@zap-studio/webhooks 1.1.0 → 2.0.0

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.0.0]
+
+### Added
+
+Native OpenTelemetry support. Every `handle(request)` call gets a `SERVER` delivery span, extracting the sender's `traceparent` header so the delivery continues their trace instead of starting a new one. Each handler dispatch gets its own child `INTERNAL` span. A non-2xx response marks the delivery span `ERROR`; a thrown handler error is also recorded as an exception on the handler span. See [OpenTelemetry](https://www.zapstudio.dev/webhooks/opentelemetry).
+
+### Changed
+
+**Breaking:** `@opentelemetry/api` is now a required peer dependency. It's tiny, side-effect-free, and a no-op until an app registers a real SDK, so nothing changes at runtime for consumers who don't set one up — but the package won't resolve without it installed: `npm install @opentelemetry/api`.
+
+## [1.1.1]
+
+### Changed
+
+`@zap-studio/logger` is now an optional peer dependency instead of a regular dependency. Every import from it is type-only (`import type { Logger }`), so it was never pulled in at runtime — pass any object matching the `Logger` shape (including `pino`) with no install required. Existing consumers of `logger?: Logger` are unaffected.
+
 ## [1.1.0]
 
 ### Added

package/README.md

@@ -4,6 +4,16 @@ Schema-first, type-safe webhook routing built on the standard Web API [`Request`
 
 Full documentation: [zapstudio.dev/webhooks](https://www.zapstudio.dev/webhooks)
 
+## Motivation
+
+Webhook endpoints are usually built by hand, per provider, and this tends to repeat the same two mistakes. First, signature checks often use Node's `crypto` module, which does not exist on Cloudflare Workers, Deno, or Bun's edge runtimes — so the same code cannot run everywhere the webhook needs to be received.
+
+Second, signatures are often compared with `===`, which leaks timing information and opens a timing-attack risk that most teams do not know they have.
+
+`@zap-studio/webhooks` fixes both. It is built on the standard `Request`/`Response` objects, so the same router works on Bun, Deno, Cloudflare Workers, or any framework that accepts a `Request`.
+
+Signature verification is opt-in through the `verify` option, and the built-in HMAC verifier uses the Web Crypto API (`globalThis.crypto.subtle`) with a constant-time comparison, so once you turn it on, you get the safe comparison without writing it yourself. Payloads are validated and typed straight from your Standard Schema — no `any` from `JSON.parse`, no manual casts.
+
 ## Installation
 
 ```bash
@@ -151,6 +161,31 @@ const router = createWebhookRouter({ prefix: "/webhooks", logger });
 
 Each delivery attempt and handler dispatch logs at `debug`; verification failures and unmatched routes log at `warn`.
 
+## OpenTelemetry
+
+`@opentelemetry/api` is a required peer dependency — tiny, side-effect-free, and a no-op until an app registers a real SDK, so installing it costs nothing at runtime for consumers who never set one up.
+
+Each delivery gets a `SERVER` span, and the sender's `traceparent` header is extracted so the delivery continues their trace instead of starting a new one. Each handler dispatch gets its own child `INTERNAL` span:
+
+```bash
+npm install @opentelemetry/api
+```
+
+```ts
+import { createWebhookRouter } from "@zap-studio/webhooks";
+
+const router = createWebhookRouter({ prefix: "/webhooks" });
+router.register("/stripe", { schema: stripeEventSchema, handler });
+
+// If your app has registered an OpenTelemetry SDK, router.handle(request)
+// now produces a SERVER span per delivery (continuing the sender's trace
+// when a traceparent header is present) and an INTERNAL span per handler
+// dispatch. If not, it's a no-op — no wiring required either way.
+export default { fetch: (request: Request) => router.handle(request) };
+```
+
+A non-2xx response (unmatched route, validation failure, verification failure, handler error) marks the delivery span `ERROR`; a thrown handler error is also recorded as an exception on the handler span.
+
 ## Runtime Support
 
 | Runtime            | Minimum version                                  |

package/dist/index.js

@@ -1,4 +1,4 @@
 import { VerificationError } from "./errors.js";
-import { WebhookRouter, createWebhookRouter } from "./router.js";
+import { n as createWebhookRouter, t as WebhookRouter } from "./router-DyyNi3QB.js";
 import { constantTimeEquals, createHmacVerifier } from "./verify.js";
 export { VerificationError, WebhookRouter, constantTimeEquals, createHmacVerifier, createWebhookRouter };

package/dist/router-DyyNi3QB.js

@@ -0,0 +1,291 @@
+import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
+import { standardValidate } from "@zap-studio/validation";
+//#endregion
+//#region src/_otel.ts
+/**
+* OpenTelemetry tracer for this package. Resolved once against the global
+* `TracerProvider`; a no-op provider (the default until an app registers an
+* SDK) makes every span/propagation call below a no-op too.
+*/
+const tracer = trace.getTracer("@zap-studio/webhooks", "2.0.0");
+/**
+* `TextMapGetter` for the Web `Headers` API, used to extract an inbound
+* delivery's `traceparent` (and any other registered propagator fields) so
+* the delivery span continues the sender's trace instead of starting a new one.
+*/
+const HEADERS_GETTER = {
+	get(carrier, key) {
+		return carrier.get(key) ?? void 0;
+	},
+	keys(carrier) {
+		return [...carrier.keys()];
+	}
+};
+/**
+* Records `error` on `span` and marks it as failed. `recordException` only
+* accepts an `Error` or `string`, so other thrown values just get the
+* `ERROR` status without an attached exception event.
+*/
+const recordSpanError = (span, error) => {
+	if (error instanceof Error || typeof error === "string") span.recordException(error);
+	span.setStatus({ code: SpanStatusCode.ERROR });
+};
+//#endregion
+//#region src/router.ts
+/**
+* Schema-first webhook router with path dispatching, validation, and optional verification.
+*
+* @template TMap - Internal route payload map built incrementally via `register`.
+*/
+const toArray = (value) => {
+	if (value === void 0) return [];
+	return Array.isArray(value) ? value : [value];
+};
+const notFoundResponse = () => Response.json({ error: "not found" }, { status: 404 });
+/** Sets `http.response.status_code` and marks `span` `ERROR` on a non-2xx response. */
+const finishDelivery = (span, response) => {
+	span.setAttribute("http.response.status_code", response.status);
+	if (!response.ok) span.setStatus({ code: SpanStatusCode.ERROR });
+	return response;
+};
+const bodyDecoder = new TextDecoder();
+/**
+* Normalizes a path to its canonical form: leading slash, no trailing slash,
+* duplicate slashes collapsed. The root path is `"/"`.
+*/
+const normalizePath = (path) => {
+	const withLeadingSlash = path.startsWith("/") ? path : `/${path}`;
+	const collapsed = withLeadingSlash.includes("//") ? withLeadingSlash.replaceAll(/\/{2,}/gu, "/") : withLeadingSlash;
+	return collapsed.length > 1 && collapsed.endsWith("/") ? collapsed.slice(0, -1) : collapsed;
+};
+/** Runs the given before-hooks in order against the request context. */
+const runBeforeHooks = async (ctx, hooks) => {
+	if (!hooks || hooks.length === 0) return;
+	for (const hook of hooks) await hook(ctx);
+};
+/** Runs the given after-hooks in order against the request context and response. */
+const runAfterHooks = async (ctx, response, hooks) => {
+	if (!hooks || hooks.length === 0) return;
+	for (const hook of hooks) await hook(ctx, response);
+};
+/** Builds an internal handler entry from route registration options. */
+const createHandlerEntry = (options) => {
+	const entry = { handler: options.handler };
+	if (options.schema !== void 0) entry.schema = options.schema;
+	if (options.before !== void 0) entry.before = toArray(options.before);
+	if (options.after !== void 0) entry.after = toArray(options.after);
+	return entry;
+};
+/** Parses the request's raw body bytes as JSON, returning `undefined` on invalid JSON. */
+const parseRequestBody = (ctx) => {
+	try {
+		return JSON.parse(bodyDecoder.decode(ctx.rawBody));
+	} catch {
+		return;
+	}
+};
+/** Validates the parsed payload against the route schema, returning either the validated value or a `400` response. */
+const validatePayload = async (parsedJson, schema) => {
+	if (!schema) return parsedJson;
+	const result = await standardValidate(parsedJson, schema, { throwOnError: false });
+	if (result.issues) return Response.json({
+		error: "validation failed",
+		issues: result.issues.map((issue) => ({
+			message: issue.message,
+			path: issue.path?.map((p) => typeof p === "object" && "key" in p ? String(p.key) : String(p))
+		}))
+	}, { status: 400 });
+	return result.value;
+};
+/** Invokes the route handler with the validated payload, defaulting to a `200 "ok"` response. */
+const executeHandler = async (handler, ctx, validatedPayload) => {
+	return await handler({
+		...ctx,
+		payload: validatedPayload
+	}) ?? Response.json("ok");
+};
+/** Runs the route handler inside its own `INTERNAL` span, nested under the delivery span. */
+const dispatchHandler = async (handlerEntry, ctx, validatedPayload, deliveryContext) => {
+	const handlerSpan = tracer.startSpan(`webhook.handler ${ctx.path}`, { kind: SpanKind.INTERNAL }, deliveryContext);
+	try {
+		return await context.with(trace.setSpan(deliveryContext, handlerSpan), async () => await executeHandler(handlerEntry.handler, ctx, validatedPayload));
+	} catch (error) {
+		recordSpanError(handlerSpan, error);
+		throw error;
+	} finally {
+		handlerSpan.end();
+	}
+};
+/**
+* Main webhook router class.
+*
+* Register routes with typed schemas and call `handle` with a Web API `Request`.
