```\n */\nexport function createMemoryStorage(options: MemoryStorageOptions = {}): MemoryWebhooksStorage {\n  const map = new Map<string, unknown>();\n  if (options.initial) {\n    for (const [k, val] of Object.entries(options.initial)) map.set(k, clone(val));\n  }\n\n  const watchers = new Set<{ prefix: string; cb: (event: StorageChangeEvent) => void }>();\n  const notify = (event: StorageChangeEvent) => {\n    for (const w of watchers) {\n      if (event.key.startsWith(w.prefix)) queueMicrotask(() => w.cb(event));\n    }\n  };\n\n  const set = (key: string, value: unknown) => {\n    map.set(key, clone(value));\n    notify({ type: \"update\", key });\n  };\n  const remove = (key: string) => {\n    if (map.delete(key)) notify({ type: \"remove\", key });\n  };\n\n  return {\n    async getItem<T>(key: string): Promise<T | null> {\n      return map.has(key) ? clone(map.get(key) as T) : null;\n    },\n    async setItem<T>(key: string, value: T): Promise<void> {\n      set(key, value);\n    },\n    async removeItem(key: string): Promise<void> {\n      remove(key);\n    },\n    async getKeys(prefix: string): Promise<string[]> {\n      const out: string[] = [];\n      for (const k of map.keys()) if (k.startsWith(prefix)) out.push(k);\n      return out;\n    },\n    async watch(prefix, cb): Promise<() => void> {\n      const entry = { prefix, cb };\n      watchers.add(entry);\n      return () => {\n        watchers.delete(entry);\n      };\n    },\n    async compareAndSwap<T>(input: { key: string; expected: T | null; next: T }): Promise<boolean> {\n      const current = map.has(input.key) ? map.get(input.key) : null;\n      if (!deepEqual(current, input.expected)) return false;\n      set(input.key, input.next);\n      return true;\n    },\n    async claimDue(input): Promise<Delivery[]> {\n      const nowMillis = Date.parse(input.now);\n      const due: string[] = [];\n      for (const k of map.keys()) if (DUE_KEY_RE.test(k)) due.push(k);\n      due.sort(); // lexicographic = chronological (13-digit zero-padded millis)\n\n      const claimed: Delivery[] = [];\n      for (const key of due) {\n        if (claimed.length >= input.limit) break;\n        const parsed = parseDueKey(key);\n        if (!parsed || parsed.dueAtMillis > nowMillis) continue;\n        const entry = map.get(key) as DueEntry | undefined;\n        if (!entry) continue;\n        const dKey = deliveryKey(entry.app, entry.deliveryId);\n        const delivery = map.get(dKey) as Delivery | undefined;\n        // Orphaned or already-terminal entries are garbage — sweep them.\n        if (!delivery || delivery.status === \"succeeded\" || delivery.status === \"failed\") {\n          remove(key);\n          continue;\n        }\n        // Claimable = pending, or delivering with an expired lease.\n        const leaseExpired =\n          delivery.status === \"delivering\" &&\n          (!delivery.leaseUntil || Date.parse(delivery.leaseUntil) <= nowMillis);\n        if (delivery.status !== \"pending\" && !leaseExpired) continue;\n\n        const leaseUntil = new Date(nowMillis + input.leaseMs).toISOString();\n        const next: Delivery = {\n          ...delivery,\n          status: \"delivering\",\n          leaseUntil,\n          updatedAt: input.now,\n        };\n        set(dKey, next);\n        // Reposition the due entry at the lease expiry so a crashed claimer's\n        // work re-surfaces automatically.