+*
+* @example
+* ```ts
+* import { WebhookRouter } from "@zap-studio/webhooks";
+*
+* const router = new WebhookRouter({ prefix: "/webhooks" });
+*
+* router.register("/stripe", {
+*   schema: stripeEventSchema,
+*   handler: async ({ payload }) => {
+*     console.log("Stripe event:", payload.type);
+*   },
+* });
+*
+* export default { fetch: (request: Request) => router.handle(request) };
+* ```
+*/
+var WebhookRouter = class {
+	handlers = /* @__PURE__ */ new Map();
+	verify;
+	globalBeforeHooks = [];
+	globalAfterHooks = [];
+	globalErrorHook;
+	logger;
+	prefix;
+	prefixWithSlash;
+	/**
+	* Creates a webhook router with optional global hooks and verification behavior.
+	*
+	* @param opts - Router-level options.
+	*
+	* @example
+	* ```ts
+	* const router = new WebhookRouter({
+	*   prefix: "/webhooks",
+	*   verify: createHmacVerifier({ headerName: "x-signature", secret }),
+	*   onError: (error) => Response.json({ error: error.message }, { status: 500 }),
+	* });
+	* ```
+	*/
+	constructor(opts = {}) {
+		this.prefix = normalizePath(opts.prefix ?? "/webhooks");
+		this.prefixWithSlash = `${this.prefix}/`;
+		this.verify = opts.verify;
+		this.globalBeforeHooks = toArray(opts.before);
+		this.globalAfterHooks = toArray(opts.after);
+		this.globalErrorHook = opts.onError;
+		this.logger = opts.logger;
+	}
+	register(path, handlerOrOptions) {
+		this.handlers.set(normalizePath(path), typeof handlerOrOptions === "function" ? { handler: handlerOrOptions } : createHandlerEntry(handlerOrOptions));
+		return this;
+	}
+	/**
+	* Handles an incoming webhook request.
+	*
+	* The request body is read exactly once; hooks and handlers receive the raw
+	* bytes through the webhook context instead of the request stream.
+	*
+	* @param request - Incoming Web API request.
+	* @returns Web API response for the runtime to send back.
+	*
+	* @example
+	* ```ts
+	* // Framework-agnostic: works with any Web API Request/Response runtime.
+	* export async function POST(request: Request): Promise<Response> {
+	*   return router.handle(request);
+	* }
+	* ```
+	*/
+	async handle(request) {
+		const requestPath = new URL(request.url).pathname;
+		const { method } = request;
+		this.logger?.debug("webhook delivery attempt", { path: requestPath });
+		const parentContext = propagation.extract(context.active(), request.headers, HEADERS_GETTER);
+		const deliverySpan = tracer.startSpan(`${method} ${requestPath}`, {
+			attributes: {
+				"http.request.method": method,
+				"url.path": requestPath
+			},
+			kind: SpanKind.SERVER
+		}, parentContext);
+		const deliveryContext = trace.setSpan(parentContext, deliverySpan);
+		try {
+			const response = await context.with(deliveryContext, async () => await this.dispatch(request, requestPath, deliveryContext));
+			return finishDelivery(deliverySpan, response);
+		} finally {
+			deliverySpan.end();
+		}
+	}
+	/** Matches the route, runs hooks/verification/validation, and dispatches the handler. */
+	async dispatch(request, requestPath, deliveryContext) {
+		const path = this.matchPath(request);
+		if (path === null) {
+			this.logger?.warn("webhook route not matched", { path: requestPath });
+			return notFoundResponse();
+		}
+		const handlerEntry = this.handlers.get(path);
+		if (!handlerEntry) {
+			this.logger?.warn("webhook route not matched", { path });
+			return notFoundResponse();
+		}
+		const ctx = {
+			path,
+			rawBody: /* @__PURE__ */ new Uint8Array(0),
+			request
+		};
+		try {
+			ctx.rawBody = new Uint8Array(await request.arrayBuffer());
+			await runBeforeHooks(ctx, this.globalBeforeHooks);
+			await runBeforeHooks(ctx, handlerEntry.before);
+			if (this.verify) try {
+				await this.verify(ctx);
+			} catch (error) {
+				this.logger?.warn("webhook verification failed", {
+					error,
+					path
+				});
+				throw error;
+			}
+			const parsedJson = parseRequestBody(ctx);
+			const validationResult = await validatePayload(parsedJson, handlerEntry.schema);
+			if (validationResult instanceof Response) return validationResult;
+			this.logger?.debug("webhook handler dispatch", { path });
+			const response = await dispatchHandler(handlerEntry, ctx, validationResult, deliveryContext);
+			await runAfterHooks(ctx, response, handlerEntry.after);
+			await runAfterHooks(ctx, response, this.globalAfterHooks);
+			return response;
+		} catch (error) {
+			return await this.handleError(error, ctx);
+		}
+	}
+	/** Resolves the incoming request's URL to a registered route key, or `null` if it doesn't match the configured prefix. */
+	matchPath(request) {
+		const pathname = normalizePath(new URL(request.url).pathname);
+		if (this.prefix === "/") return pathname;
+		if (pathname === this.prefix) return "/";
+		if (!pathname.startsWith(this.prefixWithSlash)) return null;
+		return pathname.slice(this.prefix.length);
+	}
+	/** Builds the error response for a failed request, deferring to the global error hook when set. */
+	async handleError(error, ctx) {
+		if (this.globalErrorHook) {
+			const normalizedError = error instanceof Error ? error : /* @__PURE__ */ new Error("Internal server error");
+			const errorResponse = await this.globalErrorHook(normalizedError, ctx);
+			if (errorResponse) return errorResponse;
+		}
+		return Response.json({ error: error instanceof Error ? error.message : "Internal server error" }, { status: 500 });
+	}
+};
+/**
+* Factory helper for creating a webhook router instance.
+*
+* @param opts - Optional global router options.
+* @returns A new webhook router.
+*
+* @example
+* ```ts
+* import { createWebhookRouter } from "@zap-studio/webhooks";
+*
+* const router = createWebhookRouter({ prefix: "/webhooks" });
+* router.register("/stripe", { schema: stripeEventSchema, handler });
+* ```
+*/
+const createWebhookRouter = (opts) => new WebhookRouter(opts);
+//#endregion
+export { createWebhookRouter as n, WebhookRouter as t };
+
+//# sourceMappingURL=router-DyyNi3QB.js.map

package/dist/router-DyyNi3QB.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router-DyyNi3QB.js","names":["pkg.name","pkg.version","otelContext"],"sources":["../package.json","../src/_otel.ts","../src/router.ts"],"sourcesContent":["","/**\n * Internal OpenTelemetry wiring for the webhooks package: tracer resolution,\n * the `Headers` extraction carrier, and span error recording. Kept out of\n * `router.ts` so dispatch logic doesn't get tangled with tracing concerns.\n *\n * @module @zap-studio/webhooks/otel\n */\n\nimport type { Span, TextMapGetter, Tracer } from \"@opentelemetry/api\";\nimport { SpanStatusCode, trace } from \"@opentelemetry/api\";\n\nimport pkg from \"../package.json\" with { type: \"json\" };\n\n/**\n * OpenTelemetry tracer for this package. Resolved once against the global\n * `TracerProvider`; a no-op provider (the default until an app registers an\n * SDK) makes every span/propagation call below a no-op too.\n */\nexport const tracer: Tracer = trace.getTracer(pkg.name, pkg.version);\n\n/**\n * `TextMapGetter` for the Web `Headers` API, used to extract an inbound\n * delivery's `traceparent` (and any other registered propagator fields) so\n * the delivery span continues the sender's trace instead of starting a new one.\n */\nexport const HEADERS_GETTER: TextMapGetter<Headers> = {\n  get(carrier, key) {\n    return carrier.get(key) ?? undefined;\n  },\n  keys(carrier) {\n    return [...carrier.keys()];\n  },\n};\n\n/**\n * Records `error` on `span` and marks it as failed. `recordException` only\n * accepts an `Error` or `string`, so other thrown values just get the\n * `ERROR` status without an attached exception event.\n */\nexport const recordSpanError = (span: Span, error: unknown): void => {\n  if (error instanceof Error || typeof error === \"string\") {\n    span.recordException(error);\n  }\n  span.setStatus({ code: SpanStatusCode.ERROR });\n};\n","/**\n * Schema-first webhook router primitives.\n *\n * @module @zap-studio/webhooks/router\n */\n\nimport type { Context, Span } from \"@opentelemetry/api\";\nimport {\n  SpanKind,\n  SpanStatusCode,\n  context as otelContext,\n  propagation,\n  trace,\n} from \"@opentelemetry/api\";\nimport type { Logger } from \"@zap-studio/logger\";\nimport type { StandardSchemaV1 } from \"@zap-studio/validation\";\nimport { standardValidate } from \"@zap-studio/validation\";\n\nimport { HEADERS_GETTER, recordSpanError, tracer } from \"./_otel.js\";\nimport type {\n  AfterHook,\n  BeforeHook,\n  ErrorHook,\n  HandlerEntry,\n  InferSchemaOutput,\n  RegisterOptions,\n  SchemaRouteOptions,\n  VerifyFn,\n  WebhookContext,\n  WebhookHandler,\n  WebhookRouterOptions,\n} from \"./types.js\";\n\n/**\n * Schema-first webhook router with path dispatching, validation, and optional verification.\n *\n * @template TMap - Internal route payload map built incrementally via `register`.\n */\n\nconst toArray = <T>(value: T | T[] | undefined): T[] => {\n  if (value === undefined) {\n    return [];\n  }\n\n  return Array.isArray(value) ? value : [value];\n};\n\nconst notFoundResponse = (): Response =>\n  Response.json({ error: \"not found\" }, { status: 404 });\n\n/** Sets `http.response.status_code` and marks `span` `ERROR` on a non-2xx response. */\nconst finishDelivery = (span: Span, response: Response): Response => {\n  span.setAttribute(\"http.response.status_code\", response.status);\n  if (!response.ok) {\n    span.setStatus({ code: SpanStatusCode.ERROR });\n  }\n  return response;\n};\n\nconst bodyDecoder = new TextDecoder();\n\n/**\n * Normalizes a path to its canonical form: leading slash, no trailing slash,\n * duplicate slashes collapsed. The root path is `\"/\"`.\n */\nconst normalizePath = (path: string): string => {\n  const withLeadingSlash = path.startsWith(\"/\") ? path : `/${path}`;\n  const collapsed = withLeadingSlash.includes(\"//\")\n    ? withLeadingSlash.replaceAll(/\\/{2,}/gu, \"/\")\n    : withLeadingSlash;\n\n  return collapsed.length > 1 && collapsed.endsWith(\"/\")\n    ? collapsed.slice(0, -1)\n    : collapsed;\n};\n\n/** Runs the given before-hooks in order against the request context. */\nconst runBeforeHooks = async (\n  ctx: WebhookContext,\n  hooks?: BeforeHook[]\n): Promise<void> => {\n  if (!hooks || hooks.length === 0) {\n    return;\n  }\n\n  for (const hook of hooks) {\n    // oxlint-disable-next-line no-await-in-loop -- hooks run sequentially; order + short-circuit matter.\n    await hook(ctx);\n  }\n};\n\n/** Runs the given after-hooks in order against the request context and response. */\nconst runAfterHooks = async (\n  ctx: WebhookContext,\n  response: Response,\n  hooks?: AfterHook[]\n): Promise<void> => {\n  if (!hooks || hooks.length === 0) {\n    return;\n  }\n\n  for (const hook of hooks) {\n    // oxlint-disable-next-line no-await-in-loop -- hooks run sequentially; order + short-circuit matter.\n    await hook(ctx, response);\n  }\n};\n\n/** Builds an internal handler entry from route registration options. */\nconst createHandlerEntry = (\n  options: RegisterOptions<unknown>\n): HandlerEntry => {\n  const entry: HandlerEntry = {\n    handler: options.handler,\n  };\n\n  if (options.schema !== undefined) {\n    entry.schema = options.schema;\n  }\n\n  if (options.before !== undefined) {\n    entry.before = toArray(options.before);\n  }\n\n  if (options.after !== undefined) {\n    entry.after = toArray(options.after);\n  }\n\n  return entry;\n};\n\n/** Parses the request's raw body bytes as JSON, returning `undefined` on invalid JSON. */\nconst parseRequestBody = (ctx: WebhookContext): unknown => {\n  try {\n    return JSON.parse(bodyDecoder.decode(ctx.rawBody));\n  } catch {\n    return undefined;\n  }\n};\n\n/** Validates the parsed payload against the route schema, returning either the validated value or a `400` response. */\nconst validatePayload = async <TPayload>(\n  parsedJson: unknown,\n  schema?: StandardSchemaV1<unknown, TPayload>\n): Promise<TPayload | Response> => {\n  if (!schema) {\n    // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- Without a schema, caller-declared payload type is the route contract.\n    return parsedJson as TPayload;\n  }\n\n  const result = await standardValidate(parsedJson, schema, {\n    throwOnError: false,\n  });\n\n  if (result.issues) {\n    return Response.json(\n      {\n        error: \"validation failed\",\n        issues: result.issues.map((issue) => ({\n          message: issue.message,\n          path: issue.path?.map((p) =>\n            typeof p === \"object\" && \"key\" in p ? String(p.key) : String(p)\n          ),\n        })),\n      },\n      { status: 400 }\n    );\n  }\n\n  return result.value;\n};\n\n/** Invokes the route handler with the validated payload, defaulting to a `200 \"ok\"` response. */\nconst executeHandler = async <TPayload = unknown>(\n  handler: WebhookHandler<TPayload>,\n  ctx: WebhookContext,\n  validatedPayload: TPayload\n): Promise<Response> => {\n  const responded = await handler({\n    ...ctx,\n    payload: validatedPayload,\n  });\n\n  return responded ?? Response.json(\"ok\");\n};\n\n/** Runs the route handler inside its own `INTERNAL` span, nested under the delivery span. */\nconst dispatchHandler = async (\n  handlerEntry: HandlerEntry,\n  ctx: WebhookContext,\n  validatedPayload: unknown,\n  deliveryContext: Context\n): Promise<Response> => {\n  const handlerSpan = tracer.startSpan(\n    `webhook.handler ${ctx.path}`,\n    { kind: SpanKind.INTERNAL },\n    deliveryContext\n  );\n\n  try {\n    return await otelContext.with(\n      trace.setSpan(deliveryContext, handlerSpan),\n      async () =>\n        await executeHandler(handlerEntry.handler, ctx, validatedPayload)\n    );\n  } catch (error) {\n    recordSpanError(handlerSpan, error);\n    throw error;\n  } finally {\n    handlerSpan.end();\n  }\n};\n\n/**\n * Main webhook router class.\n *\n * Register routes with typed schemas and call `handle` with a Web API `Request`.\n *\n * @example\n * ```ts\n * import { WebhookRouter } from \"@zap-studio/webhooks\";\n *\n * const router = new WebhookRouter({ prefix: \"/webhooks\" });\n *\n * router.register(\"/stripe\", {\n *   schema: stripeEventSchema,\n *   handler: async ({ payload }) => {\n *     console.log(\"Stripe event:\", payload.type);\n *   },\n * });\n *\n * export default { fetch: (request: Request) => router.handle(request) };\n * ```\n */\nexport class WebhookRouter<TMap = unknown> {\n  private readonly handlers = new Map<string, HandlerEntry>();\n  private readonly verify: VerifyFn | undefined;\n  private readonly globalBeforeHooks: BeforeHook[] = [];\n  private readonly globalAfterHooks: AfterHook[] = [];\n  private readonly globalErrorHook: ErrorHook | undefined;\n  private readonly logger: Logger | undefined;\n  private readonly prefix: string;\n  private readonly prefixWithSlash: string;\n\n  /**\n   * Creates a webhook router with optional global hooks and verification behavior.\n   *\n   * @param opts - Router-level options.\n   *\n   * @example\n   * ```ts\n   * const router = new WebhookRouter({\n   *   prefix: \"/webhooks\",\n   *   verify: createHmacVerifier({ headerName: \"x-signature\", secret }),\n   *   onError: (error) => Response.json({ error: error.message }, { status: 500 }),\n   * });\n   * ```\n   */\n  constructor(opts: WebhookRouterOptions = {}) {\n    this.prefix = normalizePath(opts.prefix ?? \"/webhooks\");\n    this.prefixWithSlash = `${this.prefix}/`;\n    this.verify = opts.verify;\n    this.globalBeforeHooks = toArray(opts.before);\n    this.globalAfterHooks = toArray(opts.after);\n    this.globalErrorHook = opts.onError;\n    this.logger = opts.logger;\n  }\n\n  /**\n   * Register a webhook handler for a specific path.\n   *\n   * When a schema is provided, `payload` is inferred from the schema output type.\n   *\n   * @param path - Route path relative to configured prefix, starting with `/` (e.g. `\"/stripe\"`).\n   * @param handlerOrOptions - Handler function or schema-based registration options.\n   * @returns The same router instance with an updated internal route type map.\n   *\n   * @example\n   * ```ts\n   * router.register(\"/stripe\", {\n   *   schema: stripeEventSchema,\n   *   handler: async ({ payload }) => {\n   *     console.log(payload.type); // typed from stripeEventSchema\n   *   },\n   * });\n   * ```\n   */\n  register<\n    Path extends `/${string}`,\n    TSchema extends StandardSchemaV1<unknown, unknown>,\n  >(\n    path: Path,\n    handlerOrOptions: SchemaRouteOptions<TSchema>\n  ): WebhookRouter<TMap & Record<Path, InferSchemaOutput<TSchema>>>;\n  /**\n   * Register a webhook handler for a specific path, with schema-less registration options.\n   *\n   * @param path - Route path relative to configured prefix, starting with `/` (e.g. `\"/stripe\"`).