\n        remove(key);\n        set(dueKey(entry.app, nowMillis + input.leaseMs, entry.deliveryId), entry);\n        claimed.push(clone(next));\n      }\n      return claimed;\n    },\n  } satisfies WebhooksStorage & MemoryWebhooksStorage;\n}\n"],"mappings":";;;;;;;;;;;;AA8BA,MAAM,SAAY,UAAiB,UAAU,KAAA,IAAY,QAAS,gBAAgB,KAAK;AAEvF,SAAS,UAAU,GAAY,GAAqB;CAClD,IAAI,MAAM,GAAG,OAAO;CACpB,IAAI,OAAO,MAAM,YAAY,OAAO,MAAM,YAAY,MAAM,QAAQ,MAAM,MAAM,OAAO;CACvF,IAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,GAAG,OAAO;CAClD,MAAM,QAAQ,OAAO,KAAK,CAAW;CACrC,MAAM,QAAQ,OAAO,KAAK,CAAW;CACrC,IAAI,MAAM,WAAW,MAAM,QAAQ,OAAO;CAC1C,OAAO,MAAM,OAAO,MAClB,UAAW,EAA8B,IAAK,EAA8B,EAAE,CAChF;AACF;AAEA,MAAM,aAAa,IAAI,OAAO,iBAAqB;;;;;;;;;;;;;;;AAgBnD,SAAgB,oBAAoB,UAAgC,CAAC,GAA0B;CAC7F,MAAM,sBAAM,IAAI,IAAqB;CACrC,IAAI,QAAQ,SACV,KAAK,MAAM,CAAC,GAAG,QAAQ,OAAO,QAAQ,QAAQ,OAAO,GAAG,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC;CAG/E,MAAM,2BAAW,IAAI,IAAiE;CACtF,MAAM,UAAU,UAA8B;EAC5C,KAAK,MAAM,KAAK,UACd,IAAI,MAAM,IAAI,WAAW,EAAE,MAAM,GAAG,qBAAqB,EAAE,GAAG,KAAK,CAAC;CAExE;CAEA,MAAM,OAAO,KAAa,UAAmB;EAC3C,IAAI,IAAI,KAAK,MAAM,KAAK,CAAC;EACzB,OAAO;GAAE,MAAM;GAAU;EAAI,CAAC;CAChC;CACA,MAAM,UAAU,QAAgB;EAC9B,IAAI,IAAI,OAAO,GAAG,GAAG,OAAO;GAAE,MAAM;GAAU;EAAI,CAAC;CACrD;CAEA,OAAO;EACL,MAAM,QAAW,KAAgC;GAC/C,OAAO,IAAI,IAAI,GAAG,IAAI,MAAM,IAAI,IAAI,GAAG,CAAM,IAAI;EACnD;EACA,MAAM,QAAW,KAAa,OAAyB;GACrD,IAAI,KAAK,KAAK;EAChB;EACA,MAAM,WAAW,KAA4B;GAC3C,OAAO,GAAG;EACZ;EACA,MAAM,QAAQ,QAAmC;GAC/C,MAAM,MAAgB,CAAC;GACvB,KAAK,MAAM,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,WAAW,MAAM,GAAG,IAAI,KAAK,CAAC;GAChE,OAAO;EACT;EACA,MAAM,MAAM,QAAQ,IAAyB;GAC3C,MAAM,QAAQ;IAAE;IAAQ;GAAG;GAC3B,SAAS,IAAI,KAAK;GAClB,aAAa;IACX,SAAS,OAAO,KAAK;GACvB;EACF;EACA,MAAM,eAAkB,OAAuE;GAE7F,IAAI,CAAC,UADW,IAAI,IAAI,MAAM,GAAG,IAAI,IAAI,IAAI,MAAM,GAAG,IAAI,MAClC,MAAM,QAAQ,GAAG,OAAO;GAChD,IAAI,MAAM,KAAK,MAAM,IAAI;GACzB,OAAO;EACT;EACA,MAAM,SAAS,OAA4B;GACzC,MAAM,YAAY,KAAK,MAAM,MAAM,GAAG;GACtC,MAAM,MAAgB,CAAC;GACvB,KAAK,MAAM,KAAK,IAAI,KAAK,GAAG,IAAI,WAAW,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC;GAC9D,IAAI,KAAK;GAET,MAAM,UAAsB,CAAC;GAC7B,KAAK,MAAM,OAAO,KAAK;IACrB,IAAI,QAAQ,UAAU,MAAM,OAAO;IACnC,MAAM,SAAS,YAAY,GAAG;IAC9B,IAAI,CAAC,UAAU,OAAO,cAAc,WAAW;IAC/C,MAAM,QAAQ,IAAI,IAAI,GAAG;IACzB,IAAI,CAAC,OAAO;IACZ,MAAM,OAAO,YAAY,MAAM,KAAK,MAAM,UAAU;IACpD,MAAM,WAAW,IAAI,IAAI,IAAI;IAE7B,IAAI,CAAC,YAAY,SAAS,WAAW,eAAe,SAAS,WAAW,UAAU;KAChF,OAAO,GAAG;KACV;IACF;IAEA,MAAM,eACJ,SAAS,WAAW,iBACnB,CAAC,SAAS,cAAc,KAAK,MAAM,SAAS,UAAU,KAAK;IAC9D,IAAI,SAAS,WAAW,aAAa,CAAC,cAAc;IAEpD,MAAM,aAAa,IAAI,KAAK,YAAY,MAAM,OAAO,EAAE,YAAY;IACnE,MAAM,OAAiB;KACrB,GAAG;KACH,QAAQ;KACR;KACA,WAAW,MAAM;IACnB;IACA,IAAI,MAAM,IAAI;IAGd,OAAO,GAAG;IACV,IAAI,OAAO,MAAM,KAAK,YAAY,MAAM,SAAS,MAAM,UAAU,GAAG,KAAK;IACzE,QAAQ,KAAK,MAAM,IAAI,CAAC;GAC1B;GACA,OAAO;EACT;CACF;AACF"}

package/dist/memory-FnMJWCmB.d.cts

@@ -0,0 +1,28 @@
+import { a as WatchableWebhooksStorage, n as DeliveryQueueStorage, t as CompareAndSwapWebhooksStorage } from "./contract-8h-Azxa5.cjs";
+
+//#region src/storage/memory.d.ts
+/** Options for {@link createMemoryStorage}. */
+interface MemoryStorageOptions {
+  /** Optional seed data (key → value). */
+  initial?: Record<string, unknown>;
+}
+/** The full capability set the memory adapter implements. */
+type MemoryWebhooksStorage = WatchableWebhooksStorage & CompareAndSwapWebhooksStorage & DeliveryQueueStorage;
+/**
+ * Create an in-memory {@link WebhooksStorage} with every optional capability.
+ * `watch` fires callbacks on the next microtask after a write/remove;
+ * `compareAndSwap` compares deep equality; `claimDue` scans the due index
+ * across all applications and claims atomically (single-threaded JS makes the
+ * scan-and-write race-free in-process).