\n   * @param handlerOrOptions - Registration options without a schema.\n   * @returns The same router instance with an updated internal route type map.\n   *\n   * @example\n   * ```ts\n   * router.register(\"/ping\", {\n   *   before: (ctx) => console.log(\"received\", ctx.path),\n   *   handler: () => Response.json({ ok: true }),\n   * });\n   * ```\n   */\n  register<Path extends `/${string}`, TPayload>(\n    path: Path,\n    handlerOrOptions: RegisterOptions<TPayload>\n  ): WebhookRouter<TMap & Record<Path, TPayload>>;\n  /**\n   * Register a webhook handler for a specific path, using a plain handler function.\n   *\n   * @param path - Route path relative to configured prefix, starting with `/` (e.g. `\"/stripe\"`).\n   * @param handlerOrOptions - Handler function to process the webhook.\n   * @returns The same router instance with an updated internal route type map.\n   *\n   * @example\n   * ```ts\n   * router.register(\"/health\", () => Response.json({ status: \"ok\" }));\n   * ```\n   */\n  register<Path extends `/${string}`>(\n    path: Path,\n    handlerOrOptions: WebhookHandler\n  ): WebhookRouter<TMap & Record<Path, unknown>>;\n  register(\n    path: string,\n    handlerOrOptions: WebhookHandler | RegisterOptions<unknown>\n  ): this {\n    this.handlers.set(\n      normalizePath(path),\n      typeof handlerOrOptions === \"function\"\n        ? { handler: handlerOrOptions }\n        : createHandlerEntry(handlerOrOptions)\n    );\n\n    return this;\n  }\n\n  /**\n   * Handles an incoming webhook request.\n   *\n   * The request body is read exactly once; hooks and handlers receive the raw\n   * bytes through the webhook context instead of the request stream.\n   *\n   * @param request - Incoming Web API request.\n   * @returns Web API response for the runtime to send back.\n   *\n   * @example\n   * ```ts\n   * // Framework-agnostic: works with any Web API Request/Response runtime.\n   * export async function POST(request: Request): Promise<Response> {\n   *   return router.handle(request);\n   * }\n   * ```\n   */\n  async handle(request: Request): Promise<Response> {\n    const requestPath = new URL(request.url).pathname;\n    const { method } = request;\n    this.logger?.debug(\"webhook delivery attempt\", { path: requestPath });\n\n    const parentContext = propagation.extract(\n      otelContext.active(),\n      request.headers,\n      HEADERS_GETTER\n    );\n    const deliverySpan = tracer.startSpan(\n      `${method} ${requestPath}`,\n      {\n        attributes: {\n          \"http.request.method\": method,\n          \"url.path\": requestPath,\n        },\n        kind: SpanKind.SERVER,\n      },\n      parentContext\n    );\n    const deliveryContext = trace.setSpan(parentContext, deliverySpan);\n\n    try {\n      const response = await otelContext.with(\n        deliveryContext,\n        async () => await this.dispatch(request, requestPath, deliveryContext)\n      );\n      return finishDelivery(deliverySpan, response);\n    } finally {\n      deliverySpan.end();\n    }\n  }\n\n  /** Matches the route, runs hooks/verification/validation, and dispatches the handler. */\n  private async dispatch(\n    request: Request,\n    requestPath: string,\n    deliveryContext: Context\n  ): Promise<Response> {\n    const path = this.matchPath(request);\n    if (path === null) {\n      this.logger?.warn(\"webhook route not matched\", { path: requestPath });\n      return notFoundResponse();\n    }\n\n    const handlerEntry = this.handlers.get(path);\n    if (!handlerEntry) {\n      this.logger?.warn(\"webhook route not matched\", { path });\n      return notFoundResponse();\n    }\n\n    const ctx: WebhookContext = {\n      path,\n      rawBody: new Uint8Array(0),\n      request,\n    };\n\n    try {\n      ctx.rawBody = new Uint8Array(await request.arrayBuffer());\n\n      await runBeforeHooks(ctx, this.globalBeforeHooks);\n      await runBeforeHooks(ctx, handlerEntry.before);\n\n      if (this.verify) {\n        try {\n          await this.verify(ctx);\n        } catch (error) {\n          this.logger?.warn(\"webhook verification failed\", { error, path });\n          throw error;\n        }\n      }\n\n      const parsedJson = parseRequestBody(ctx);\n      const validationResult = await validatePayload(\n        parsedJson,\n        handlerEntry.schema\n      );\n\n      if (validationResult instanceof Response) {\n        return validationResult;\n      }\n\n      this.logger?.debug(\"webhook handler dispatch\", { path });\n      const response = await dispatchHandler(\n        handlerEntry,\n        ctx,\n        validationResult,\n        deliveryContext\n      );\n\n      await runAfterHooks(ctx, response, handlerEntry.after);\n      await runAfterHooks(ctx, response, this.globalAfterHooks);\n\n      return response;\n    } catch (error) {\n      return await this.handleError(error, ctx);\n    }\n  }\n\n  /** Resolves the incoming request's URL to a registered route key, or `null` if it doesn't match the configured prefix. */\n  private matchPath(request: Request): string | null {\n    const pathname = normalizePath(new URL(request.url).pathname);\n\n    // Root mount: the whole pathname is the route path.\n    if (this.prefix === \"/\") {\n      return pathname;\n    }\n\n    if (pathname === this.prefix) {\n      return \"/\";\n    }\n\n    // Require prefix followed by a segment boundary, then match handlers on\n    // the remainder (e.g. /webhooks/stripe -> /stripe).\n    if (!pathname.startsWith(this.prefixWithSlash)) {\n      return null;\n    }\n\n    return pathname.slice(this.prefix.length);\n  }\n\n  /** Builds the error response for a failed request, deferring to the global error hook when set. */\n  private async handleError(\n    error: unknown,\n    ctx: WebhookContext\n  ): Promise<Response> {\n    if (this.globalErrorHook) {\n      const normalizedError =\n        error instanceof Error ? error : new Error(\"Internal server error\");\n      const errorResponse = await this.globalErrorHook(normalizedError, ctx);\n      if (errorResponse) {\n        return errorResponse;\n      }\n    }\n\n    return Response.json(\n      {\n        error: error instanceof Error ? error.message : \"Internal server error\",\n      },\n      { status: 500 }\n    );\n  }\n}\n\n/**\n * Factory helper for creating a webhook router instance.\n *\n * @param opts - Optional global router options.\n * @returns A new webhook router.\n *\n * @example\n * ```ts\n * import { createWebhookRouter } from \"@zap-studio/webhooks\";\n *\n * const router = createWebhookRouter({ prefix: \"/webhooks\" });\n * router.register(\"/stripe\", { schema: stripeEventSchema, handler });\n * ```\n */\nexport const createWebhookRouter = (\n  opts?: WebhookRouterOptions\n): WebhookRouter => new WebhookRouter(opts);\n"],"mappings":";;;;;;;;;ACkBA,MAAa,SAAiB,MAAM,UAAUA,wBAAUC,OAAW;;;;;;AAOnE,MAAa,iBAAyC;CACpD,IAAI,SAAS,KAAK;EAChB,OAAO,QAAQ,IAAI,GAAG,KAAK,KAAA;CAC7B;CACA,KAAK,SAAS;EACZ,OAAO,CAAC,GAAG,QAAQ,KAAK,CAAC;CAC3B;AACF;;;;;;AAOA,MAAa,mBAAmB,MAAY,UAAyB;CACnE,IAAI,iBAAiB,SAAS,OAAO,UAAU,UAC7C,KAAK,gBAAgB,KAAK;CAE5B,KAAK,UAAU,EAAE,MAAM,eAAe,MAAM,CAAC;AAC/C;;;;;;;;ACLA,MAAM,WAAc,UAAoC;CACtD,IAAI,UAAU,KAAA,GACZ,OAAO,CAAC;CAGV,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAC9C;AAEA,MAAM,yBACJ,SAAS,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;;AAGvD,MAAM,kBAAkB,MAAY,aAAiC;CACnE,KAAK,aAAa,6BAA6B,SAAS,MAAM;CAC9D,IAAI,CAAC,SAAS,IACZ,KAAK,UAAU,EAAE,MAAM,eAAe,MAAM,CAAC;CAE/C,OAAO;AACT;AAEA,MAAM,cAAc,IAAI,YAAY;;;;;AAMpC,MAAM,iBAAiB,SAAyB;CAC9C,MAAM,mBAAmB,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI;CAC3D,MAAM,YAAY,iBAAiB,SAAS,IAAI,IAC5C,iBAAiB,WAAW,YAAY,GAAG,IAC3C;CAEJ,OAAO,UAAU,SAAS,KAAK,UAAU,SAAS,GAAG,IACjD,UAAU,MAAM,GAAG,EAAE,IACrB;AACN;;AAGA,MAAM,iBAAiB,OACrB,KACA,UACkB;CAClB,IAAI,CAAC,SAAS,MAAM,WAAW,GAC7B;CAGF,KAAK,MAAM,QAAQ,OAEjB,MAAM,KAAK,GAAG;AAElB;;AAGA,MAAM,gBAAgB,OACpB,KACA,UACA,UACkB;CAClB,IAAI,CAAC,SAAS,MAAM,WAAW,GAC7B;CAGF,KAAK,MAAM,QAAQ,OAEjB,MAAM,KAAK,KAAK,QAAQ;AAE5B;;AAGA,MAAM,sBACJ,YACiB;CACjB,MAAM,QAAsB,EAC1B,SAAS,QAAQ,QACnB;CAEA,IAAI,QAAQ,WAAW,KAAA,GACrB,MAAM,SAAS,QAAQ;CAGzB,IAAI,QAAQ,WAAW,KAAA,GACrB,MAAM,SAAS,QAAQ,QAAQ,MAAM;CAGvC,IAAI,QAAQ,UAAU,KAAA,GACpB,MAAM,QAAQ,QAAQ,QAAQ,KAAK;CAGrC,OAAO;AACT;;AAGA,MAAM,oBAAoB,QAAiC;CACzD