+ *
+ * @example
+ * ```ts
+ * import { createMemoryStorage } from "@xtandard/webhooks/storage/memory";
+ *
+ * const storage = createMemoryStorage();
+ * ```
+ */
+declare function createMemoryStorage(options?: MemoryStorageOptions): MemoryWebhooksStorage;
+//#endregion
+export { MemoryWebhooksStorage as n, createMemoryStorage as r, MemoryStorageOptions as t };
+//# sourceMappingURL=memory-FnMJWCmB.d.cts.map

package/dist/memory-qIvANEs_.d.mts

@@ -0,0 +1,28 @@
+import { a as WatchableWebhooksStorage, n as DeliveryQueueStorage, t as CompareAndSwapWebhooksStorage } from "./contract-DhQ4JjGG.mjs";
+
+//#region src/storage/memory.d.ts
+/** Options for {@link createMemoryStorage}. */
+interface MemoryStorageOptions {
+  /** Optional seed data (key → value). */
+  initial?: Record<string, unknown>;
+}
+/** The full capability set the memory adapter implements. */
+type MemoryWebhooksStorage = WatchableWebhooksStorage & CompareAndSwapWebhooksStorage & DeliveryQueueStorage;
+/**
+ * Create an in-memory {@link WebhooksStorage} with every optional capability.
+ * `watch` fires callbacks on the next microtask after a write/remove;
+ * `compareAndSwap` compares deep equality; `claimDue` scans the due index
+ * across all applications and claims atomically (single-threaded JS makes the
+ * scan-and-write race-free in-process).
+ *
+ * @example
+ * ```ts
+ * import { createMemoryStorage } from "@xtandard/webhooks/storage/memory";
+ *
+ * const storage = createMemoryStorage();
+ * ```
+ */
+declare function createMemoryStorage(options?: MemoryStorageOptions): MemoryWebhooksStorage;
+//#endregion
+export { MemoryWebhooksStorage as n, createMemoryStorage as r, MemoryStorageOptions as t };
+//# sourceMappingURL=memory-qIvANEs_.d.mts.map

package/dist/mongodb-Cy8yo0uk.cjs

@@ -0,0 +1,108 @@
+const require_keys = require("./keys-FiKpaVHX.cjs");
+const require_contract = require("./contract-Bf1qguwt.cjs");
+//#region src/storage/mongodb.ts
+var mongodb_exports = /* @__PURE__ */ require_keys.__exportAll({ createMongoStorage: () => createMongoStorage });
+/**
+* Escape characters that are special in a regular expression so a literal
+* prefix string can be embedded into an anchored `^...` match.
+*/
+function escapeRegex(input) {
+	return input.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/**
+* Create a MongoDB-backed {@link MongoWebhooksStorage}. Connection is lazy: the
+* client is created/connected on the first storage operation and reused
+* thereafter, guarded by a single connection promise so concurrent calls connect
+* once.
+*
+* @example
+* ```ts
+* import { createMongoStorage } from "@xtandard/webhooks/storage/mongodb";
+*
+* const storage = createMongoStorage({
+*   url: process.env.MONGODB_URL ?? "mongodb://localhost:27017",
+*   dbName: "myapp",
+*   collectionName: "webhooks_kv",
+* });
+*
+* // Disconnect when the process exits:
+* // process.on("SIGTERM", () => storage.close());
+* ```
+*/
+function createMongoStorage(options) {
+	const { url, dbName = "xtandard_webhooks", collectionName = "webhooks_kv" } = options;
+	const ownsClient = !options.client;
+	let client = options.client;
+	let connecting;
+	/** Resolve a connected collection, creating/connecting the client on first use. */
+	async function getCollection() {
+		connecting ??= (async () => {
+			if (!client) {
+				let MongoClientCtor;
+				try {
+					({MongoClient: MongoClientCtor} = await import("mongodb"));
+				} catch {
+					require_contract.requirePeer("mongodb", "storage/mongodb");
+				}
+				if (url === void 0) throw new Error("@xtandard/webhooks/storage/mongodb requires either a \"client\" or a \"url\" option.");
+				client = new MongoClientCtor(url);
+			}
+			try {
+				await client.connect();
+			} catch (error) {
+				if (!isAlreadyConnected(error)) throw error;
+			}
+			return client.db(dbName).collection(collectionName);
+		})();
+		try {
+			return await connecting;
+		} catch (error) {
+			connecting = void 0;
+			throw error;
+		}
+	}
+	return {
+		async getItem(key) {
+			const doc = await (await getCollection()).findOne({ _id: key });
+			return doc ? doc.value : null;
+		},
+		async setItem(key, value) {
+			await (await getCollection()).updateOne({ _id: key }, { $set: { value } }, { upsert: true });
+		},
+		async removeItem(key) {
+			await (await getCollection()).deleteOne({ _id: key });
+		},
+		async getKeys(prefix) {
+			const cursor = (await getCollection()).find({ _id: { $regex: `^${escapeRegex(prefix)}` } }).project({ _id: 1 });
+			const out = [];
+			for await (const doc of cursor) out.push(doc._id);
+			return out;
+		},
+		async close() {
+			if (ownsClient && client) await client.close();
+		}
+	};
+}
+/**
+* Heuristic: does this error indicate the client was already connected? The
+* driver's exact message has varied across versions, so match loosely.