,IAAI;EACF,OAAO,KAAK,MAAM,YAAY,OAAO,IAAI,OAAO,CAAC;CACnD,QAAQ;EACN;CACF;AACF;;AAGA,MAAM,kBAAkB,OACtB,YACA,WACiC;CACjC,IAAI,CAAC,QAEH,OAAO;CAGT,MAAM,SAAS,MAAM,iBAAiB,YAAY,QAAQ,EACxD,cAAc,MAChB,CAAC;CAED,IAAI,OAAO,QACT,OAAO,SAAS,KACd;EACE,OAAO;EACP,QAAQ,OAAO,OAAO,KAAK,WAAW;GACpC,SAAS,MAAM;GACf,MAAM,MAAM,MAAM,KAAK,MACrB,OAAO,MAAM,YAAY,SAAS,IAAI,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,CAChE;EACF,EAAE;CACJ,GACA,EAAE,QAAQ,IAAI,CAChB;CAGF,OAAO,OAAO;AAChB;;AAGA,MAAM,iBAAiB,OACrB,SACA,KACA,qBACsB;CAMtB,OAAO,MALiB,QAAQ;EAC9B,GAAG;EACH,SAAS;CACX,CAAC,KAEmB,SAAS,KAAK,IAAI;AACxC;;AAGA,MAAM,kBAAkB,OACtB,cACA,KACA,kBACA,oBACsB;CACtB,MAAM,cAAc,OAAO,UACzB,mBAAmB,IAAI,QACvB,EAAE,MAAM,SAAS,SAAS,GAC1B,eACF;CAEA,IAAI;EACF,OAAO,MAAMC,QAAY,KACvB,MAAM,QAAQ,iBAAiB,WAAW,GAC1C,YACE,MAAM,eAAe,aAAa,SAAS,KAAK,gBAAgB,CACpE;CACF,SAAS,OAAO;EACd,gBAAgB,aAAa,KAAK;EAClC,MAAM;CACR,UAAU;EACR,YAAY,IAAI;CAClB;AACF;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAa,gBAAb,MAA2C;CACzC,2BAA4B,IAAI,IAA0B;CAC1D;CACA,oBAAmD,CAAC;CACpD,mBAAiD,CAAC;CAClD;CACA;CACA;CACA;;;;;;;;;;;;;;;CAgBA,YAAY,OAA6B,CAAC,GAAG;EAC3C,KAAK,SAAS,cAAc,KAAK,UAAU,WAAW;EACtD,KAAK,kBAAkB,GAAG,KAAK,OAAO;EACtC,KAAK,SAAS,KAAK;EACnB,KAAK,oBAAoB,QAAQ,KAAK,MAAM;EAC5C,KAAK,mBAAmB,QAAQ,KAAK,KAAK;EAC1C,KAAK,kBAAkB,KAAK;EAC5B,KAAK,SAAS,KAAK;CACrB;CA+DA,SACE,MACA,kBACM;EACN,KAAK,SAAS,IACZ,cAAc,IAAI,GAClB,OAAO,qBAAqB,aACxB,EAAE,SAAS,iBAAiB,IAC5B,mBAAmB,gBAAgB,CACzC;EAEA,OAAO;CACT;;;;;;;;;;;;;;;;;;CAmBA,MAAM,OAAO,SAAqC;EAChD,MAAM,cAAc,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;EACzC,MAAM,EAAE,WAAW;EACnB,KAAK,QAAQ,MAAM,4BAA4B,EAAE,MAAM,YAAY,CAAC;EAEpE,MAAM,gBAAgB,YAAY,QAChCA,QAAY,OAAO,GACnB,QAAQ,SACR,cACF;EACA,MAAM,eAAe,OAAO,UAC1B,GAAG,OAAO,GAAG,eACb;GACE,YAAY;IACV,uBAAuB;IACvB,YAAY;GACd;GACA,MAAM,SAAS;EACjB,GACA,aACF;EACA,MAAM,kBAAkB,MAAM,QAAQ,eAAe,YAAY;EAEjE,IAAI;GACF,MAAM,WAAW,MAAMA,QAAY,KACjC,iBACA,YAAY,MAAM,KAAK,SAAS,SAAS,aAAa,eAAe,CACvE;GACA,OAAO,eAAe,cAAc,QAAQ;EAC9C,UAAU;GACR,aAAa,IAAI;EACnB;CACF;;CAGA,MAAc,SACZ,SACA,aACA,iBACmB;EACnB,MAAM,OAAO,KAAK,UAAU,OAAO;EACnC,IAAI,SAAS,MAAM;GACjB,KAAK,QAAQ,KAAK,6BAA6B,EAAE,MAAM,YAAY,CAAC;GACpE,OAAO,iBAAiB;EAC1B;EAEA,MAAM,eAAe,KAAK,SAAS,IAAI,IAAI;EAC3C,IAAI,CAAC,cAAc;GACjB,KAAK,QAAQ,KAAK,6BAA6B,EAAE,KAAK,CAAC;GACvD,OAAO,iBAAiB;EAC1B;EAEA,MAAM,MAAsB;GAC1B;GACA,yBAAS,IAAI,WAAW,CAAC;GACzB;EACF;EAEA,IAAI;GACF,IAAI,UAAU,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;GAExD,MAAM,eAAe,KAAK,KAAK,iBAAiB;GAChD,MAAM,eAAe,KAAK,aAAa,MAAM;GAE7C,IAAI,KAAK,QACP,IAAI;IACF,MAAM,KAAK,OAAO,GAAG;GACvB,SAAS,OAAO;IACd,KAAK,QAAQ,KAAK,+BAA+B;KAAE;KAAO;IAAK,CAAC;IAChE,MAAM;GACR;GAGF,MAAM,aAAa,iBAAiB,GAAG;GACvC,MAAM,mBAAmB,MAAM,gBAC7B,YACA,aAAa,MACf;GAEA,IAAI,4BAA4B,UAC9B,OAAO;GAGT,KAAK,QAAQ,MAAM,4BAA4B,EAAE,KAAK,CAAC;GACvD,MAAM,WAAW,MAAM,gBACrB,cACA,KACA,kBACA,eACF;GAEA,MAAM,cAAc,KAAK,UAAU,aAAa,KAAK;GACrD,MAAM,cAAc,KAAK,UAAU,KAAK,gBAAgB;GAExD,OAAO;EACT,SAAS,OAAO;GACd,OAAO,MAAM,KAAK,YAAY,OAAO,GAAG;EAC1C;CACF;;CAGA,UAAkB,SAAiC;EACjD,MAAM,WAAW,cAAc,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,QAAQ;EAG5D,IAAI,KAAK,WAAW,KAClB,OAAO;EAGT,IAAI,aAAa,KAAK,QACpB,OAAO;EAKT,IAAI,CAAC,SAAS,WAAW,KAAK,eAAe,GAC3C,OAAO;EAGT,OAAO,SAAS,MAAM,KAAK,OAAO,MAAM;CAC1C;;CAGA,MAAc,YACZ,OACA,KACmB;EACnB,IAAI,KAAK,iBAAiB;GACxB,MAAM,kBACJ,iBAAiB,QAAQ,wBAAQ,IAAI,MAAM,uBAAuB;GACpE,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,iBAAiB,GAAG;GACrE,IAAI,eACF,OAAO;EAEX;EAEA,OAAO,SAAS,KACd,EACE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,wBAClD,GACA,EAAE,QAAQ,IAAI,CAChB;CACF;AACF;;;;;;;;;;;;;;;AAgBA,MAAa,uBACX,SACkB,IAAI,cAAc,IAAI"}

package/dist/router.d.ts

@@ -113,6 +113,8 @@ declare class WebhookRouter<TMap = unknown> {
    * ```
    */
   handle(request: Request): Promise<Response>;
+  /** Matches the route, runs hooks/verification/validation, and dispatches the handler. */
+  private dispatch;
   /** Resolves the incoming request's URL to a registered route key, or `null` if it doesn't match the configured prefix. */
   private matchPath;
   /** Builds the error response for a failed request, deferring to the global error hook when set. */

package/dist/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","names":[],"sources":["../src/router.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;cA4La,cAAc;mBACR;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;;;;;;;;;;;;;;;EAgBjB,YAAY,OAAM;;;;;;;;;;;;;;;;;;;;EA6BlB,SACE,2BACA,gBAAgB,oCAEhB,MAAM,MACN,kBAAkB,mBAAmB,WACpC,cAAc,OAAO,OAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;EAgBvD,SAAS,2BAA2B,UAClC,MAAM,MACN,kBAAkB,gBAAgB,YACjC,cAAc,OAAO,OAAO,MAAM;;;;;;;;;;;;;EAarC,SAAS,2BACP,MAAM,MACN,kBAAkB,iBACjB,cAAc,OAAO,OAAO;;;;;;;;;;;;;;;;;;EAgC/B,OAAa,SAAS,UAAU,QAAQ;;UAgEhC;;UAsBM;;;;;;;;;;;;;;;;cAoCH,sBACX,OAAO,yBACN"}
+{"version":3,"file":"router.d.ts","names":[],"sources":["../src/router.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;cAyOa,cAAc;mBACR;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;;;;;;;;;;;;;;;EAgBjB,YAAY,OAAM;;;;;;;;;;;;;;;;;;;;EA6BlB,SACE,2BACA,gBAAgB,oCAEhB,MAAM,MACN,kBAAkB,mBAAmB,WACpC,cAAc,OAAO,OAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;EAgBvD,SAAS,2BAA2B,UAClC,MAAM,MACN,kBAAkB,gBAAgB,YACjC,cAAc,OAAO,OAAO,MAAM;;;;;;;;;;;;;EAarC,SAAS,2BACP,MAAM,MACN,kBAAkB,iBACjB,cAAc,OAAO,OAAO;;;;;;;;;;;;;;;;;;EAgC/B,OAAa,SAAS,UAAU,QAAQ;;UAmC1B;;UAkEN;;UAsBM;;;;;;;;;;;;;;;;cAoCH,sBACX,OAAO,yBACN"}

package/dist/router.js

@@ -1,222 +1,2 @@
-import { standardValidate } from "@zap-studio/validation";
-//#region src/router.ts
-/**
-* Schema-first webhook router with path dispatching, validation, and optional verification.
-*
-* @template TMap - Internal route payload map built incrementally via `register`.
-*/
-const toArray = (value) => {
-	if (value === void 0) return [];
-	return Array.isArray(value) ? value : [value];
-};
-const notFoundResponse = () => Response.json({ error: "not found" }, { status: 404 });
-const bodyDecoder = new TextDecoder();
-/**
-* Normalizes a path to its canonical form: leading slash, no trailing slash,
-* duplicate slashes collapsed. The root path is `"/"`.
-*/
-const normalizePath = (path) => {
-	const withLeadingSlash = path.startsWith("/") ? path : `/${path}`;
-	const collapsed = withLeadingSlash.includes("//") ? withLeadingSlash.replaceAll(/\/{2,}/gu, "/") : withLeadingSlash;
-	return collapsed.length > 1 && collapsed.endsWith("/") ? collapsed.slice(0, -1) : collapsed;
-};
-/** Runs the given before-hooks in order against the request context. */
-const runBeforeHooks = async (ctx, hooks) => {
-	if (!hooks || hooks.length === 0) return;
-	for (const hook of hooks) await hook(ctx);
-};
-/** Runs the given after-hooks in order against the request context and response. */
-const runAfterHooks = async (ctx, response, hooks) => {
-	if (!hooks || hooks.length === 0) return;
-	for (const hook of hooks) await hook(ctx, response);
-};
-/** Builds an internal handler entry from route registration options. */
-const createHandlerEntry = (options) => {
-	const entry = { handler: options.handler };
-	if (options.schema !== void 0) entry.schema = options.schema;
-	if (options.before !== void 0) entry.before = toArray(options.before);
-	if (options.after !== void 0) entry.after = toArray(options.after);
-	return entry;
-};
-/** Parses the request's raw body bytes as JSON, returning `undefined` on invalid JSON. */
-const parseRequestBody = (ctx) => {
-	try {
-		return JSON.parse(bodyDecoder.decode(ctx.rawBody));
-	} catch {
-		return;
-	}
-};
-/** Validates the parsed payload against the route schema, returning either the validated value or a `400` response. */
-const validatePayload = async (parsedJson, schema) => {
-	if (!schema) return parsedJson;
-	const result = await standardValidate(parsedJson, schema, { throwOnError: false });
-	if (result.issues) return Response.json({
-		error: "validation failed",
-		issues: result.issues.map((issue) => ({
-			message: issue.message,
-			path: issue.path?.map((p) => typeof p === "object" && "key" in p ? String(p.key) : String(p))
-		}))
-	}, { status: 400 });
-	return result.value;
-};
-/** Invokes the route handler with the validated payload, defaulting to a `200 "ok"` response. */
-const executeHandler = async (handler, ctx, validatedPayload) => {
-	return await handler({
-		...ctx,
-		payload: validatedPayload
-	}) ?? Response.json("ok");
-};
-/**
-* Main webhook router class.