+*/
+function isAlreadyConnected(error) {
+	const message = error instanceof Error ? error.message.toLowerCase() : "";
+	return message.includes("already") && message.includes("connect");
+}
+//#endregion
+Object.defineProperty(exports, "createMongoStorage", {
+	enumerable: true,
+	get: function() {
+		return createMongoStorage;
+	}
+});
+Object.defineProperty(exports, "mongodb_exports", {
+	enumerable: true,
+	get: function() {
+		return mongodb_exports;
+	}
+});
+
+//# sourceMappingURL=mongodb-Cy8yo0uk.cjs.map

package/dist/mongodb-Cy8yo0uk.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb-Cy8yo0uk.cjs","names":[],"sources":["../src/storage/mongodb.ts"],"sourcesContent":["/**\n * MongoDB storage adapter built on the [`mongodb`](https://github.com/mongodb/node-mongodb-native)\n * driver, an optional peer dependency. You can either pass a pre-constructed\n * (optionally pre-connected) `MongoClient`, or a connection `url` to create and\n * connect a client lazily on first use.\n *\n * The backend is a single collection of `{ _id: <key>, value: <any> }` documents.\n * The storage key is stored verbatim as the document `_id`, and the value is\n * stored directly as a BSON field — MongoDB persists arbitrary objects, arrays,\n * and primitives, so no JSON (de)serialisation round-trip is needed.\n *\n * `getKeys(prefix)` matches `_id` against an anchored regular expression\n * (`^<escaped prefix>`), projecting only `_id` so the server never ships values\n * back for a key listing.\n *\n * ## Why no `watch`\n *\n * MongoDB change streams (the natural way to back {@link WatchableWebhooksStorage})\n * require a replica set or sharded cluster — they are unavailable on a standalone\n * `mongod`. To keep this adapter usable against any deployment, `watch` is\n * intentionally **not** implemented; the core feature-detects its absence via\n * {@link import(\"./contract.ts\").isWatchable} and falls back to polling.\n *\n * @module\n */\n\nimport type { MongoClient, Collection, Document } from \"mongodb\";\nimport { requirePeer } from \"./contract.ts\";\nimport type { WebhooksStorage } from \"./contract.ts\";\n\n/** Options for {@link createMongoStorage}. */\nexport interface MongoStorageOptions {\n  /** A pre-constructed (optionally pre-connected) mongodb `MongoClient`. */\n  client?: MongoClient;\n  /**\n   * Connection string (e.g. `mongodb://localhost:27017`). When no `client` is\n   * given, a `MongoClient` is created lazily on first use via a dynamic\n   * `import(\"mongodb\")`.\n   */\n  url?: string;\n  /** Database name. Defaults to `\"xtandard_webhooks\"`. */\n  dbName?: string;\n  /** Collection name. Defaults to `\"webhooks_kv\"`. */\n  collectionName?: string;\n}\n\n/**\n * A {@link WebhooksStorage} backed by MongoDB, plus a `close()` method that\n * disconnects the client — but only the one this adapter created. A client you\n * passed in is left for you to manage.\n *\n * Note: `watch` is deliberately absent (see the module docs); this is a plain\n * {@link WebhooksStorage}, not a {@link import(\"./contract.ts\").WatchableWebhooksStorage}.\n */\nexport interface MongoWebhooksStorage extends WebhooksStorage {\n  /** Disconnect the underlying client if this adapter created it. No-op otherwise. */\n  close(): Promise<void>;\n}\n\n/** Shape of a single key/value document stored in the backing collection. */\ninterface KvDoc extends Document {\n  /** The storage key, stored verbatim as the Mongo document id. */\n  _id: string;\n  /** The stored value — arbitrary BSON (object, array, or primitive). */\n  value: unknown;\n}\n\n/**\n * Escape characters that are special in a regular expression so a literal\n * prefix string can be embedded into an anchored `^...` match.\n */\nfunction escapeRegex(input: string): string {\n  return input.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\n/**\n * Create a MongoDB-backed {@link MongoWebhooksStorage}. Connection is lazy: the\n * client is created/connected on the first storage operation and reused\n * thereafter, guarded by a single connection promise so concurrent calls connect\n * once.\n *\n * @example\n * ```ts\n * import { createMongoStorage } from \"@xtandard/webhooks/storage/mongodb\";\n *\n * const storage = createMongoStorage({\n *   url: process.env.MONGODB_URL ?? \"mongodb://localhost:27017\",\n *   dbName: \"myapp\",\n *   collectionName: \"webhooks_kv\",\n * });\n *\n * // Disconnect when the process exits:\n * // process.on(\"SIGTERM\", () => storage.close());\n * ```\n */\nexport function createMongoStorage(options: MongoStorageOptions): MongoWebhooksStorage {\n  const { url, dbName = \"xtandard_webhooks\", collectionName = \"webhooks_kv\" } = options;\n  const ownsClient = !options.client;\n\n  let client: MongoClient | undefined = options.client;\n  let connecting: Promise<Collection<KvDoc>> | undefined;\n\n  /** Resolve a connected collection, creating/connecting the client on first use. */\n  async function getCollection(): Promise<Collection<KvDoc>> {\n    connecting ??