-*
-* Register routes with typed schemas and call `handle` with a Web API `Request`.
-*
-* @example
-* ```ts
-* import { WebhookRouter } from "@zap-studio/webhooks";
-*
-* const router = new WebhookRouter({ prefix: "/webhooks" });
-*
-* router.register("/stripe", {
-*   schema: stripeEventSchema,
-*   handler: async ({ payload }) => {
-*     console.log("Stripe event:", payload.type);
-*   },
-* });
-*
-* export default { fetch: (request: Request) => router.handle(request) };
-* ```
-*/
-var WebhookRouter = class {
-	handlers = /* @__PURE__ */ new Map();
-	verify;
-	globalBeforeHooks = [];
-	globalAfterHooks = [];
-	globalErrorHook;
-	logger;
-	prefix;
-	prefixWithSlash;
-	/**
-	* Creates a webhook router with optional global hooks and verification behavior.
-	*
-	* @param opts - Router-level options.
-	*
-	* @example
-	* ```ts
-	* const router = new WebhookRouter({
-	*   prefix: "/webhooks",
-	*   verify: createHmacVerifier({ headerName: "x-signature", secret }),
-	*   onError: (error) => Response.json({ error: error.message }, { status: 500 }),
-	* });
-	* ```
-	*/
-	constructor(opts = {}) {
-		this.prefix = normalizePath(opts.prefix ?? "/webhooks");
-		this.prefixWithSlash = `${this.prefix}/`;
-		this.verify = opts.verify;
-		this.globalBeforeHooks = toArray(opts.before);
-		this.globalAfterHooks = toArray(opts.after);
-		this.globalErrorHook = opts.onError;
-		this.logger = opts.logger;
-	}
-	register(path, handlerOrOptions) {
-		this.handlers.set(normalizePath(path), typeof handlerOrOptions === "function" ? { handler: handlerOrOptions } : createHandlerEntry(handlerOrOptions));
-		return this;
-	}
-	/**
-	* Handles an incoming webhook request.
-	*
-	* The request body is read exactly once; hooks and handlers receive the raw
-	* bytes through the webhook context instead of the request stream.
-	*
-	* @param request - Incoming Web API request.
-	* @returns Web API response for the runtime to send back.
-	*
-	* @example
-	* ```ts
-	* // Framework-agnostic: works with any Web API Request/Response runtime.
-	* export async function POST(request: Request): Promise<Response> {
-	*   return router.handle(request);
-	* }
-	* ```
-	*/
-	async handle(request) {
-		const requestPath = new URL(request.url).pathname;
-		this.logger?.debug("webhook delivery attempt", { path: requestPath });
-		const path = this.matchPath(request);
-		if (path === null) {
-			this.logger?.warn("webhook route not matched", { path: requestPath });
-			return notFoundResponse();
-		}
-		const handlerEntry = this.handlers.get(path);
-		if (!handlerEntry) {
-			this.logger?.warn("webhook route not matched", { path });
-			return notFoundResponse();
-		}
-		const ctx = {
-			path,
-			rawBody: /* @__PURE__ */ new Uint8Array(0),
-			request
-		};
-		try {
-			ctx.rawBody = new Uint8Array(await request.arrayBuffer());
-			await runBeforeHooks(ctx, this.globalBeforeHooks);
-			await runBeforeHooks(ctx, handlerEntry.before);
-			if (this.verify) try {
-				await this.verify(ctx);
-			} catch (error) {
-				this.logger?.warn("webhook verification failed", {
-					error,
-					path
-				});
-				throw error;
-			}
-			const parsedJson = parseRequestBody(ctx);
-			const validationResult = await validatePayload(parsedJson, handlerEntry.schema);
-			if (validationResult instanceof Response) return validationResult;
-			this.logger?.debug("webhook handler dispatch", { path });
-			const response = await executeHandler(handlerEntry.handler, ctx, validationResult);
-			await runAfterHooks(ctx, response, handlerEntry.after);
-			await runAfterHooks(ctx, response, this.globalAfterHooks);
-			return response;
-		} catch (error) {
-			return await this.handleError(error, ctx);
-		}
-	}
-	/** Resolves the incoming request's URL to a registered route key, or `null` if it doesn't match the configured prefix. */
-	matchPath(request) {
-		const pathname = normalizePath(new URL(request.url).pathname);
-		if (this.prefix === "/") return pathname;
-		if (pathname === this.prefix) return "/";
-		if (!pathname.startsWith(this.prefixWithSlash)) return null;
-		return pathname.slice(this.prefix.length);
-	}
-	/** Builds the error response for a failed request, deferring to the global error hook when set. */
-	async handleError(error, ctx) {
-		if (this.globalErrorHook) {
-			const normalizedError = error instanceof Error ? error : /* @__PURE__ */ new Error("Internal server error");
-			const errorResponse = await this.globalErrorHook(normalizedError, ctx);
-			if (errorResponse) return errorResponse;
-		}
-		return Response.json({ error: error instanceof Error ? error.message : "Internal server error" }, { status: 500 });
-	}
-};
-/**
-* Factory helper for creating a webhook router instance.
-*
-* @param opts - Optional global router options.
-* @returns A new webhook router.
-*
-* @example
-* ```ts
-* import { createWebhookRouter } from "@zap-studio/webhooks";
-*
-* const router = createWebhookRouter({ prefix: "/webhooks" });
-* router.register("/stripe", { schema: stripeEventSchema, handler });
-* ```
-*/
-const createWebhookRouter = (opts) => new WebhookRouter(opts);
-//#endregion
+import { n as createWebhookRouter, t as WebhookRouter } from "./router-DyyNi3QB.js";
 export { WebhookRouter, createWebhookRouter };
-
-//# sourceMappingURL=router.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zap-studio/webhooks",
-  "version": "1.1.0",
+  "version": "2.0.0",
   "private": false,
   "description": "A lightweight, type-safe, tree-shakeable webhook router with Standard Schema validation, signature verification, and lifecycle hooks.",
   "keywords": [
@@ -46,15 +46,28 @@
     "access": "public"
   },
   "dependencies": {
-    "@zap-studio/logger": "1.0.0",
     "@zap-studio/validation": "1.0.0"
   },
   "devDependencies": {
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/context-async-hooks": "^2.10.0",
+    "@opentelemetry/core": "^2.10.0",
+    "@opentelemetry/sdk-trace-base": "^2.10.0",
     "tsdown": "^0.22.14",
     "typescript": "^7.0.2",
     "vitest": "^4.1.10",
     "zod": "^4.4.3",
-    "@zap-studio/typescript": "0.0.0"
+    "@zap-studio/typescript": "0.0.0",
+    "@zap-studio/logger": "2.0.0"
+  },
+  "peerDependencies": {
+    "@opentelemetry/api": "^1.9.0",
+    "@zap-studio/logger": "2.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@zap-studio/logger": {
+      "optional": true
+    }
   },
   "engines": {
     "node": ">=18.0.0"

package/dist/router.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"router.js","names":[],"sources":["../src/router.ts"],"sourcesContent":["/**\n * Schema-first webhook router primitives.\n *\n * @module @zap-studio/webhooks/router\n */\n\nimport type { Logger } from \"@zap-studio/logger\";\nimport type { StandardSchemaV1 } from \"@zap-studio/validation\";\nimport { standardValidate } from \"@zap-studio/validation\";\n\nimport type {\n  AfterHook,\n  BeforeHook,\n  ErrorHook,\n  HandlerEntry,\n  InferSchemaOutput,\n  RegisterOptions,\n  SchemaRouteOptions,\n  VerifyFn,\n  WebhookContext,\n  WebhookHandler,\n  WebhookRouterOptions,\n} from \"./types.js\";\n\n/**\n * Schema-first webhook router with path dispatching, validation, and optional verification.\n *\n * @template TMap - Internal route payload map built incrementally via `register`.\n */\n\nconst toArray = <T>(value: T | T[] | undefined): T[] => {\n  if (value === undefined) {\n    return [];\n  }\n\n  return Array.isArray(value) ? value : [value];\n};\n\nconst notFoundResponse = (): Response =>\n  Response.json({ error: \"not found\" }, { status: 404 });\n\nconst bodyDecoder = new TextDecoder();\n\n/**\n * Normalizes a path to its canonical form: leading slash, no trailing slash,\n * duplicate slashes collapsed. The root path is `\"/\"`.