= (async () => {\n      if (!client) {\n        let MongoClientCtor: new (url: string) => MongoClient;\n        try {\n          ({ MongoClient: MongoClientCtor } = (await import(\"mongodb\")) as unknown as {\n            MongoClient: new (url: string) => MongoClient;\n          });\n        } catch {\n          requirePeer(\"mongodb\", \"storage/mongodb\");\n        }\n        if (url === undefined) {\n          throw new Error(\n            '@xtandard/webhooks/storage/mongodb requires either a \"client\" or a \"url\" option.',\n          );\n        }\n        client = new MongoClientCtor(url);\n      }\n      // node-mongodb's connect() is idempotent — calling it on an already\n      // connected client is a no-op — but guard regardless so a passed-in,\n      // already-connected client never surfaces a spurious error.\n      try {\n        await client.connect();\n      } catch (error) {\n        if (!isAlreadyConnected(error)) throw error;\n      }\n      return client.db(dbName).collection<KvDoc>(collectionName);\n    })();\n    try {\n      return await connecting;\n    } catch (error) {\n      // Let a later operation retry the connection rather than caching a failure.\n      connecting = undefined;\n      throw error;\n    }\n  }\n\n  return {\n    async getItem<T>(key: string): Promise<T | null> {\n      const collection = await getCollection();\n      const doc = await collection.findOne({ _id: key });\n      return doc ? (doc.value as T) : null;\n    },\n\n    async setItem<T>(key: string, value: T): Promise<void> {\n      const collection = await getCollection();\n      await collection.updateOne({ _id: key }, { $set: { value } }, { upsert: true });\n    },\n\n    async removeItem(key: string): Promise<void> {\n      const collection = await getCollection();\n      await collection.deleteOne({ _id: key });\n    },\n\n    async getKeys(prefix: string): Promise<string[]> {\n      const collection = await getCollection();\n      const cursor = collection\n        .find({ _id: { $regex: `^${escapeRegex(prefix)}` } })\n        .project<{ _id: string }>({ _id: 1 });\n      const out: string[] = [];\n      for await (const doc of cursor) out.push(doc._id);\n      return out;\n    },\n\n    async close(): Promise<void> {\n      if (ownsClient && client) await client.close();\n    },\n  } satisfies MongoWebhooksStorage;\n}\n\n/**\n * Heuristic: does this error indicate the client was already connected? The\n * driver's exact message has varied across versions, so match loosely.\n */\nfunction isAlreadyConnected(error: unknown): boolean {\n  const message = error instanceof Error ? error.message.toLowerCase() : \"\";\n  return message.includes(\"already\") && message.includes(\"connect\");\n}\n"],"mappings":";;;;;;;;AAuEA,SAAS,YAAY,OAAuB;CAC1C,OAAO,MAAM,QAAQ,uBAAuB,MAAM;AACpD;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,mBAAmB,SAAoD;CACrF,MAAM,EAAE,KAAK,SAAS,qBAAqB,iBAAiB,kBAAkB;CAC9E,MAAM,aAAa,CAAC,QAAQ;CAE5B,IAAI,SAAkC,QAAQ;CAC9C,IAAI;;CAGJ,eAAe,gBAA4C;EACzD,gBAAgB,YAAY;GAC1B,IAAI,CAAC,QAAQ;IACX,IAAI;IACJ,IAAI;KACF,CAAC,CAAE,aAAa,mBAAqB,MAAM,OAAO;IAGpD,QAAQ;KACN,iBAAA,YAAY,WAAW,iBAAiB;IAC1C;IACA,IAAI,QAAQ,KAAA,GACV,MAAM,IAAI,MACR,sFACF;IAEF,SAAS,IAAI,gBAAgB,GAAG;GAClC;GAIA,IAAI;IACF,MAAM,OAAO,QAAQ;GACvB,SAAS,OAAO;IACd,IAAI,CAAC,mBAAmB,KAAK,GAAG,MAAM;GACxC;GACA,OAAO,OAAO,GAAG,MAAM,EAAE,WAAkB,cAAc;EAC3D,GAAG;EACH,IAAI;GACF,OAAO,MAAM;EACf,SAAS,OAAO;GAEd,aAAa,KAAA;GACb,MAAM;EACR;CACF;CAEA,OAAO;EACL,MAAM,QAAW,KAAgC;GAE/C,MAAM,MAAM,OAAM,MADO,cAAc,GACV,QAAQ,EAAE,KAAK,IAAI,CAAC;GACjD,OAAO,MAAO,IAAI,QAAc;EAClC;EAEA,MAAM,QAAW,KAAa,OAAyB;GAErD,OAAM,MADmB,cAAc,GACtB,UAAU,EAAE,KAAK,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC;EAChF;EAEA,MAAM,WAAW,KAA4B;GAE3C,OAAM,MADmB,cAAc,GACtB,UAAU,EAAE,KAAK,IAAI,CAAC;EACzC;EAEA,MAAM,QAAQ,QAAmC;GAE/C,MAAM,UAAS,MADU,cAAc,GAEpC,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,YAAY,MAAM,IAAI,EAAE,CAAC,EACnD,QAAyB,EAAE,KAAK,EAAE,CAAC;GACtC,MAAM,MAAgB,CAAC;GACvB,WAAW,MAAM,OAAO,QAAQ,IAAI,KAAK,IAAI,GAAG;GAChD,OAAO;EACT;EAEA,MAAM,QAAuB;GAC3B,IAAI,cAAc,QAAQ,MAAM,OAAO,MAAM;EAC/C;CACF;AACF;;;;;AAMA,SAAS,mBAAmB,OAAyB;CACnD,MAAM,UAAU,iBAAiB,QAAQ,MAAM,QAAQ,YAAY,IAAI;CACvE,OAAO,QAAQ,SAAS,SAAS,KAAK,QAAQ,SAAS,SAAS;AAClE"}

package/dist/mongodb-Ddaq9mml.mjs

@@ -0,0 +1,97 @@
+import { t as __exportAll } from "./chunk-D7D4PA-g.mjs";
+import { a as requirePeer } from "./contract-BEhDcd_5.mjs";
+//#region src/storage/mongodb.ts
+var mongodb_exports = /* @__PURE__ */ __exportAll({ createMongoStorage: () => createMongoStorage });
+/**
+* Escape characters that are special in a regular expression so a literal
+* prefix string can be embedded into an anchored `^...` match.
+*/
+function escapeRegex(input) {
+	return input.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/**
+* Create a MongoDB-backed {@link MongoWebhooksStorage}. Connection is lazy: the
+* client is created/connected on the first storage operation and reused
+* thereafter, guarded by a single connection promise so concurrent calls connect
+* once.
+*
+* @example
+* ```ts
+* import { createMongoStorage } from "@xtandard/webhooks/storage/mongodb";
+*
+* const storage = createMongoStorage({
+*   url: process.env.MONGODB_URL ?? "mongodb://localhost:27017",
+*   dbName: "myapp",
+*   collectionName: "webhooks_kv",
+* });
+*
+* // Disconnect when the process exits:
+* // process.on("SIGTERM", () => storage.close());
+* ```
+*/
+function createMongoStorage(options) {
+	const { url, dbName = "xtandard_webhooks", collectionName = "webhooks_kv" } = options;
+	const ownsClient = !options.client;
+	let client = options.client;
+	let connecting;
+	/** Resolve a connected collection, creating/connecting the client on first use. */
+	async function getCollection() {
+		connecting ??= (async () => {
+			if (!client) {
+				let MongoClientCtor;
+				try {
+					({MongoClient: MongoClientCtor} = await import("mongodb"));
+				} catch {
+					requirePeer("mongodb", "storage/mongodb");
+				}
+				if (url === void 0) throw new Error("@xtandard/webhooks/storage/mongodb requires either a \"client\" or a \"url\" option.");
+				client = new MongoClientCtor(url);
+			}
+			try {
+				await client.connect();
+			} catch (error) {
+				if (!isAlreadyConnected(error)) throw error;
+			}
+			return client.db(dbName).collection(collectionName);
+		})();
+		try {
+			return await connecting;
+		} catch (error) {
+			connecting = void 0;
+			throw error;
+		}
+	}
+	return {
+		async getItem(key) {
+			const doc = await (await getCollection()).findOne({ _id: key });
+			return doc ? doc.value : null;
+		},
+		async setItem(key, value) {
+			await (await getCollection()).updateOne({ _id: key }, { $set: { value } }, { upsert: true });
+		},
+		async removeItem(key) {
+			await (await getCollection()).deleteOne({ _id: key });
+		},
+		async getKeys(prefix) {
+			const cursor = (await getCollection()).find({ _id: { $regex: `^${escapeRegex(prefix)}` } }).project({ _id: 1 });
+			const out = [];
+			for await (const doc of cursor) out.push(doc._id);
+			return out;
+		},
+		async close() {
+			if (ownsClient && client) await client.close();
+		}
+	};
+}
+/**
+* Heuristic: does this error indicate the client was already connected? The
+* driver's exact message has varied across versions, so match loosely.
+*/
+function isAlreadyConnected(error) {
+	const message = error instanceof Error ? error.message.toLowerCase() : "";
+	return message.includes("already") && message.includes("connect");
+}
+//#endregion
+export { mongodb_exports as n, createMongoStorage as t };
+
+//# sourceMappingURL=mongodb-Ddaq9mml.mjs.map

package/dist/mongodb-Ddaq9mml.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb-Ddaq9mml.mjs","names":[],"sources":["../src/storage/mongodb.ts"],"sourcesContent":["/**\n * MongoDB storage adapter built on the [`mongodb`](https://github.com/mongodb/node-mongodb-native)\n * driver, an optional peer dependency. You can either pass a pre-constructed\n * (optionally pre-connected) `MongoClient`, or a connection `url` to create and\n * connect a client lazily on first use.\n *\n * The backend is a single collection of `{ _id: <key>, value: <any> }` documents.\n * The storage key is stored verbatim as the document `_id`, and the value is\n * stored directly as a BSON field — MongoDB persists arbitrary objects, arrays,\n * and primitives, so no JSON (de)serialisation round-trip is needed.\n *\n * `getKeys(prefix)` matches `_id` against an anchored regular expression\n * (`^<escaped prefix>`), projecting only `_id` so the server never ships values\n * back for a key listing.\n *\n * ## Why no `watch`\n *\n * MongoDB change streams (the natural way to back {@link WatchableWebhooksStorage})\n * require a replica set or sharded cluster — they are unavailable on a standalone\n * `mongod`. To keep this adapter usable against any deployment, `watch` is\n * intentionally **not** implemented; the core feature-detects its absence via\n * {@link import(\"./contract.ts\").isWatchable} and falls back to polling.