\n */\nconst normalizePath = (path: string): string => {\n  const withLeadingSlash = path.startsWith(\"/\") ? path : `/${path}`;\n  const collapsed = withLeadingSlash.includes(\"//\")\n    ? withLeadingSlash.replaceAll(/\\/{2,}/gu, \"/\")\n    : withLeadingSlash;\n\n  return collapsed.length > 1 && collapsed.endsWith(\"/\")\n    ? collapsed.slice(0, -1)\n    : collapsed;\n};\n\n/** Runs the given before-hooks in order against the request context. */\nconst runBeforeHooks = async (\n  ctx: WebhookContext,\n  hooks?: BeforeHook[]\n): Promise<void> => {\n  if (!hooks || hooks.length === 0) {\n    return;\n  }\n\n  for (const hook of hooks) {\n    // oxlint-disable-next-line no-await-in-loop -- hooks run sequentially; order + short-circuit matter.\n    await hook(ctx);\n  }\n};\n\n/** Runs the given after-hooks in order against the request context and response. */\nconst runAfterHooks = async (\n  ctx: WebhookContext,\n  response: Response,\n  hooks?: AfterHook[]\n): Promise<void> => {\n  if (!hooks || hooks.length === 0) {\n    return;\n  }\n\n  for (const hook of hooks) {\n    // oxlint-disable-next-line no-await-in-loop -- hooks run sequentially; order + short-circuit matter.\n    await hook(ctx, response);\n  }\n};\n\n/** Builds an internal handler entry from route registration options. */\nconst createHandlerEntry = (\n  options: RegisterOptions<unknown>\n): HandlerEntry => {\n  const entry: HandlerEntry = {\n    handler: options.handler,\n  };\n\n  if (options.schema !== undefined) {\n    entry.schema = options.schema;\n  }\n\n  if (options.before !== undefined) {\n    entry.before = toArray(options.before);\n  }\n\n  if (options.after !== undefined) {\n    entry.after = toArray(options.after);\n  }\n\n  return entry;\n};\n\n/** Parses the request's raw body bytes as JSON, returning `undefined` on invalid JSON. */\nconst parseRequestBody = (ctx: WebhookContext): unknown => {\n  try {\n    return JSON.parse(bodyDecoder.decode(ctx.rawBody));\n  } catch {\n    return undefined;\n  }\n};\n\n/** Validates the parsed payload against the route schema, returning either the validated value or a `400` response. */\nconst validatePayload = async <TPayload>(\n  parsedJson: unknown,\n  schema?: StandardSchemaV1<unknown, TPayload>\n): Promise<TPayload | Response> => {\n  if (!schema) {\n    // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- Without a schema, caller-declared payload type is the route contract.\n    return parsedJson as TPayload;\n  }\n\n  const result = await standardValidate(parsedJson, schema, {\n    throwOnError: false,\n  });\n\n  if (result.issues) {\n    return Response.json(\n      {\n        error: \"validation failed\",\n        issues: result.issues.map((issue) => ({\n          message: issue.message,\n          path: issue.path?.map((p) =>\n            typeof p === \"object\" && \"key\" in p ? String(p.key) : String(p)\n          ),\n        })),\n      },\n      { status: 400 }\n    );\n  }\n\n  return result.value;\n};\n\n/** Invokes the route handler with the validated payload, defaulting to a `200 \"ok\"` response. */\nconst executeHandler = async <TPayload = unknown>(\n  handler: WebhookHandler<TPayload>,\n  ctx: WebhookContext,\n  validatedPayload: TPayload\n): Promise<Response> => {\n  const responded = await handler({\n    ...ctx,\n    payload: validatedPayload,\n  });\n\n  return responded ?? Response.json(\"ok\");\n};\n\n/**\n * Main webhook router class.\n *\n * Register routes with typed schemas and call `handle` with a Web API `Request`.\n *\n * @example\n * ```ts\n * import { WebhookRouter } from \"@zap-studio/webhooks\";\n *\n * const router = new WebhookRouter({ prefix: \"/webhooks\" });\n *\n * router.register(\"/stripe\", {\n *   schema: stripeEventSchema,\n *   handler: async ({ payload }) => {\n *     console.log(\"Stripe event:\", payload.type);\n *   },\n * });\n *\n * export default { fetch: (request: Request) => router.handle(request) };\n * ```\n */\nexport class WebhookRouter<TMap = unknown> {\n  private readonly handlers = new Map<string, HandlerEntry>();\n  private readonly verify: VerifyFn | undefined;\n  private readonly globalBeforeHooks: BeforeHook[] = [];\n  private readonly globalAfterHooks: AfterHook[] = [];\n  private readonly globalErrorHook: ErrorHook | undefined;\n  private readonly logger: Logger | undefined;\n  private readonly prefix: string;\n  private readonly prefixWithSlash: string;\n\n  /**\n   * Creates a webhook router with optional global hooks and verification behavior.\n   *\n   * @param opts - Router-level options.\n   *\n   * @example\n   * ```ts\n   * const router = new WebhookRouter({\n   *   prefix: \"/webhooks\",\n   *   verify: createHmacVerifier({ headerName: \"x-signature\", secret }),\n   *   onError: (error) => Response.json({ error: error.message }, { status: 500 }),\n   * });\n   * ```\n   */\n  constructor(opts: WebhookRouterOptions = {}) {\n    this.prefix = normalizePath(opts.prefix ?? \"/webhooks\");\n    this.prefixWithSlash = `${this.prefix}/`;\n    this.verify = opts.verify;\n    this.globalBeforeHooks = toArray(opts.before);\n    this.globalAfterHooks = toArray(opts.after);\n    this.globalErrorHook = opts.onError;\n    this.logger = opts.logger;\n  }\n\n  /**\n   * Register a webhook handler for a specific path.\n   *\n   * When a schema is provided, `payload` is inferred from the schema output type.\n   *\n   * @param path - Route path relative to configured prefix, starting with `/` (e.g. `\"/stripe\"`).\n   * @param handlerOrOptions - Handler function or schema-based registration options.\n   * @returns The same router instance with an updated internal route type map.\n   *\n   * @example\n   * ```ts\n   * router.register(\"/stripe\", {\n   *   schema: stripeEventSchema,\n   *   handler: async ({ payload }) => {\n   *     console.log(payload.type); // typed from stripeEventSchema\n   *   },\n   * });\n   * ```\n   */\n  register<\n    Path extends `/${string}`,\n    TSchema extends StandardSchemaV1<unknown, unknown>,\n  >(\n    path: Path,\n    handlerOrOptions: SchemaRouteOptions<TSchema>\n  ): WebhookRouter<TMap & Record<Path, InferSchemaOutput<TSchema>>>;\n  /**\n   * Register a webhook handler for a specific path, with schema-less registration options.\n   *\n   * @param path - Route path relative to configured prefix, starting with `/` (e.g. `\"/stripe\"`).\n   * @param handlerOrOptions - Registration options without a schema.\n   * @returns The same router instance with an updated internal route type map.\n   *\n   * @example\n   * ```ts\n   * router.register(\"/ping\", {\n   *   before: (ctx) => console.log(\"received\", ctx.path),\n   *   handler: () => Response.json({ ok: true }),\n   * });\n   * ```\n   */\n  register<Path extends `/${string}`, TPayload>(\n    path: Path,\n    handlerOrOptions: RegisterOptions<TPayload>\n  ): WebhookRouter<TMap & Record<Path, TPayload>>;\n  /**\n   * Register a webhook handler for a specific path, using a plain handler function.\n   *\n   * @param path - Route path relative to configured prefix, starting with `/` (e.g. `\"/stripe\"`).\n   * @param handlerOrOptions - Handler function to process the webhook.\n   * @returns The same router instance with an updated internal route type map.\n   *\n   * @example\n   * ```ts\n   * router.register(\"/health\", () => Response.json({ status: \"ok\" }));\n   * ```\n   */\n  register<Path extends `/${string}`>(\n    path: Path,\n    handlerOrOptions: WebhookHandler\n  ): WebhookRouter<TMap & Record<Path, unknown>>;\n  register(\n    path: string,\n    handlerOrOptions: WebhookHandler | RegisterOptions<unknown>\n  ): this {\n    this.handlers.set(\n      normalizePath(path),\n      typeof handlerOrOptions === \"function\"\n        ? { handler: handlerOrOptions }\n        : createHandlerEntry(handlerOrOptions)\n    );\n\n    return this;\n  }\n\n  /**\n   * Handles an incoming webhook request.\n   *\n   * The request body is read exactly once; hooks and handlers receive the raw\n   * bytes through the webhook context instead of the request stream.