\n *\n * @module\n */\n\nimport type { MongoClient, Collection, Document } from \"mongodb\";\nimport { requirePeer } from \"./contract.ts\";\nimport type { WebhooksStorage } from \"./contract.ts\";\n\n/** Options for {@link createMongoStorage}. */\nexport interface MongoStorageOptions {\n  /** A pre-constructed (optionally pre-connected) mongodb `MongoClient`. */\n  client?: MongoClient;\n  /**\n   * Connection string (e.g. `mongodb://localhost:27017`). When no `client` is\n   * given, a `MongoClient` is created lazily on first use via a dynamic\n   * `import(\"mongodb\")`.\n   */\n  url?: string;\n  /** Database name. Defaults to `\"xtandard_webhooks\"`. */\n  dbName?: string;\n  /** Collection name. Defaults to `\"webhooks_kv\"`. */\n  collectionName?: string;\n}\n\n/**\n * A {@link WebhooksStorage} backed by MongoDB, plus a `close()` method that\n * disconnects the client — but only the one this adapter created. A client you\n * passed in is left for you to manage.\n *\n * Note: `watch` is deliberately absent (see the module docs); this is a plain\n * {@link WebhooksStorage}, not a {@link import(\"./contract.ts\").WatchableWebhooksStorage}.\n */\nexport interface MongoWebhooksStorage extends WebhooksStorage {\n  /** Disconnect the underlying client if this adapter created it. No-op otherwise. */\n  close(): Promise<void>;\n}\n\n/** Shape of a single key/value document stored in the backing collection. */\ninterface KvDoc extends Document {\n  /** The storage key, stored verbatim as the Mongo document id. */\n  _id: string;\n  /** The stored value — arbitrary BSON (object, array, or primitive). */\n  value: unknown;\n}\n\n/**\n * Escape characters that are special in a regular expression so a literal\n * prefix string can be embedded into an anchored `^...` match.\n */\nfunction escapeRegex(input: string): string {\n  return input.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\n/**\n * Create a MongoDB-backed {@link MongoWebhooksStorage}. Connection is lazy: the\n * client is created/connected on the first storage operation and reused\n * thereafter, guarded by a single connection promise so concurrent calls connect\n * once.\n *\n * @example\n * ```ts\n * import { createMongoStorage } from \"@xtandard/webhooks/storage/mongodb\";\n *\n * const storage = createMongoStorage({\n *   url: process.env.MONGODB_URL ?? \"mongodb://localhost:27017\",\n *   dbName: \"myapp\",\n *   collectionName: \"webhooks_kv\",\n * });\n *\n * // Disconnect when the process exits:\n * // process.on(\"SIGTERM\", () => storage.close());\n * ```\n */\nexport function createMongoStorage(options: MongoStorageOptions): MongoWebhooksStorage {\n  const { url, dbName = \"xtandard_webhooks\", collectionName = \"webhooks_kv\" } = options;\n  const ownsClient = !options.client;\n\n  let client: MongoClient | undefined = options.client;\n  let connecting: Promise<Collection<KvDoc>> | undefined;\n\n  /** Resolve a connected collection, creating/connecting the client on first use. */\n  async function getCollection(): Promise<Collection<KvDoc>> {\n    connecting ??= (async () => {\n      if (!client) {\n        let MongoClientCtor: new (url: string) => MongoClient;\n        try {\n          ({ MongoClient: MongoClientCtor } = (await import(\"mongodb\")) as unknown as {\n            MongoClient: new (url: string) => MongoClient;\n          });\n        } catch {\n          requirePeer(\"mongodb\", \"storage/mongodb\");\n        }\n        if (url === undefined) {\n          throw new Error(\n            '@xtandard/webhooks/storage/mongodb requires either a \"client\" or a \"url\" option.',\n          );\n        }\n        client = new MongoClientCtor(url);\n      }\n      // node-mongodb's connect() is idempotent — calling it on an already\n      // connected client is a no-op — but guard regardless so a passed-in,\n      // already-connected client never surfaces a spurious error.\n      try {\n        await client.connect();\n      } catch (error) {\n        if (!isAlreadyConnected(error)) throw error;\n      }\n      return client.db(dbName).collection<KvDoc>(collectionName);\n    })();\n    try {\n      return await connecting;\n    } catch (error) {\n      // Let a later operation retry the connection rather than caching a failure.\n      connecting = undefined;\n      throw error;\n    }\n  }\n\n  return {\n    async getItem<T>(key: string): Promise<T | null> {\n      const collection = await getCollection();\n      const doc = await collection.findOne({ _id: key });\n      return doc ? (doc.value as T) : null;\n    },\n\n    async setItem<T>(key: string, value: T): Promise<void> {\n      const collection = await getCollection();\n      await collection.updateOne({ _id: key }, { $set: { value } }, { upsert: true });\n    },\n\n    async removeItem(key: string): Promise<void> {\n      const collection = await getCollection();\n      await collection.deleteOne({ _id: key });\n    },\n\n    async getKeys(prefix: string): Promise<string[]> {\n      const collection = await getCollection();\n      const cursor = collection\n        .find({ _id: { $regex: `^${escapeRegex(prefix)}` } })\n        .project<{ _id: string }>({ _id: 1 });\n      const out: string[] = [];\n      for await (const doc of cursor) out.push(doc._id);\n      return out;\n    },\n\n    async close(): Promise<void> {\n      if (ownsClient && client) await client.close();\n    },\n  } satisfies MongoWebhooksStorage;\n}\n\n/**\n * Heuristic: does this error indicate the client was already connected? The\n * driver's exact message has varied across versions, so match loosely.\n */\nfunction isAlreadyConnected(error: unknown): boolean {\n  const message = error instanceof Error ? error.message.toLowerCase() : \"\";\n  return message.includes(\"already\") && message.includes(\"connect\");\n}\n"],"mappings":";;;;;;;;AAuEA,SAAS,YAAY,OAAuB;CAC1C,OAAO,MAAM,QAAQ,uBAAuB,MAAM;AACpD;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,mBAAmB,SAAoD;CACrF,MAAM,EAAE,KAAK,SAAS,qBAAqB,iBAAiB,kBAAkB;CAC9E,MAAM,aAAa,CAAC,QAAQ;CAE5B,IAAI,SAAkC,QAAQ;CAC9C,IAAI;;CAGJ,eAAe,gBAA4C;EACzD,gBAAgB,YAAY;GAC1B,IAAI,CAAC,QAAQ;IACX,IAAI;IACJ,IAAI;KACF,CAAC,CAAE,aAAa,mBAAqB,MAAM,OAAO;IAGpD,QAAQ;KACN,YAAY,WAAW,iBAAiB;IAC1C;IACA,IAAI,QAAQ,KAAA,GACV,MAAM,IAAI,MACR,sFACF;IAEF,SAAS,IAAI,gBAAgB,GAAG;GAClC;GAIA,IAAI;IACF,MAAM,OAAO,QAAQ;GACvB,SAAS,OAAO;IACd,IAAI,CAAC,mBAAmB,KAAK,GAAG,MAAM;GACxC;GACA,OAAO,OAAO,GAAG,MAAM,EAAE,WAAkB,cAAc;EAC3D,GAAG;EACH,IAAI;GACF,OAAO,MAAM;EACf,SAAS,OAAO;GAEd,aAAa,KAAA;GACb,MAAM;EACR;CACF;CAEA,OAAO;EACL,MAAM,QAAW,KAAgC;GAE/C,MAAM,MAAM,OAAM,MADO,cAAc,GACV,QAAQ,EAAE,KAAK,IAAI,CAAC;GACjD,OAAO,MAAO,IAAI,QAAc;EAClC;EAEA,MAAM,QAAW,KAAa,OAAyB;GAErD,OAAM,MADmB,cAAc,GACtB,UAAU,EAAE,KAAK,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC;EAChF;EAEA,MAAM,WAAW,KAA4B;GAE3C,OAAM,MADmB,cAAc,GACtB,UAAU,EAAE,KAAK,IAAI,CAAC;EACzC;EAEA,MAAM,QAAQ,QAAmC;GAE/C,MAAM,UAAS,MADU,cAAc,GAEpC,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,YAAY,MAAM,IAAI,EAAE,CAAC,EACnD,QAAyB,EAAE,KAAK,EAAE,CAAC;GACtC,MAAM,MAAgB,CAAC;GACvB,WAAW,MAAM,OAAO,QAAQ,IAAI,KAAK,IAAI,GAAG;GAChD,OAAO;EACT;EAEA,MAAM,QAAuB;GAC3B,IAAI,cAAc,QAAQ,MAAM,OAAO,MAAM;EAC/C;CACF;AACF;;;;;AAMA,SAAS,mBAAmB,OAAyB;CACnD,MAAM,UAAU,iBAAiB,QAAQ,MAAM,QAAQ,YAAY,IAAI;CACvE,OAAO,QAAQ,SAAS,SAAS,KAAK,QAAQ,SAAS,SAAS;AAClE"}

package/dist/none-BnZtaGNJ.mjs

@@ -0,0 +1,23 @@
+import { t as __exportAll } from "./chunk-D7D4PA-g.mjs";
+//#region src/authorization/none.ts
+var none_exports = /* @__PURE__ */ __exportAll({ noAuthorization: () => noAuthorization });
+/**
+* Create an {@link AuthorizationProvider} that authorizes everything.
+*
+* @example
+* ```ts
+* import { noAuthorization } from "@xtandard/webhooks/authorization/none";
+*
+* const authz = noAuthorization();
+* await authz.authorize(input); // → true, always
+* ```
+*/
+function noAuthorization() {
+	return { async authorize(_input) {
+		return true;
+	} };
+}
+//#endregion
+export { none_exports as n, noAuthorization as t };
+
+//# sourceMappingURL=none-BnZtaGNJ.mjs.map

package/dist/none-BnZtaGNJ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"none-BnZtaGNJ.mjs","names":[],"sources":["../src/authorization/none.ts"],"sourcesContent":["/**\n * The \"no authorization\" {@link AuthorizationProvider}. Every action is allowed.\n *\n * This grants unconditional access regardless of the principal (even `null`) or\n * the action/resource. It is the right choice for embedded usage and local\n * development where the admin API is not exposed to untrusted callers — commonly\n * paired with `noAuth()`.\n *\n * Do **not** use it for a network-exposed admin surface; reach for\n * `rolesAuthorization()` (or a delegated provider) instead.\n *\n * @module\n */\n\nimport type { AuthorizationProvider, AuthorizeInput } from \"./contract.ts\";\n\n/**\n * Create an {@link AuthorizationProvider} that authorizes everything.\n *\n * @example\n * ```ts\n * import { noAuthorization } from \"@xtandard/webhooks/authorization/none\";\n *\n * const authz = noAuthorization();\n * await authz.authorize(input); // → true, always\n * ```\n */\nexport function noAuthorization(): AuthorizationProvider {\n  return {\n    async authorize(_input: AuthorizeInput): Promise<boolean> {\n      return true;\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;AA2BA,SAAgB,kBAAyC;CACvD,OAAO,EACL,MAAM,UAAU,QAA0C;EACxD,OAAO;CACT,EACF;AACF"}