\n   *\n   * @param request - Incoming Web API request.\n   * @returns Web API response for the runtime to send back.\n   *\n   * @example\n   * ```ts\n   * // Framework-agnostic: works with any Web API Request/Response runtime.\n   * export async function POST(request: Request): Promise<Response> {\n   *   return router.handle(request);\n   * }\n   * ```\n   */\n  async handle(request: Request): Promise<Response> {\n    const requestPath = new URL(request.url).pathname;\n    this.logger?.debug(\"webhook delivery attempt\", { path: requestPath });\n\n    const path = this.matchPath(request);\n    if (path === null) {\n      this.logger?.warn(\"webhook route not matched\", { path: requestPath });\n      return notFoundResponse();\n    }\n\n    const handlerEntry = this.handlers.get(path);\n    if (!handlerEntry) {\n      this.logger?.warn(\"webhook route not matched\", { path });\n      return notFoundResponse();\n    }\n\n    const ctx: WebhookContext = {\n      path,\n      rawBody: new Uint8Array(0),\n      request,\n    };\n\n    try {\n      ctx.rawBody = new Uint8Array(await request.arrayBuffer());\n\n      await runBeforeHooks(ctx, this.globalBeforeHooks);\n      await runBeforeHooks(ctx, handlerEntry.before);\n\n      if (this.verify) {\n        try {\n          await this.verify(ctx);\n        } catch (error) {\n          this.logger?.warn(\"webhook verification failed\", { error, path });\n          throw error;\n        }\n      }\n\n      const parsedJson = parseRequestBody(ctx);\n      const validationResult = await validatePayload(\n        parsedJson,\n        handlerEntry.schema\n      );\n\n      if (validationResult instanceof Response) {\n        return validationResult;\n      }\n\n      this.logger?.debug(\"webhook handler dispatch\", { path });\n      const response = await executeHandler(\n        handlerEntry.handler,\n        ctx,\n        validationResult\n      );\n\n      await runAfterHooks(ctx, response, handlerEntry.after);\n      await runAfterHooks(ctx, response, this.globalAfterHooks);\n\n      return response;\n    } catch (error) {\n      return await this.handleError(error, ctx);\n    }\n  }\n\n  /** Resolves the incoming request's URL to a registered route key, or `null` if it doesn't match the configured prefix. */\n  private matchPath(request: Request): string | null {\n    const pathname = normalizePath(new URL(request.url).pathname);\n\n    // Root mount: the whole pathname is the route path.\n    if (this.prefix === \"/\") {\n      return pathname;\n    }\n\n    if (pathname === this.prefix) {\n      return \"/\";\n    }\n\n    // Require prefix followed by a segment boundary, then match handlers on\n    // the remainder (e.g. /webhooks/stripe -> /stripe).\n    if (!pathname.startsWith(this.prefixWithSlash)) {\n      return null;\n    }\n\n    return pathname.slice(this.prefix.length);\n  }\n\n  /** Builds the error response for a failed request, deferring to the global error hook when set. */\n  private async handleError(\n    error: unknown,\n    ctx: WebhookContext\n  ): Promise<Response> {\n    if (this.globalErrorHook) {\n      const normalizedError =\n        error instanceof Error ? error : new Error(\"Internal server error\");\n      const errorResponse = await this.globalErrorHook(normalizedError, ctx);\n      if (errorResponse) {\n        return errorResponse;\n      }\n    }\n\n    return Response.json(\n      {\n        error: error instanceof Error ? error.message : \"Internal server error\",\n      },\n      { status: 500 }\n    );\n  }\n}\n\n/**\n * Factory helper for creating a webhook router instance.\n *\n * @param opts - Optional global router options.\n * @returns A new webhook router.\n *\n * @example\n * ```ts\n * import { createWebhookRouter } from \"@zap-studio/webhooks\";\n *\n * const router = createWebhookRouter({ prefix: \"/webhooks\" });\n * router.register(\"/stripe\", { schema: stripeEventSchema, handler });\n * ```\n */\nexport const createWebhookRouter = (\n  opts?: WebhookRouterOptions\n): WebhookRouter => new WebhookRouter(opts);\n"],"mappings":";;;;;;;AA8BA,MAAM,WAAc,UAAoC;CACtD,IAAI,UAAU,KAAA,GACZ,OAAO,CAAC;CAGV,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAC9C;AAEA,MAAM,yBACJ,SAAS,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEvD,MAAM,cAAc,IAAI,YAAY;;;;;AAMpC,MAAM,iBAAiB,SAAyB;CAC9C,MAAM,mBAAmB,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI;CAC3D,MAAM,YAAY,iBAAiB,SAAS,IAAI,IAC5C,iBAAiB,WAAW,YAAY,GAAG,IAC3C;CAEJ,OAAO,UAAU,SAAS,KAAK,UAAU,SAAS,GAAG,IACjD,UAAU,MAAM,GAAG,EAAE,IACrB;AACN;;AAGA,MAAM,iBAAiB,OACrB,KACA,UACkB;CAClB,IAAI,CAAC,SAAS,MAAM,WAAW,GAC7B;CAGF,KAAK,MAAM,QAAQ,OAEjB,MAAM,KAAK,GAAG;AAElB;;AAGA,MAAM,gBAAgB,OACpB,KACA,UACA,UACkB;CAClB,IAAI,CAAC,SAAS,MAAM,WAAW,GAC7B;CAGF,KAAK,MAAM,QAAQ,OAEjB,MAAM,KAAK,KAAK,QAAQ;AAE5B;;AAGA,MAAM,sBACJ,YACiB;CACjB,MAAM,QAAsB,EAC1B,SAAS,QAAQ,QACnB;CAEA,IAAI,QAAQ,WAAW,KAAA,GACrB,MAAM,SAAS,QAAQ;CAGzB,IAAI,QAAQ,WAAW,KAAA,GACrB,MAAM,SAAS,QAAQ,QAAQ,MAAM;CAGvC,IAAI,QAAQ,UAAU,KAAA,GACpB,MAAM,QAAQ,QAAQ,QAAQ,KAAK;CAGrC,OAAO;AACT;;AAGA,MAAM,oBAAoB,QAAiC;CACzD,IAAI;EACF,OAAO,KAAK,MAAM,YAAY,OAAO,IAAI,OAAO,CAAC;CACnD,QAAQ;EACN;CACF;AACF;;AAGA,MAAM,kBAAkB,OACtB,YACA,WACiC;CACjC,IAAI,CAAC,QAEH,OAAO;CAGT,MAAM,SAAS,MAAM,iBAAiB,YAAY,QAAQ,EACxD,cAAc,MAChB,CAAC;CAED,IAAI,OAAO,QACT,OAAO,SAAS,KACd;EACE,OAAO;EACP,QAAQ,OAAO,OAAO,KAAK,WAAW;GACpC,SAAS,MAAM;GACf,MAAM,MAAM,MAAM,KAAK,MACrB,OAAO,MAAM,YAAY,SAAS,IAAI,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,CAChE;EACF,EAAE;CACJ,GACA,EAAE,QAAQ,IAAI,CAChB;CAGF,OAAO,OAAO;AAChB;;AAGA,MAAM,iBAAiB,OACrB,SACA,KACA,qBACsB;CAMtB,OAAO,MALiB,QAAQ;EAC9B,GAAG;EACH,SAAS;CACX,CAAC,KAEmB,SAAS,KAAK,IAAI;AACxC;;;;;;;;;;;;;;;;;;;;;;AAuBA,IAAa,gBAAb,MAA2C;CACzC,2BAA4B,IAAI,IAA0B;CAC1D;CACA,oBAAmD,CAAC;CACpD,mBAAiD,CAAC;CAClD;CACA;CACA;CACA;;;;;;;;;;;;;;;CAgBA,YAAY,OAA6B,CAAC,GAAG;EAC3C,KAAK,SAAS,cAAc,KAAK,UAAU,WAAW;EACtD,KAAK,kBAAkB,GAAG,KAAK,OAAO;EACtC,KAAK,SAAS,KAAK;EACnB,KAAK,oBAAoB,QAAQ,KAAK,MAAM;EAC5C,KAAK,mBAAmB,QAAQ,KAAK,KAAK;EAC1C,KAAK,kBAAkB,KAAK;EAC5B,KAAK,SAAS,KAAK;CACrB;CA+DA,SACE,MACA,kBACM;EACN,KAAK,SAAS,IACZ,cAAc,IAAI,GAClB,OAAO,qBAAqB,aACxB,EAAE,SAAS,iBAAiB,IAC5B,mBAAmB,gBAAgB,CACzC;EAEA,OAAO;CACT;;;;;;;;;;;;;;;;;;CAmBA,MAAM,OAAO,SAAqC;EAChD,MAAM,cAAc,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC;EACzC,KAAK,QAAQ,MAAM,4BAA4B,EAAE,MAAM,YAAY,CAAC;EAEpE,MAAM,OAAO,KAAK,UAAU,OAAO;EACnC,IAAI,SAAS,MAAM;GACjB,KAAK,QAAQ,KAAK,6BAA6B,EAAE,MAAM,YAAY,CAAC;GACpE,OAAO,iBAAiB;EAC1B;EAEA,MAAM,eAAe,KAAK,SAAS,IAAI,IAAI;EAC3C,IAAI,CAAC,cAAc;GACjB,KAAK,QAAQ,KAAK,6BAA6B,EAAE,KAAK,CAAC;GACvD,OAAO,iBAAiB;EAC1B;EAEA,MAAM,MAAsB;GAC1B;GACA,yBAAS,IAAI,WAAW,CAAC;GACzB;EACF;EAEA,IAAI;GACF,IAAI,UAAU,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;GAExD,MAAM,eAAe,KAAK,KAAK,iBAAiB;GAChD,MAAM,eAAe,KAAK,aAAa,MAAM;GAE7C,IAAI,KAAK,QACP,IAAI;IACF,MAAM,KAAK,OAAO,GAAG;GACvB,SAAS,OAAO;IACd,KAAK,QAAQ,KAAK,+BAA+B;KAAE;KAAO;IAAK,CAAC;IAChE,MAAM;GACR;GAGF,MAAM,aAAa,iBAAiB,GAAG;GACvC,MAAM,mBAAmB,MAAM,gBAC7B,YACA,aAAa,MACf;GAEA,IAAI,4BAA4B,UAC9B,OAAO;GAGT,KAAK,QAAQ,MAAM,4BAA4B,EAAE,KAAK,CAAC;GACvD,MAAM,WAAW,MAAM,eACrB,aAAa,SACb,KACA,gBACF;GAEA,MAAM,cAAc,KAAK,UAAU,aAAa,KAAK;GACrD,MAAM,cAAc,KAAK,UAAU,KAAK,gBAAgB;GAExD,OAAO;EACT,SAAS,OAAO;GACd,OAAO,MAAM,KAAK,YAAY,OAAO,GAAG;EAC1C;CACF;;CAGA,UAAkB,SAAiC;EACjD,MAAM,WAAW,cAAc,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,QAAQ;EAG5D,IAAI,KAAK,WAAW,KAClB,OAAO;EAGT,IAAI,aAAa,KAAK,QACpB,OAAO;EAKT,IAAI,CAAC,SAAS,WAAW,KAAK,eAAe,GAC3C,OAAO;EAGT,OAAO,SAAS,MAAM,KAAK,OAAO,MAAM;CAC1C;;CAGA,MAAc,YACZ,OACA,KACmB;EACnB,IAAI,KAAK,iBAAiB;GACxB,MAAM,kBACJ,iBAAiB,QAAQ,wBAAQ,IAAI,MAAM,uBAAuB;GACpE,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,iBAAiB,GAAG;GACrE,IAAI,eACF,OAAO;EAEX;EAEA,OAAO,SAAS,KACd,EACE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,wBAClD,GACA,EAAE,QAAQ,IAAI,CAChB;CACF;AACF;;;;;;;;;;;;;;;AAgBA,MAAa,uBACX,SACkB,IAAI,cAAc,IAAI"}